Function at 0x48147a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x27c
mov al, byte [esp + 0x2a4]
mov ebx, dword [esp + 0x290]
cmp dword [ebx + 0x38fd74], 0x800
je 0x4810d4
mov dword [ebx + 0x38fd74], 0x800
mov dword [ebx + 0x38fd78], 0xb
sub esp, 0xc
push 0x800
call fcn.00429f98
add esp, 0x10
mov dword [ebx + 0x38fd7c], eax
lea eax, [ebx + 0x4820]
sub esp, 4
push 0x4010
push 0
push eax
call fcn.0080778b
add esp, 0x10
lea esi, [ebx + 0x3e228]
push 0
push pe_nt_image_headers32
push dword [ebx + 0x38fd74]
push esi
call fcn.0042b3a4
add esp, 0x10
xor eax, eax
cmp byte [ebx + 0x3e26c], 0
sete al
sub esp, 0x10
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0042b650
mov al, byte [esp + 0x2b4]
add esp, 0x10
test al, al
je 0x4814cf
lea eax, [ebx + 0x1e090]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3490]
mov dword [esp + 0x214], ecx
fild dword [esp + 0x214]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x1e0b8]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3490]
mov dword [esp + 0x218], ecx
fild dword [esp + 0x218]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x3490]
mov dword [esp + 0x21c], ecx
fild dword [esp + 0x21c]
fstp qword [eax + 0x5d98]
lea eax, [eax + 0x3550]
sub esp, 0xc
push eax
call fcn.0043003c
add esp, 0x10
mov eax, dword [0xb20588]
add eax, 0x3550
sub esp, 0xc
push eax
call fcn.004300ec
add esp, 0x10
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x3494]
mov dword [esp + 0x220], ecx
fild dword [esp + 0x220]
fstp qword [eax + 0x8610]
lea eax, [eax + 0x5dc8]
sub esp, 0xc
push eax
call fcn.0043003c
add esp, 0x10
lea eax, [ebx + 0x38fd20]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x224], ecx
fild dword [esp + 0x224]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov dword [ebx + 0x5e3a4], 0
mov dword [ebx + 0x5e3a8], 0
lea eax, [ebx + 0x5e3b0]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x228], ecx
fild dword [esp + 0x228]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x5e3d8]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x22c], ecx
fild dword [esp + 0x22c]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x38fd48]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3498]
mov dword [esp + 0x230], ecx
fild dword [esp + 0x230]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3490]
mov dword [esp + 0x234], eax
fild dword [esp + 0x234]
fstp qword [0xb699d4]
sub esp, 0xc
push 0xb23804
call fcn.0042e124
add esp, 0x10
call fcn.00480c04
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3494]
mov dword [esp + 0x238], eax
fild dword [esp + 0x238]
fld dword [0xac5010]
fld st(1)
fmul st(1)
fld dword [0xac5014]
fst qword [esp + 0xc]
fmul st(1), st(0)
fadd st(1)
fdivp st(1)
fstp dword [esp + 0x210]
fld dword [esp + 0x210]
fstp dword [ebx + 0x3e214]
fld st(1)
fmul dword [0xac5018]
fmul st(1)
fnstcw word [esp + 0x2e]
movzx eax, word [esp + 0x2e]
mov word [esp + 0x2e], 0xc7f
fldcw word [esp + 0x2e]
mov word [esp + 0x2e], ax
fistp dword [esp + 0x240]
fldcw word [esp + 0x2e]
mov eax, dword [esp + 0x240]
mov dword [ebx + 0x3e21c], eax
fxch st(1)
fmul qword [0xac5020]
fmulp st(1)
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
mov word [esp + 0x2c], 0xc7f
fldcw word [esp + 0x2c]
mov word [esp + 0x2c], ax
fist dword [esp + 0x23c]
