Function at 0x426100
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
push 0x1c
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x60], eax
mov edi, eax
mov esi, 0x5a7073
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push 0x1c
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x64], eax
mov edi, eax
mov esi, 0x5a7073
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push 0xc
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x68], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x5a59af
push ebx
add ebx, 8
push ebx
push 8
call fcn.004bb384
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00425480
pop ebx
push 8
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x6c], eax
mov edi, eax
mov esi, 0x5a44cb
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x426294
push 0x30
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4262b1
push 0x30
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
cmp dword [ebx], 1
jne 0x426388
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4262ef
push 0x5b
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x42630c
push 0x5b
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a4f98
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
jmp 0x429599
cmp dword [ebp + 0xc], 5
jl 0x4263fd
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a684f
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
jmp 0x429599
inc dword [ebp + 0xc]
push 0
mov ebx, 0x4be690
call fcn.004bb396
add esp, 4
mov dword [ebp - 4], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 2
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x42648c
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 8], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 3
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x426507
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 0xb
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x426582
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 0xc
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov eax, 0x5a44af
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0040cf08
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x426641
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x426654
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x42666b
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 0xc
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov eax, 0x5a44af
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0040f0b7
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x42672a
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x42673d
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x426754
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 0xf
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4267cf
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000301
push 0
push 0x10
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x526f10
call fcn.004bb3a2
add esp, 0x28
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x42684a
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a44b1
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a44b1
push 0x80000301
push 0
push 0x11
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x5a6858
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 4
call fcn.004010c1
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x426969
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42699c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4269af
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00420fdf
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4269d7
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov eax, 0x5a686b
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4269f1
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, 0x5a44b1
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x426a0b
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x30]
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.004241ff
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x426aac
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x426abf
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x426ad2
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x426ae2
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x426af9
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x5a689f
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x426b2e
mov eax, 0x5a44b1
push eax
push 4
mov ebx, 0x4bc0d0
call fcn.004bb396
add esp, 0x34
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffff
je 0x426b58
jmp 0x426efb
push 0
mov ebx, 0x4be690
call fcn.004bb396
add esp, 4
mov dword [ebp - 4], eax
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00420fdf
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x426b95
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 0
mov ebx, 0x4bbac0
call fcn.004bb396
add esp, 4
mov dword [ebp - 0x70], eax
push 0x5a68af
push dword [ebp - 0x70]
mov ecx, 2
call fcn.004010c1
add esp, 8
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x426bd6
push ebx
call fcn.004bb37e
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x426be9
mov eax, 0x5a44b1
push eax
push 1
mov ebx, 0x4bcc80
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x78], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x426c18
mov eax, 0x5a44cb
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x426c2c
mov eax, 0x5a44b1
push eax
push 2
mov ebx, 0x4be0c0
call fcn.004bb396
add esp, 0x1c
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x426c4f
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x426c62
push ebx
call fcn.004bb37e
add esp, 4
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x5a68ba
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x426c93
mov eax, 0x5a44b1
push eax
push 4
mov ebx, 0x4bc0d0
call fcn.004bb396
add esp, 0x34
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffff
mov eax, 0
setne al
test eax, eax
je 0x426cc7
mov eax, 0x5a68c8
jmp 0x426ce3
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x426ce3
push eax
mov ebx, eax
call fcn.00401056
inc eax
push eax
call fcn.004bb384
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x426d00
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push dword [ebp - 0x34]
push 0x5a68cc
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 5
call fcn.004010c1
add esp, 0x14
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x426d56
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x426d89
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x426d9c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x426dc6
push 0xae2
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x426de3
push 0xae2
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
cmp dword [ebx], 1
jne 0x426eba
