Function at 0x4a1cd4
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xb
push 0
push 0
dec ecx
jne 0x4a1cdc
push ecx
push ebx
push esi
push edi
mov ebx, dword [0x4a7ef0]
mov esi, dword [0x4a802c]
xor eax, eax
push ebp
push 0x4a33bb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a7aa4]
cmp word [eax], 2
jne 0x4a1d34
mov eax, dword [0x4a7aa4]
mov word [eax], 3
push 0xff
push 0x4a33d4
mov ecx, 0xa
mov edx, 0xfffffffe
mov eax, 1
call fcn.004a3ba8
mov eax, dword [0x4a7f90]
mov ax, word [eax + 0x1a]
mov edx, eax
and dx, 1
cmp dx, 1
jne 0x4a1d4f
inc dword [0x4b9cc0]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 2
cmp dx, 2
jne 0x4a1d67
inc dword [0x4b9cc4]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 4
cmp dx, 4
jne 0x4a1d7f
inc dword [0x4b9cc8]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 8
cmp dx, 8
jne 0x4a1d97
inc dword [0x4b9ccc]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 0x10
cmp dx, 0x10
jne 0x4a1daf
inc dword [0x4b9cd0]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 0x20
cmp dx, 0x20
jne 0x4a1dc7
inc dword [0x4b9cd4]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 0x40
cmp dx, 0x40
jne 0x4a1ddf
inc dword [0x4b9cd8]
mov edx, dword [0x4a7f90]
mov edx, eax
and dx, 0x80
cmp dx, 0x80
jne 0x4a1df9
inc dword [0x4b9cdc]
mov eax, dword [0x4a7f90]
cmp dx, 0x100
jne 0x4a1e0b
inc dword [0x4b9ce0]
mov eax, dword [0x4a7634]
mov ax, word [eax]
dec ax
je 0x4a1e26
dec ax
je 0x4a2749
jmp 0x4a2978
cmp word [0x4b9c4c], 2
jle 0x4a1e3f
inc dword [0x4b9c38]
mov word [0x4b9c4c], 0
cmp byte [0x4b9d2b], 1
jne 0x4a1e57
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404d84
jmp 0x4a1e64
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404d84
cmp byte [0x4b9d2a], 1
jne 0x4a1e7c
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1e89
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d29], 1
jne 0x4a1ea1
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1eae
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d28], 1
jne 0x4a1ec6
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1ed3
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d27], 1
jne 0x4a1eeb
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1ef8
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d26], 1
jne 0x4a1f10
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1f1d
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d25], 1
jne 0x4a1f35
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1f42
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d24], 1
jne 0x4a1f5a
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1f67
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d23], 1
jne 0x4a1f7f
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1f8c
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d22], 1
jne 0x4a1fa4
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1fb1
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d21], 1
jne 0x4a1fc9
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1fd6
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
cmp byte [0x4b9d20], 1
jne 0x4a1fee
lea eax, [ebp - 0x14]
mov edx, 0x4a3460
call fcn.00404fb4
jmp 0x4a1ffb
lea eax, [ebp - 0x14]
mov edx, 0x4a346c
call fcn.00404fb4
push 0xff0000
lea eax, [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, 0x4a3478
call fcn.00404ff8
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 6
mov edx, 0x1a
mov eax, 0x48
call fcn.004a3ba8
mov eax, dword [0x4a7f84]
mov eax, dword [eax]