fldcw word [esp + 0x2c]
mov eax, dword [esp + 0x23c]
mov dword [ebx + 0x3e220], eax
mov dword [ebx + 0x3e224], 0
mov dword [ebx + 0x3e218], 0
fdivr qword [0xac5028]
sub esp, 0x10
fstp qword [esp]
call fcn.008118a0
add esp, 0x10
fld1
fsubrp st(1)
fstp dword [esp + 0x20c]
fld dword [esp + 0x20c]
fstp dword [ebx + 0x3e210]
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x3494]
mov dword [esp + 0x244], ecx
fild dword [esp + 0x244]
fld st(0)
fadd st(1)
fld qword [esp + 0xc]
fadd st(1)
fdivp st(1)
fxch st(1)
fstp qword [ebx + 0x3e1f0]
mov dword [ebx + 0x3e1fc], 0x3fd99999
mov dword [ebx + 0x3e1f8], 0x9999999a
fstp dword [esp + 0x208]
fld dword [esp + 0x208]
fstp dword [ebx + 0x3e200]
mov dword [ebx + 0x3e208], 0
call fcn.004743a8
lea eax, [ebx + 0xd860]
sub esp, 4
push 0x4000
push 0
push eax
call fcn.0080778b
add esp, 0x10
sub esp, 4
push 0x2000
push 0
push 0xb639c4
call fcn.0080778b
add esp, 0x10
sub esp, 4
push 0x2000
push 0
push 0xb679c4
call fcn.0080778b
add esp, 0x10
mov byte [0xb699c4], 0
mov eax, dword [0xb20588]
mov byte [eax + 0x34d9], 1
mov byte [eax + 0x343c], 1
mov byte [eax + 0x3464], 1
cmp byte [eax + 0x34da], 0
jne 0x4814e1
jmp 0x48172d
mov eax, dword [0xb20588]
cmp byte [eax + 0x34da], 0
je 0x48172d
call fcn.004743a8
call fcn.00480c04
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3494]
mov dword [esp + 0x1f8], eax
fild dword [esp + 0x1f8]
fld dword [0xac5010]
fld st(1)
fmul st(1)
fld dword [0xac5014]
fst qword [esp + 0xc]
fmul st(1), st(0)
fadd st(1)
fdivp st(1)
fstp dword [esp + 0x1f4]
fld dword [esp + 0x1f4]
fstp dword [ebx + 0x3e214]
fld st(1)
fmul dword [0xac5018]
fmul st(1)
fnstcw word [esp + 0x2a]
movzx eax, word [esp + 0x2a]
mov word [esp + 0x2a], 0xc7f
fldcw word [esp + 0x2a]
mov word [esp + 0x2a], ax
fistp dword [esp + 0x200]
fldcw word [esp + 0x2a]
mov eax, dword [esp + 0x200]
mov dword [ebx + 0x3e21c], eax
fxch st(1)
fmul qword [0xac5020]
fmulp st(1)
fnstcw word [esp + 0x28]
movzx eax, word [esp + 0x28]
mov word [esp + 0x28], 0xc7f
fldcw word [esp + 0x28]
mov word [esp + 0x28], ax
fist dword [esp + 0x1fc]
fldcw word [esp + 0x28]
mov eax, dword [esp + 0x1fc]
mov dword [ebx + 0x3e220], eax
mov dword [ebx + 0x3e224], 0
mov dword [ebx + 0x3e218], 0
fdivr qword [0xac5028]
sub esp, 0x10
fstp qword [esp]
call fcn.008118a0
add esp, 0x10
fld1
fsubrp st(1)
fstp dword [esp + 0x1f0]
fld dword [esp + 0x1f0]
fstp dword [ebx + 0x3e210]
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3494]
mov dword [esp + 0x204], eax
fild dword [esp + 0x204]
fld st(0)
fadd st(1)
fld qword [esp + 0xc]
fadd st(1)
fdivp st(1)
fxch st(1)
fstp qword [ebx + 0x3e1f0]
mov dword [ebx + 0x3e1fc], 0x3fd99999
mov dword [ebx + 0x3e1f8], 0x9999999a
fstp dword [esp + 0x1ec]
fld dword [esp + 0x1ec]
fstp dword [ebx + 0x3e200]
mov dword [ebx + 0x3e208], 0
lea eax, [ebx + 0x1a080]
sub esp, 4
push 0x2008
push 0
push eax
call fcn.0080778b
add esp, 0x10
lea eax, [ebx + 0x18070]
sub esp, 4
push 0x2008
push 0
push eax
call fcn.0080778b
add esp, 0x10
lea eax, [ebx + 0x15860]
lea esi, [ebx + 0x5e2d0]
sub esp, 4
push 0x2808
push 0
push eax
call fcn.0080778b
add esp, 0x10
sub esp, 0xc
push esi
call fcn.0042ed38
add esp, 0x10
lea eax, [ebx + 0x5e378]
sub esp, 0xc
push eax
call fcn.0042c058
add esp, 0x10
mov eax, dword [0xb20588]