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x426e21
push 0xb0d
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x426e3e
push 0xb0d
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a4f98
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
jmp 0x429599
cmp dword [ebp - 0x30], 5
jl 0x426ed4
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00426100
jmp 0x429599
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 1
push 0x3e8
call fcn.00417b25
jmp 0x4269f5
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a45d6
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a68d7
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x426f59
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x426f6c
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x426f83
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a45d6
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a68ec
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x426fe5
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x426ff8
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42700f
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a45d6
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a6902
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427071
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x427084
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42709b
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
push 0x5a691f
push dword [ebp - 0x44]
push 0x5a69a0
push dword [ebp - 0x44]
push 0x5a69bc
mov ecx, 5
call fcn.004010c1
add esp, 0x14
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4270d8
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push 0x5a5087
push dword [ebp - 0xc]
push 0x5a6a05
push dword [ebp - 8]
push 0x5a6a27
mov ecx, 5
call fcn.004010c1
add esp, 0x14
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x427115
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
mov eax, 0x5a5c20
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
call fcn.004241ff
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4271b2
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4271c5
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4271d5
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4271ec
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 0x1f7
jne 0x427471
xor ecx, ecx
lea eax, [ebp - 0x58]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xa
jg 0x42746e
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00420fdf
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x42723a
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
mov eax, 0x5a5c20
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
call fcn.004241ff
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4272d7
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4272ea
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4272fa
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x427311
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 0x1f7
je 0x427327
jmp 0x42746e
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x427351
push 0x156a
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x42736e
push 0x156a
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
cmp dword [ebx], 1
jne 0x427445
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4273ac
push 0x1595
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4273c9
push 0x1595
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a4f98
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
jmp 0x429599
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 1
push 0x3e8
call fcn.00417b25
pop ebx
pop ecx
jmp 0x427204
add esp, 8
cmp dword [ebp - 0x3c], 0x19c
jne 0x42806c
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a6a38
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a6a41
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4274dc
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4274ef
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x427506
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a44b4
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a5eb3
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427568
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42757b
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x427592
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.004241ff
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x42764a
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x42765d
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427670
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427683
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x427693
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4276aa
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 0
cmp eax, ecx
jl 0x4276d6
push 0x17f2
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5a45d6
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5a6a4c
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040d147
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427742
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427755
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x42776e
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 3
cmp eax, ecx
jl 0x42779c
push 0x1866
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5a44b4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5a5ed2
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427808
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x42781b
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x427834
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x64]
call fcn.00401036
mov eax, 2
cmp eax, ecx
jl 0x427862
push 0x18c4
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5a44b4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5a6a59
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4278ce
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4278e1
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4278fa
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x64]
call fcn.00401036
mov eax, 3
cmp eax, ecx
jl 0x427928
push 0x1922
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5a44b4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5a6a71
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427994
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4279a7
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4279c0
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
push dword [ebp - 0x38]
push 0x5a44b4
push dword [ebp - 0x5c]
push 0x5a6a8b
mov ecx, 4
call fcn.004010c1
add esp, 0x10
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
push 0
mov eax, 0x5a6008
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
call fcn.004241ff