call fcn.00454b5c
mov eax, dword [eax + 0x14]
mov edx, 0xffff
call fcn.00422a48
push 0
push 0xff00000f
push 0x4a3484
mov ecx, 8
mov edx, 0x19
xor eax, eax
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3494
mov ecx, 8
mov edx, 0x19
mov eax, 4
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a34a4
mov ecx, 8
mov edx, 0x19
mov eax, 8
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a34b4
mov ecx, 8
mov edx, 0x19
mov eax, 0xc
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a34c4
mov ecx, 8
mov edx, 0x19
mov eax, 0x10
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a34d4
mov ecx, 8
mov edx, 0x19
mov eax, 0x14
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a34e4
mov ecx, 8
mov edx, 0x19
mov eax, 0x18
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a34f4
mov ecx, 8
mov edx, 0x19
mov eax, 0x1c
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3500
mov ecx, 8
mov edx, 0x19
mov eax, 0x20
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3510
mov ecx, 8
mov edx, 0x19
mov eax, 0x24
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3520
mov ecx, 8
mov edx, 0x19
mov eax, 0x28
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3530
mov ecx, 8
mov edx, 0x19
mov eax, 0x2c
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3540
mov ecx, 8
mov edx, 0x19
mov eax, 0x30
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3550
mov ecx, 8
mov edx, 0x19
mov eax, 0x34
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3560
mov ecx, 8
mov edx, 0x19
mov eax, 0x38
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3570
mov ecx, 8
mov edx, 0x19
mov eax, 0x3c
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3580
mov ecx, 8
mov edx, 0x19
mov eax, 0x40
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3590
mov ecx, 8
mov edx, 0x19
mov eax, 0x44
call fcn.004a3c64
xor eax, eax
mov dword [ebp - 4], eax
mov edi, dword [0x4a7f90]
push 0xff0000
push 0xffff
push 0
lea ecx, [ebp - 0x20]
movzx eax, word [edi]
mov edx, 4
call fcn.00409280
push dword [ebp - 0x20]
push 0x4a35a0
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.0040506c
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 4]
shl eax, 2
mov ecx, 8
mov edx, 0x1a
call fcn.004a3c64
inc dword [ebp - 4]
add edi, 2
cmp dword [ebp - 4], 0x12
jne 0x4a2289
mov eax, dword [0x4a7f84]
mov eax, dword [eax]
call fcn.00454b5c
mov eax, dword [eax + 0x14]
mov edx, 0xffff
call fcn.00422a48
push 0
push 0xff00000f
push 0x4a35ac
mov ecx, 8
mov edx, 0x16
mov eax, 1
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x24]
mov eax, dword [0x4b9cc0]
call fcn.0040916c
mov eax, dword [ebp - 0x24]
push eax
mov ecx, 8
mov edx, 0x16
mov eax, 0x17
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a35dc
mov ecx, 8
mov edx, 0x17
xor eax, eax
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x28]
mov eax, dword [0x4b9cc4]
call fcn.0040916c
mov eax, dword [ebp - 0x28]
push eax
mov ecx, 8
mov edx, 0x17
mov eax, 0x17
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a360c
mov ecx, 8
mov edx, 0x18
mov eax, 2
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x2c]
mov eax, dword [0x4b9cc8]
call fcn.0040916c
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, 8
mov edx, 0x18
mov eax, 0x17
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3638
mov ecx, 8
mov edx, 0x16
mov eax, 0x1a
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x30]
mov eax, dword [0x4b9ccc]
call fcn.0040916c
mov eax, dword [ebp - 0x30]
push eax
mov ecx, 8
mov edx, 0x16