mov byte [eax + 0x34da], 0
fld qword [eax + 0x34f8]
fst qword [0xb699d4]
cmp dword [eax + 0x3544], 5
jne 0x4816f8
cmp byte [eax + 0x865c], 0
fld dword [eax + 0x8650]
fld st(1)
fadd st(1)
fchs
fxch st(1)
fsubrp st(2)
je 0x4816f4
fstp st(1)
fldz
fstp st(0)
jmp 0x4816fa
fchs
mov eax, dword [eax + 0x3490]
mov dword [esp + 0x1e8], eax
fild dword [esp + 0x1e8]
sub esp, 0x20
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], 0xb23804
call fcn.0042e1b0
add esp, 0x20
mov eax, dword [0xb20588]
movzx esi, byte [ebx + 0x3e26c]
mov cl, byte [eax + 0x354f]
test cl, cl
je 0x48174a
cmp dword [eax + 0x2ef8ec], 6
setne dl
jmp 0x48174c
xor edx, edx
movzx edx, dl
cmp esi, edx
je 0x4817a7
test cl, cl
je 0x481763
cmp dword [eax + 0x2ef8ec], 6
setne al
jmp 0x481765
xor eax, eax
mov byte [ebx + 0x3e26c], al
lea ecx, [ebx + 0x3e228]
xor al, 1
sub esp, 0x10
movzx eax, al
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0042b650
add esp, 0x10
cmp byte [ebx + 0x3e26c], 0
je 0x4817a7
mov eax, dword [0xb20588]
add eax, 0x5dc8
sub esp, 0xc
push eax
call fcn.004300ec
add esp, 0x10
mov eax, dword [0xb20588]
cmp byte [eax + 0x34d9], 0
je 0x481992
call fcn.004743a8
mov esi, dword [0xb20588]
mov edi, dword [esi + 0x3490]
mov eax, dword [esi + 0x3494]
mov dword [esp + 0x1cc], eax
fild dword [esp + 0x1cc]
fmul dword [0xac5018]
fmul dword [0xac5010]
sub esp, 0x10
fstp qword [esp]
call fcn.008117a8
add esp, 0x10
fnstcw word [esp + 0x26]
movzx eax, word [esp + 0x26]
mov word [esp + 0x26], 0xc7f
fldcw word [esp + 0x26]
mov word [esp + 0x26], ax
fistp dword [esp + 0x1d0]
fldcw word [esp + 0x26]
mov eax, dword [esp + 0x1d0]
mov dword [esi + 0x3510], eax
lea eax, [ebx + 0x1e090]
mov dword [esp + 0x1c8], edi
fild dword [esp + 0x1c8]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x1e0b8]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3490]
mov dword [esp + 0x1d4], ecx
fild dword [esp + 0x1d4]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov dword [ebx + 0x5e3a4], 0
mov dword [ebx + 0x5e3a8], 0
lea eax, [ebx + 0x38fd20]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x1d8], ecx
fild dword [esp + 0x1d8]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x5e3b0]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x1dc], ecx
fild dword [esp + 0x1dc]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x5e3d8]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x1e0], ecx
fild dword [esp + 0x1e0]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
lea eax, [ebx + 0x38fd48]
mov ecx, dword [0xb20588]
mov ecx, dword [ecx + 0x3498]
mov dword [esp + 0x1e4], ecx
fild dword [esp + 0x1e4]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov eax, dword [0xb20588]
mov cl, byte [0xb63874]
or cl, byte [eax + 0x34db]
jne 0x4819bb
cmp byte [eax + 0x34d9], 0
jne 0x4819bb
mov cl, byte [ebx + 0x38fd99]
cmp cl, byte [eax + 0x864d]
je 0x4822ad
call fcn.00480c04
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3494]
mov dword [esp + 0x1b8], eax
fild dword [esp + 0x1b8]
fld dword [0xac5010]
fld st(1)
fmul st(1)
fld dword [0xac5014]
fst qword [esp + 0xc]
fmul st(1), st(0)
fadd st(1)
fdivp st(1)
fstp dword [esp + 0x1b4]
fld dword [esp + 0x1b4]
fstp dword [ebx + 0x3e214]
fld st(1)
fmul dword [0xac5018]
fmul st(1)
fnstcw word [esp + 0x24]
movzx eax, word [esp + 0x24]