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x427a94
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x427aa7
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427aba
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x427aca
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x427add
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x427af4
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 1
cmp eax, ecx
jl 0x427b20
push 0x1a64
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5a44b4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5a6aa3
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427b8c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427b9f
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x427bb8
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 2
cmp eax, ecx
jl 0x427be6
push 0x1ab0
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x427c0a
push eax
mov ebx, eax
call fcn.00401056
inc eax
push eax
call fcn.004bb384
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x427c1d
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 4
cmp eax, ecx
jl 0x427c4b
push 0x1ad7
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5a44b4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5a6a8b
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040d147
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427cb7
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x427cca
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x427ce3
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 0
cmp eax, ecx
jl 0x427d11
push 0x1b4e
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 1
cmp eax, ecx
jl 0x427d41
push 0x1b4e
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 2
cmp eax, ecx
jl 0x427d71
push 0x1b4e
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 3
cmp eax, ecx
jl 0x427da4
push 0x1b4e
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x7c], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401036
mov eax, 4
cmp eax, ecx
jl 0x427dd7
push 0x1b4e
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x80], ebx
push 0x5a6aa9
mov ebx, dword [ebp - 0x80]
push dword [ebx]
push 0x5a5f04
mov ebx, dword [ebp - 0x7c]
push dword [ebx]
push 0x5a5eea
mov ebx, dword [ebp - 0x78]
push dword [ebx]
push 0x5a6ae4
mov ebx, dword [ebp - 0x74]
push dword [ebx]
push 0x5a6afb
mov ebx, dword [ebp - 0x70]
push dword [ebx]
push 0x5a6b04
mov ecx, 0xb
call fcn.004010c1
add esp, 0x2c
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x427e4c
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push 0x5a6b5e
push dword [ebp - 0x38]
mov ecx, 2
call fcn.004010c1
add esp, 8
mov dword [ebp - 0x70], eax
push 1
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
push 3
mov eax, 0x5a6b82
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
call fcn.004241ff
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x427f16
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x427f29
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x427f3c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x427f4c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x427f5f
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x427f6f
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x427f86
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x74], eax
push dword [ebp - 0x74]
push 0x5a6bba
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 5
call fcn.004010c1
add esp, 0x14
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x427ffe
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42800e
push ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x428052
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x428065
push ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0x3c], 0xc8
cmp dword [ebp - 0x3c], 0xc8
je 0x428188
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a5c67
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x5a6bda
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 4
call fcn.004010c1
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x42812e
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x428161
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x428174
push ebx
call fcn.004bb37e
add esp, 4
push 0xf6533c
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x429599
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x5a6222
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 4
call fcn.004010c1
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4281d7
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42820a
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42821d
push ebx
call fcn.004bb37e
add esp, 4
push 0x5a6be5
push dword [ebp - 0x40]
push 0x5a6c72
mov ecx, 3
call fcn.004010c1
add esp, 0xc
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x42824e
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
mov eax, 0x5a6c7e
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
push 1
push 1
lea eax, [ebp - 0x48]
push eax
call fcn.004241ff
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x428305
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x428318
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x42832b
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42833e
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x428355
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a45d6
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a6ca1
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4283b7
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4283ca
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4283e1
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, 0x5a686b
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4283fb
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.004241ff
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x428499
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4284ac
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4284bf
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4284cf
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4284e6
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov eax, 0x5a500d
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
mov eax, 0x5a5017
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040d147
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x428548
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42855b
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x428572
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x5a44b1
push dword [ebp - 0x50]
call fcn.0040111d
add esp, 8
cmp eax, 0
jne 0x428634
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x5a6ca8
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 4
call fcn.004010c1
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4285de