mov eax, 0x2c
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3660
mov ecx, 8
mov edx, 0x17
mov eax, 0x19
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x34]
mov eax, dword [0x4b9cd0]
call fcn.0040916c
mov eax, dword [ebp - 0x34]
push eax
mov ecx, 8
mov edx, 0x17
mov eax, 0x2c
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a368c
mov ecx, 8
mov edx, 0x18
mov eax, 0x1f
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x38]
mov eax, dword [0x4b9cd4]
call fcn.0040916c
mov eax, dword [ebp - 0x38]
push eax
mov ecx, 8
mov edx, 0x18
mov eax, 0x2c
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a36ac
mov ecx, 8
mov edx, 0x16
mov eax, 0x32
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x3c]
mov eax, dword [0x4b9cd8]
call fcn.0040916c
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, 8
mov edx, 0x16
mov eax, 0x45
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a36d4
mov ecx, 8
mov edx, 0x17
mov eax, 0x2e
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x40]
mov eax, dword [0x4b9cdc]
call fcn.0040916c
mov eax, dword [ebp - 0x40]
push eax
mov ecx, 8
mov edx, 0x17
mov eax, 0x45
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3704
mov ecx, 8
mov edx, 0x18
mov eax, 0x34
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x44]
mov eax, dword [0x4b9ce0]
call fcn.0040916c
mov eax, dword [ebp - 0x44]
push eax
mov ecx, 8
mov edx, 0x18
mov eax, 0x45
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a372c
mov ecx, 8
mov edx, 0x1b
xor eax, eax
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x48]
mov eax, dword [0x4b9cfc]
call fcn.0040916c
mov eax, dword [ebp - 0x48]
push eax
mov ecx, 8
mov edx, 0x1b
mov eax, 0xe
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a374c
mov ecx, 8
mov edx, 0x1b
mov eax, 0x11
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x4c]
mov eax, dword [0x4b9d00]
call fcn.0040916c
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, 8
mov edx, 0x1b
mov eax, 0x22
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3774
mov ecx, 8
mov edx, 0x1b
mov eax, 0x24
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x50]
mov eax, dword [0x4b9d04]
call fcn.0040916c
mov eax, dword [ebp - 0x50]
push eax
mov ecx, 8
mov edx, 0x1b
mov eax, 0x2d
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a3790
mov ecx, 8
mov edx, 0x1b
mov eax, 0x2f
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x54]
mov eax, dword [0x4b9d08]
call fcn.0040916c
mov eax, dword [ebp - 0x54]
push eax
mov ecx, 8
mov edx, 0x1b
mov eax, 0x38
call fcn.004a3c64
push 0
push 0xff00000f
push 0x4a37a8
mov ecx, 8
mov edx, 0x1b
mov eax, 0x3a
call fcn.004a3c64
push 0xff0000
push 0xffff
lea edx, [ebp - 0x58]
mov eax, dword [0x4b9d0c]
call fcn.0040916c
mov eax, dword [ebp - 0x58]
push eax
mov ecx, 8
mov edx, 0x1b
mov eax, 0x4e
call fcn.004a3c64
jmp 0x4a2978
push 0
push 0x4a37d4
mov ecx, 8
mov edx, 0xfffffffe
mov eax, 1
call fcn.004a3ba8
push 0xff0000
push 0x4a38d8
mov ecx, 6
mov edx, 0x1a
mov eax, 0x4a
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x15
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x15
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x16
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x16
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x16
mov eax, 0x37
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x17
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x17
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x17
mov eax, 0x37