mov word [esp + 0x24], 0xc7f
fldcw word [esp + 0x24]
mov word [esp + 0x24], ax
fistp dword [esp + 0x1c0]
fldcw word [esp + 0x24]
mov eax, dword [esp + 0x1c0]
mov dword [ebx + 0x3e21c], eax
fxch st(1)
fmul qword [0xac5020]
fmulp st(1)
fnstcw word [esp + 0x22]
movzx eax, word [esp + 0x22]
mov word [esp + 0x22], 0xc7f
fldcw word [esp + 0x22]
mov word [esp + 0x22], ax
fist dword [esp + 0x1bc]
fldcw word [esp + 0x22]
mov eax, dword [esp + 0x1bc]
mov dword [ebx + 0x3e220], eax
mov dword [ebx + 0x3e224], 0
mov dword [ebx + 0x3e218], 0
fdivr qword [0xac5028]
sub esp, 0x10
fstp qword [esp]
call fcn.008118a0
add esp, 0x10
fld1
fsubrp st(1)
fstp dword [esp + 0x1b0]
fld dword [esp + 0x1b0]
fstp dword [ebx + 0x3e210]
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x3494]
mov dword [esp + 0x1c4], ecx
fild dword [esp + 0x1c4]
fld st(0)
fadd st(1)
fld qword [esp + 0xc]
fadd st(1)
fdivp st(1)
fxch st(1)
fstp qword [ebx + 0x3e1f0]
mov dword [ebx + 0x3e1fc], 0x3fd99999
mov dword [ebx + 0x3e1f8], 0x9999999a
fstp dword [esp + 0x1ac]
fld dword [esp + 0x1ac]
fstp dword [ebx + 0x3e200]
mov dword [ebx + 0x3e208], 0
mov esi, dword [eax + 0x3544]
mov ebp, esi
or ebp, 2
cmp ebp, 2
jne 0x481b4d
cmp byte [eax + 0x34a1], 0
je 0x481b4d
mov edx, dword [eax + 0x34bc]
mov dword [esp + 0x1a8], ecx
fldz
fild dword [esp + 0x1a8]
jmp 0x481b77
mov edx, dword [eax + 0x34bc]
mov dword [esp + 0x1a4], edx
fild dword [esp + 0x1a4]
fmul dword [eax + 0x8648]
mov dword [esp + 0x1a0], ecx
fild dword [esp + 0x1a0]
fdiv st(1), st(0)
fxch st(1)
fst qword [ebx + 0x38fd88]
mov dword [esp + 0x19c], edx
fild dword [esp + 0x19c]
fmul dword [eax + 0x8644]
fdivrp st(2)
fxch st(1)
fst qword [ebx + 0x38fd90]
fxch st(1)
fst qword [esp + 0x30]
fxch st(1)
fst qword [esp + 0x78]
cmp esi, 5
je 0x481bc3
cmp esi, 4
je 0x481bd4
cmp esi, 3
jne 0x481cbe
mov esi, 0x7d
jmp 0x481bd9
cmp byte [eax + 0x865c], 1
mov esi, 0x7d
sbb esi, 0
jmp 0x481bd9
mov esi, 0x7c
add eax, 0x2e58c4
mov edx, dword [ebx + 0x38fd74]
mov edi, dword [ebx + 0x38fd78]
mov dword [esp + 0xc], 0
xor ecx, ecx
cmp ebp, 2
sete cl
sub esp, 0x30
fstp qword [esp + 0x10]
fstp qword [esp + 0x18]
mov dword [esp + 0xc], ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 1
mov ecx, edi
call fcn.00484cd0
add esp, 0xc
mov eax, dword [0xb20588]
lea ecx, [eax + 0x2e58c4]
add eax, 0x2eb8dc
sub esp, 4
push 0x802
push eax
push ecx
call dword [0xb206a8]
add esp, 4
cmp byte [esp + 0xc], 0
jne 0x481e93
sub esp, 8
lea eax, [esp + 0x80]
lea ecx, [esp + 0x38]
push eax
push ecx
call fcn.0042a0ec
add esp, 0x10
lea eax, [ebx + 0x3e228]
fld qword [esp + 0x30]
fld qword [esp + 0x78]
mov ecx, dword [ebx + 0x3e24c]
inc ecx
sub ecx, dword [ebx + 0x3e250]
sub esp, 0x30
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], ecx
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0x20], 4
mov dword [esp + 0x1c], 1
call fcn.0042b65c
add esp, 0x30
jmp 0x481ee7
add eax, 0x2e58c4
mov edx, dword [ebx + 0x38fd74]
mov edi, dword [ebx + 0x38fd78]
test esi, esi
je 0x481d37
cmp esi, 2
jne 0x481dcb
sub esp, 0x30
fstp qword [esp + 0x10]
fstp qword [esp + 0x18]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00484cd0
add esp, 0xc
mov esi, dword [0xb20588]
mov eax, dword [esi + 0x3494]
cmp dword [esi + 0x3498], 0x15887
jg 0x481ddb