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x428611
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x428624
push ebx
call fcn.004bb37e
add esp, 4
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00426100
jmp 0x429599
push 0x20
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x70]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x42868c
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4286a0
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4286b4
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4286c8
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
call fcn.004bb37e
add esp, 4
push 0
push 0
push 0
push 0x80000004
push 0
push 0x5a45aa
push 0x80000004
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4286f6
mov eax, 0x5a44b1
push eax
push 3
mov ebx, 0x4bcaf0
call fcn.004bb396
add esp, 0x28
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x6c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42872e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42872a
imul eax, dword [ebx]
jmp 0x42871f
mov ecx, eax
test ecx, ecx
je 0x42874d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x428746
push ebx
push eax
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x428734
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x6c]
call fcn.00401036
mov eax, 0
cmp eax, ecx
jl 0x428781
push 0x2673
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x70]
call fcn.004297ae
mov dword [ebp - 0x74], eax
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.004297ae
mov dword [ebp - 0x78], eax
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x18]
push eax
call fcn.004297ae
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x6c]
call fcn.00401036
mov eax, 2
cmp eax, ecx
jl 0x428804
push 0x27fe
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x80], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x80]
call fcn.004297ae
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x6c]
call fcn.00401036
mov eax, 1
cmp eax, ecx
jl 0x428856
push 0x2882
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x88], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x88]
call fcn.004297ae
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x6c]
call fcn.00401036
mov eax, 3
cmp eax, ecx
jl 0x4288a8
push 0x290c
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x90], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x90]
call fcn.004297ae
mov dword [ebp - 0x94], eax
push 0x5a6cb4
push dword [ebp - 0x94]
push 0x5a6d10
push dword [ebp - 0x8c]
push 0x5a6d6f
push dword [ebp - 0x84]
push 0x5a6dc8
push dword [ebp - 0x7c]
push 0x5a6e23
push dword [ebp - 0x78]
push 0x5a6e81
push dword [ebp - 0x74]
push 0x5a6ede
mov ecx, 0xd
call fcn.004010c1
add esp, 0x34
mov dword [ebp - 0x98], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x428939
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42894c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x42895f
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x428972
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x428985
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x94]
test ebx, ebx
je 0x428998
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x98]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4289af
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 1
mov eax, 0x5a6f37
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4289f1
push ebx
call fcn.004bb37e
add esp, 4
push 0x80000002
push 0
push 1
mov ebx, 6
call fcn.00401015
push 0x80000004
push 0
push 0x5a6f6c
push 0x80000004
push 0
push 0x5a6f7b
push 0x80000004
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x428a35
mov eax, 0x5a44b1
push eax
push 6
mov ebx, 0x4bc900
call fcn.004bb396
add esp, 0x4c
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x428a61
push ebx
call fcn.004bb37e
add esp, 4
push 0x5a6f90
push dword [ebp - 0x7c]
mov ecx, 2
call fcn.004010c1
add esp, 8
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x428a92
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x428aa9
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.004241ff
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x428b3a
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x428b4d
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x428b5d
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x428b74
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x5a44b1
push dword [ebp - 0x50]
call fcn.0040111d
add esp, 8
cmp eax, 0
jne 0x428dd7
xor ecx, ecx
lea eax, [ebp - 0x58]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xa
jg 0x428dd4
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00420fdf
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x428bce
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.004241ff
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x428c5f
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x428c72
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x428c82
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x428c99
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 0xc8
jne 0x428caf
jmp 0x428dd4
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x428cd9
push 0x2ca3
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x428cf6
push 0x2ca3
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
cmp dword [ebx], 1
jne 0x428dcd
mov ebx, dword [0xf65328]
call fcn.00401036
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x428d34
push 0x2cce
push 0x401560c
push 4
call fcn.004bb38a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x428d51
push 0x2cce
push 0x401560c
push 1
call fcn.004bb38a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a4f98
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
jmp 0x429599
pop ebx
pop ecx
jmp 0x428b98
add esp, 8
push 0x20
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x70]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428e2f
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428e43
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428e57
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428e6b
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
push 1
mov eax, 0x5a6fce
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x428eaa
push ebx
call fcn.004bb37e
add esp, 4
push 0x20
call fcn.004bb384
add esp, 4
mov dword [ebp - 0x78], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x428f07
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428f21
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428f35
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428f49
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x428f5d
push ebx
call fcn.004bb37e
add esp, 4
pop ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 1
mov eax, 0x5a7007