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x18
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x18
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x18
mov eax, 0x37
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x19
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x19
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x1a
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x1a
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x1a
mov eax, 0x37
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x1b
xor eax, eax
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x1b
mov eax, 0x23
call fcn.004a3ba8
push 0
push 0x4a38d8
mov ecx, 8
mov edx, 0x1b
mov eax, 0x37
call fcn.004a3ba8
mov eax, dword [0x4a7634]
mov word [eax], 0
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 6]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0x12]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 4]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 4]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 8]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 8]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0xc]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0xa]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0x10]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0xe]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0x14]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0xc]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0x1c]
wait
mov edx, dword [0x4a7e30]
mov dx, word [edx + 0x16]
movzx eax, dx
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0x20]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0x24]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0x18]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebx + 0x2c]
wait
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x10]
test ax, ax
jne 0x4a2a61
mov eax, dword [0x4a7cc8]
mov dword [eax], 0xa3d70a4
mov dword [eax + 4], 0xfd70a3d7
mov word [eax + 8], 0x3ffe
jmp 0x4a2a81
mov ecx, dword [0x4a7e30]
movzx eax, ax
shl eax, 6
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fdiv dword [0x4a3958]
mov eax, dword [0x4a7cc8]
fstp xword [eax]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx]
fsub dword [esi + 0xc0]
fstp dword [ebx]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx + 4]
fsub dword [esi + 0xc8]
fstp dword [ebx + 4]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx + 8]
fsub dword [esi + 0xd0]
fstp dword [ebx + 8]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx + 0xc]
fsub dword [esi + 0xe0]
fstp dword [ebx + 0xc]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx + 0x10]
fsub dword [esi + 0xd8]
fstp dword [ebx + 0x10]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx + 0x14]
fsub dword [esi + 0xc4]
fstp dword [ebx + 0x14]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
fdivr dword [ebx + 0x18]
fsub dword [esi + 0xc4]
fstp dword [ebx + 0x18]
wait
fld dword [ebx]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jae 0x4a2b22
fld dword [ebx]
fmul dword [esi + 0x18]
fstp dword [ebx]
wait
jmp 0x4a2b2a
fld dword [ebx]
fmul dword [esi + 0x14]
fstp dword [ebx]
wait
mov eax, dword [ebx]
mov dword [0x4b9c6c], eax
fld dword [ebx + 4]
fchs
fmul dword [esi + 0x8c]
fstp dword [ebx + 4]
wait
mov eax, dword [ebx + 4]
mov dword [0x4b9c70], eax
fld dword [ebx + 8]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jae 0x4a2b62
fld dword [ebx + 8]
fmul dword [esi + 0x1c]
fstp dword [ebx + 8]
wait
jmp 0x4a2b6c
fld dword [ebx + 8]
fmul dword [esi + 0x20]
fstp dword [ebx + 8]
wait
fld dword [ebx + 8]
fchs
fstp dword [0x4b9c74]
wait
fld dword [ebx + 0xc]
fchs
fmul dword [esi + 0x24]
fstp dword [ebx + 0xc]
wait
mov eax, dword [ebx + 0xc]
mov dword [0x4b9c64], eax
fld dword [ebx + 0x10]
fchs
fmul dword [esi + 0x24]
fstp dword [ebx + 0x10]
wait
mov eax, dword [ebx + 0x10]
mov dword [0x4b9c60], eax
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x16]
and ax, 0x8000
cmp ax, 0x8000
jne 0x4a2bc5
fld dword [0x4a3960]
fsub dword [ebx + 0x20]
fstp dword [ebx + 0x20]
wait
or ecx, 0xffffffff
jmp 0x4a2bca
mov ecx, 1
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x14]
and ax, 0x8000
cmp ax, 0x8000
jne 0x4a2bef
fld dword [0x4a3960]
fsub dword [ebx + 0x24]
fstp dword [ebx + 0x24]
wait
or eax, 0xffffffff
jmp 0x4a2bf4
mov eax, 1
fld dword [ebx + 0x20]
fmul dword [esi + 0x68]
fstp dword [ebx + 0x20]
wait
mov dword [ebp - 0x5c], ecx
fild dword [ebp - 0x5c]
fmul dword [ebx + 0x20]
fstp dword [0x4b9ca4]
wait
fld dword [ebx + 0x24]
fmul dword [esi + 0x68]
fstp dword [ebx + 0x24]
wait
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fmul dword [ebx + 0x24]
fstp dword [0x4b9ca8]
wait
fld dword [ebx + 0x38]
fmul dword [esi + 0x68]
fstp dword [ebx + 0x38]
wait
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fmul dword [ebx + 0x38]
fstp dword [0x4b9cac]
wait
mov eax, dword [0x4a7e30]
mov word [0x4b9c3c], dx
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x20]
and ax, 0xfff
mov word [0x4b9c42], ax
cmp word [0x4b9d56], 0
jle 0x4a2c8a
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x20]
and ax, 0x8000
cmp ax, 0x8000
jne 0x4a2c8a
mov ax, word [0x4b9d56]
mov word [0x4b9d56], ax
cmp word [0x4b9d30], 0
jne 0x4a2ca9
mov ax, word [0x4b9d54]
mov word [0x4b9d56], ax
mov word [0x4b9d30], 1
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x20]
mov edx, eax
and dx, 0x8000
cmp dx, 0x8000
jne 0x4a2cc9
mov byte [0x4b9c30], 1
jmp 0x4a2cd0
mov byte [0x4b9c30], 0
cmp byte [0x4b9c30], 0
je 0x4a2d33
mov edx, dword [0x4a7e30]
and ax, 0xfff
mov word [0x4b9d54], ax
mov ax, word [0x4b9d54]
mov word [0x4b9c42], ax
cmp word [0x4b9c42], 1
jne 0x4a2d0e
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x14]
mov word [0x4b9c3e], ax
cmp word [0x4b9c42], 1
jle 0x4a2d27
mov eax, dword [0x4a7e30]
mov ax, word [eax + 0x1e]
mov word [0x4b9c40], ax
mov ax, word [0x4b9d54]
mov word [0x4b9d56], ax
fld dword [ebx + 0x2c]
fmul dword [0x4a3964]
fdiv dword [0x4a3968]
fstp dword [ebx + 0x2c]
wait
mov eax, dword [ebx + 0x2c]
mov dword [ebx + 0x2c], eax
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0x10]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebp - 8]
wait
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0xc]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp dword [ebp - 0xc]
wait
fld dword [ebp - 0xc]
fcomp dword [0x4a396c]
fnstsw ax
sahf
jae 0x4a2d87
mov dword [ebp - 0xc], 0x45fa0000
fld dword [ebp - 0xc]
fcomp dword [0x4a395c]
fnstsw ax
sahf
je 0x4a2db2
fld dword [ebp - 8]
fsub dword [ebp - 0xc]
fmul dword [0x4a3970]
fdiv dword [ebp - 0xc]
fsubr dword [0x4a3974]
mov eax, dword [0x4a788c]
fstp dword [eax]
wait
mov eax, dword [0x4a77cc]
cmp dword [eax], 0x3d
jle 0x4a2de2
fld xword [0x4a3978]
mov eax, dword [0x4a7920]
fmul dword [eax]
fld xword [0x4a3984]
mov eax, dword [0x4a788c]
fmul dword [eax]
faddp st(1)
mov eax, dword [0x4a7920]
fstp dword [eax]
wait
jmp 0x4a2e47