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x428fa4
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x428fbb
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 1
mov eax, 0x5a7010
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x428ffd
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0x78]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x429014
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x5a44b1
push dword [ebp - 0x14]
call fcn.0040111d
add esp, 8
cmp eax, 0
jne 0x42913c
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a5110
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x5a701a
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 4
call fcn.004010c1
add esp, 0x10
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x4290e6
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x429119
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42912c
push ebx
call fcn.004bb37e
add esp, 4
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00426100
jmp 0x429599
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push 1
mov eax, 0x5a7036
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42917a
push ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
push 1
mov eax, 0x5a7042
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4291c7
push ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
push 1
mov eax, 0x5a7048
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x429214
push ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
push 1
mov eax, 0x5a704d
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x429261
push ebx
call fcn.004bb37e
add esp, 4
mov dword [ebp - 0xa0], 0
push 0
push dword [ebp - 0xa0]
push 1
mov eax, 0x5a7054
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0xa8], eax
mov ebx, dword [ebp - 0xa4]
test ebx, ebx
je 0x4292ae
push ebx
call fcn.004bb37e
add esp, 4
push dword [ebp - 0xa8]
push 0x5a44b2
push dword [ebp - 0x9c]
push dword [ebp - 0x90]
push 0x5a44b2
push dword [ebp - 0x84]
push 0x5a44b2
push dword [ebp - 0x78]
push 0x5a44b2
push dword [ebp - 0x18]
push dword [ebp - 0x14]
mov ecx, 0xb
call fcn.004010c1
add esp, 0x2c
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42930c
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x42931f
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x429332
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x9c]
test ebx, ebx
je 0x429345
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0xa8]
test ebx, ebx
je 0x429358
push ebx
call fcn.004bb37e
add esp, 4
mov eax, dword [ebp - 0xac]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x42936f
push ebx
call fcn.004bb37e
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0x80000004
push 0
push 0x5a5194
push 0x80000301
push 0
push 8
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0x70], eax
push dword [ebp - 0x34]
push 0x5a705f
push dword [ebp - 8]
push 0x5a4fb6
push dword [ebp - 0x70]
mov ecx, 5
call fcn.004010c1
add esp, 0x14
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x42942b
push ebx
call fcn.004bb37e
add esp, 4
push 1
push 1
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00402911
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42945e
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x429471
push ebx
call fcn.004bb37e
add esp, 4
fild dword [ebp + 8]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
fsub qword [0x5a4502]
fstp qword [ebp - 0x7c]
push 0
mov ebx, 0x4be690
call fcn.004bb396
add esp, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fild dword [ebp - 4]
fstp qword [ebp - 0x90]
fsub qword [ebp - 0x90]
fstp qword [ebp - 0x98]
fld qword [ebp - 0x98]
fdiv qword [0x5a484b]
fstp qword [ebp - 0xa0]
push 0x80000301
push 0
push 1
push 0x80000601
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
push 2
mov ebx, 0x4bbcf0
call fcn.004bb396
add esp, 0x1c
push 0x80000601
push edx
push eax
push 1
mov ebx, 0x4bd6b0
call fcn.004bb396
add esp, 0x10
mov dword [ebp - 0xac], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xac]
test eax, eax
jne 0x42953b
mov eax, 0x5a44b1
push eax
push 0x80000301
push 0
push 0x11
fld qword [ebp - 0x7c]
call fcn.004023ba
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x5270e0
call fcn.004bb3a2
add esp, 0x34
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x429594
push ebx
call fcn.004bb37e
add esp, 4
jmp 0x429599
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4295a9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4295b9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4295c9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4295d9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4295e9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4295f9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x429609
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x429619
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x429629
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x429639
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x429649
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x429659
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x429669
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x429679
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x429689
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x429699
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4296a9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4296b9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x4296c9
push ebx
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4296e7
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4296e3
imul eax, dword [ebx]
jmp 0x4296d8
mov ecx, eax
test ecx, ecx
je 0x429706
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4296ff
push ebx
push eax
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4296ed
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x64]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42972c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x429728
imul eax, dword [ebx]
jmp 0x42971d
mov ecx, eax
test ecx, ecx
je 0x42974b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x429744
push ebx
push eax
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x429732
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x68]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.004bb37e
add esp, 4
mov ebx, dword [ebp - 0x6c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x429781
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42977d
imul eax, dword [ebx]
jmp 0x429772
mov ecx, eax
test ecx, ecx
je 0x4297a0
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x429799
push ebx
push eax
call fcn.004bb37e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x429787
call fcn.004bb37e
add esp, 4
mov esp, ebp
pop ebp
ret 8