cmp word [0x4b9c46], 0
jne 0x4a2dfb
mov eax, dword [0x4a788c]
mov eax, dword [eax]
mov edx, dword [0x4a7920]
mov dword [edx], eax
cmp word [0x4b9c46], 0x3d
jne 0x4a2e2c
fld dword [0x4b9c5c]
fdiv dword [0x4a3990]
mov eax, dword [0x4a7920]
fstp dword [eax]
wait
mov word [0x4b9c46], 1
xor eax, eax
mov dword [0x4b9c5c], eax
jmp 0x4a2e47
fld dword [0x4b9c5c]
mov eax, dword [0x4a788c]
fadd dword [eax]
fstp dword [0x4b9c5c]
wait
inc word [0x4b9c46]
mov eax, dword [0x4a7e30]
movzx eax, word [eax + 0xe]
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
mov eax, dword [0x4a7cc8]
fld xword [eax]
mov eax, dword [0x4a783c]
fdivr dword [eax]
fsub dword [esi + 0xc4]
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
mov eax, dword [0x4a7ab8]
cmp word [eax], 1
jl 0x4a2eec
fld xword [0x4a3994]
mov eax, dword [0x4a783c]
fmul dword [eax]
fld xword [0x4a39a0]
fdivp st(1)
fstp dword [ebp - 0x10]
wait
fld dword [ebp - 0x10]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jae 0x4a2ecd
fld xword [0x4a39ac]
fmul dword [ebp - 0x10]
fmul dword [ebp - 0x10]
fld xword [0x4a39b8]
fmul dword [ebp - 0x10]
faddp st(1)
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
jmp 0x4a2eec
fld xword [0x4a39c4]
fmul dword [ebp - 0x10]
fmul dword [ebp - 0x10]
fld xword [0x4a39b8]
fmul dword [ebp - 0x10]
faddp st(1)
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
mov eax, dword [0x4a7ab8]
cmp word [eax], 0
jne 0x4a2f5c
fld xword [0x4a3994]
mov eax, dword [0x4a783c]
fmul dword [eax]
fdiv dword [0x4a39d0]
fstp dword [ebp - 0x10]
wait
fld dword [ebp - 0x10]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jae 0x4a2f3d
fld xword [0x4a39d4]
fmul dword [ebp - 0x10]
fmul dword [ebp - 0x10]
fld xword [0x4a39b8]
fmul dword [ebp - 0x10]
faddp st(1)
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
jmp 0x4a2f5c
fld xword [0x4a39e0]
fmul dword [ebp - 0x10]
fmul dword [ebp - 0x10]
fld xword [0x4a39b8]
fmul dword [ebp - 0x10]
faddp st(1)
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
mov eax, dword [0x4a783c]
fld dword [eax]
fmul dword [esi + 0x9c]
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
mov eax, dword [0x4a783c]
fld dword [eax]
fmul dword [0x4a39ec]
mov eax, dword [0x4a7f54]
fadd dword [eax]
mov eax, dword [0x4a783c]
fstp dword [eax]
wait
mov eax, dword [0x4a783c]
fld dword [eax]
fcomp dword [0x4a39f0]
fnstsw ax
sahf
jbe 0x4a2faa
mov eax, dword [0x4a783c]
mov dword [eax], 0x478ca000
mov eax, dword [0x4a783c]
fld dword [eax]
fcomp dword [0x4a39f4]
fnstsw ax
sahf
jae 0x4a2fc7
mov eax, dword [0x4a783c]
mov dword [eax], 0xc78ca000
mov eax, dword [0x4a76e0]
fld dword [eax]
mov eax, dword [0x4a76e0]
fmul dword [eax]
fld dword [0x4b9c6c]
fmul dword [0x4b9c6c]
fsubp st(1)
fld dword [0x4b9c74]
fmul dword [0x4b9c74]
fsubp st(1)
fabs
fsqrt
fstp dword [0x4b9c70]
wait
fld dword [0x4b9c60]
fabs
fstp dword [0x4b9d38]
wait
fld dword [0x4b9c64]
fabs
fstp dword [0x4b9d3c]
wait
fld dword [0x4b9d38]
fcomp dword [0x4b9d3c]
fnstsw ax
sahf
jae 0x4a3055
fld dword [0x4b9d3c]
fcomp dword [0x4a395c]
fnstsw ax
sahf
je 0x4a3085
fld dword [0x4b9d38]
fdiv dword [0x4b9d3c]
fld1
fpatan
fstp dword [0x4b9c50]
wait
jmp 0x4a3085
fld dword [0x4b9d38]
fcomp dword [0x4a395c]
fnstsw ax
sahf
je 0x4a3085
fld dword [0x4b9d3c]
fdiv dword [0x4b9d38]
fld1
fpatan
fld xword [0x4a39f8]
fsubrp st(1)
fstp dword [0x4b9c50]
wait
fld dword [0x4b9c64]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jbe 0x4a30a2
mov eax, dword [0x4b9c50]
mov dword [0x4b9c50], eax
jmp 0x4a30b5
fld xword [0x4a3a04]
fsub dword [0x4b9c50]
fstp dword [0x4b9c50]
wait
fld dword [0x4b9c60]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jae 0x4a30d5
fld dword [0x4b9c50]
fchs
fstp dword [0x4b9c50]
wait
fld xword [0x4a3a10]
fmul dword [0x4b9c50]
fstp dword [0x4b9c50]
wait
push dword [0x4b9c50]
call fcn.004a4d30
fstp dword [0x4b9c50]
wait
fld dword [0x4b9c50]
fsub dword [0x4b9cb0]
fstp dword [0x4b9cb4]
wait
push dword [0x4b9cb4]
call fcn.004a4d30
fstp dword [0x4b9cb4]
wait
mov eax, dword [0x4b9c50]
mov dword [0x4b9cb0], eax
mov eax, dword [0x4a76e0]
fld dword [eax]
mov eax, dword [0x4a76e0]
fmul dword [eax]
fld dword [0x4b9c6c]
fmul dword [0x4b9c6c]
fsubp st(1)
fld dword [0x4b9c74]
fmul dword [0x4b9c74]
fsubp st(1)
fstp dword [0x4b9d40]
wait
fld dword [0x4b9d40]
fcomp dword [0x4a395c]
fnstsw ax
sahf
ja 0x4a3175
xor eax, eax
mov dword [0x4b9d40], eax
jmp 0x4a3184
fld dword [0x4b9d40]
fsqrt
fstp dword [0x4b9d40]
wait
fld dword [0x4b9c70]
fabs
fld xword [0x4a3a1c]
mov eax, dword [0x4a76e0]
fmul dword [eax]
fcompp
fnstsw ax
sahf
jbe 0x4a31af
fld dword [0x4b9c70]
fabs
fstp dword [0x4b9d40]
wait
fld dword [0x4b9c70]
fcomp dword [0x4a395c]
fnstsw ax
sahf
jb 0x4a31ed
fld dword [esi + 0x30]
fmul dword [0x4b9d40]
fstp dword [0x4b9d44]
wait
fld dword [esi + 0x2c]
fmul dword [0x4b9d40]
fld dword [esi + 0x34]
fmul dword [0x4b9c6c]
faddp st(1)
fstp dword [0x4b9d48]
wait
jmp 0x4a321c
fld dword [esi + 0x30]
fchs
fmul dword [0x4b9d40]
fstp dword [0x4b9d44]
wait
fld dword [esi + 0x2c]
fchs
fmul dword [0x4b9d40]
fld dword [esi + 0x34]
fmul dword [0x4b9c6c]
faddp st(1)
fstp dword [0x4b9d48]
wait
fld dword [0x4b9c50]
fadd dword [esi + 0x40]
fld xword [0x4a3a10]
fdivp st(1)
call fcn.00402a38
fld dword [esi + 0x3c]
fmul dword [0x4b9d40]
fmulp st(1)
fstp dword [0x4b9d4c]
wait
fld dword [0x4b9c50]
fadd dword [esi + 0x40]
fld xword [0x4a3a10]
fdivp st(1)
call fcn.004029f0
fld dword [esi + 0x38]
fmul dword [0x4b9d40]
fmulp st(1)
fstp dword [0x4b9d50]
wait
fld dword [0x4b9c6c]
fadd dword [0x4b9d44]
fstp dword [0x4b9c84]
wait
fld dword [0x4b9c74]
fadd dword [0x4b9d48]
fstp dword [0x4b9c88]
wait
fld dword [0x4b9c6c]
fsub dword [0x4b9d44]
fsub dword [0x4b9d4c]
fstp dword [0x4b9c6c]
wait
fld dword [0x4b9c74]
fadd dword [0x4b9d48]
fadd dword [0x4b9d50]
fstp dword [0x4b9c74]
wait
fld dword [0x4b9c84]
mov eax, dword [0x4a7ae0]
fsub dword [eax]
fstp dword [0x4b9c84]
wait
fld dword [0x4b9c88]
mov eax, dword [0x4a7880]
fsub dword [eax]
fstp dword [0x4b9c88]
wait
fld dword [0x4b9c6c]
mov eax, dword [0x4a7ae0]
fsub dword [eax]
fstp dword [0x4b9c6c]
wait
fld dword [0x4b9c74]
mov eax, dword [0x4a7880]
fsub dword [eax]
fstp dword [0x4b9c74]
wait
mov eax, dword [0x4b9c6c]
mov dword [0x4b9c6c], eax
mov eax, dword [0x4b9c74]
mov dword [0x4b9c74], eax
mov eax, dword [0x4b9c70]
mov dword [0x4b9c70], eax
mov eax, dword [0x4a76e0]
fld dword [eax]
mov eax, dword [0x4a76e0]
fmul dword [eax]
fld dword [0x4b9c6c]
fmul dword [0x4b9c6c]
fsubp st(1)
fld dword [0x4b9c74]
fmul dword [0x4b9c74]
fsubp st(1)
fabs
fsqrt
fstp dword [0x4b9c70]
wait
mov eax, dword [0x4b9c6c]
mov dword [0x4b9c78], eax
mov eax, dword [0x4b9c70]
mov dword [0x4b9c7c], eax
mov eax, dword [0x4b9c74]
mov dword [0x4b9c80], eax
mov eax, dword [0x4a79d0]
mov eax, dword [eax]
mov edx, dword [0x4a7e0c]
mov dword [edx], eax
call fcn.004a1b94
xor eax, eax
mov dword [0x4b9cbc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a33c2
lea eax, [ebp - 0x58]
mov edx, 0x12
call fcn.00404d10
ret