lea ecx, [esi + 0x34a4]
jmp 0x481de1
xor ecx, ecx
cmp ebp, 2
sete cl
mov esi, ecx
sub esp, 0x30
fstp qword [esp + 0x10]
fstp qword [esp + 0x18]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov ecx, edi
call fcn.00484cd0
add esp, 0xc
mov eax, 0x2eb8dc
add eax, dword [0xb20588]
mov edx, dword [ebx + 0x38fd74]
mov ecx, dword [ebx + 0x38fd78]
fld qword [ebx + 0x38fd88]
fld qword [ebx + 0x38fd90]
sub esp, 0x30
mov dword [esp + 0xc], esi
fstp qword [esp + 0x10]
fstp qword [esp + 0x18]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00484cd0
add esp, 0xc
jmp 0x481e8e
mov cl, 1
mov dword [esp + 0xc], ecx
mov esi, 0x7b
jmp 0x481bf2
lea ecx, [esi + 0x34b0]
mov ecx, dword [ecx]
mov dword [esp + 0x198], ecx
fild dword [esp + 0x198]
fmul dword [0xac5018]
mov dword [esp + 0x194], eax
fidiv dword [esp + 0x194]
fst qword [esp + 0x78]
mov dword [ebx + 0x38fd84], 0x3fc00000
fld qword [0xac5030]
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jbe 0x481e3c
fstp st(0)
mov dword [esp + 0x7c], 0x3fdf5c28
mov dword [esp + 0x78], 0xf5c28f5c
fld qword [0xac5030]
xor eax, eax
cmp ebp, 2
sete al
add esi, 0x2eb8dc
mov edx, dword [ebx + 0x38fd74]
mov ecx, dword [ebx + 0x38fd78]
fld qword [ebx + 0x38fd88]
sub esp, 0x30
mov dword [esp + 0xc], eax
fxch st(1)
fstp qword [esp + 0x10]
fstp qword [esp + 0x18]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 1
mov eax, esi
call fcn.00484cd0
add esp, 0xc
mov esi, 0x7b
sub esp, 0xc
lea eax, [esp + 0x84]
push eax
call fcn.0042a0b4
add esp, 0x10
lea eax, [ebx + 0x3e228]
fld qword [esp + 0x78]
mov ecx, dword [ebx + 0x3e24c]
inc ecx
sub ecx, dword [ebx + 0x3e250]
sub esp, 0x20
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ecx
fstp qword [esp + 4]
mov dword [esp], eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 1
call fcn.0042b784
add esp, 0x20
lea esi, [ebx + 0x5e2d0]
cmp dword [ebx + 0x5e2d0], 0
jne 0x481f6e
fld dword [0x825100]
fld st(0)
fmul dword [0xac5038]
fnstcw word [esp + 0x20]
movzx eax, word [esp + 0x20]
mov word [esp + 0x20], 0xc7f
fldcw word [esp + 0x20]
mov word [esp + 0x20], ax
fistp dword [esp + 0x190]
fldcw word [esp + 0x20]
mov ecx, dword [esp + 0x190]
mov eax, 8
cmp ecx, 8
jl 0x481f51
fld1
fxch st(1)
fucompp
fnstsw ax
sahf
mov eax, ecx
fldz
jbe 0x481f51
fstp st(0)
mov eax, 0x80
fldz
fstp st(0)
lea ecx, [ebx + 0x38fd98]
sub esp, 0xc
push ecx
push eax
push pe_nt_image_headers32
push 0
push esi
call fcn.0042e87c
add esp, 0x20
mov dword [esp + 0xc], ebp
fld qword [ebx + 0x38fd88]
fld qword [ebx + 0x38fd90]
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x3494]
mov dword [esp + 0x18c], ecx
fild dword [esp + 0x18c]
fld st(0)
fdivr dword [0xac503c]
movzx eax, byte [eax + 0x864d]
sub esp, 0x50
fxch st(1)
fstp qword [esp + 0x28]
mov dword [esp + 0x14], eax
fxch st(1)
fstp qword [esp + 0xc]
fxch st(1)
fstp qword [esp + 4]
mov dword [esp], esi
fstp qword [esp + 0x18]
mov dword [esp + 0x24], 0x40080000
mov dword [esp + 0x20], 0
mov dword [esp + 0x34], 0x3ff80000
mov dword [esp + 0x30], 0
mov dword [esp + 0x3c], 0x40100000
mov dword [esp + 0x38], 0
mov dword [esp + 0x44], 0x3fc99999
mov dword [esp + 0x40], 0x9999999a
mov dword [esp + 0x4c], 0x40180000
mov dword [esp + 0x48], 0
call fcn.0042eebc
add esp, 0x50
mov eax, dword [0xb20588]
mov al, byte [eax + 0x864d]
mov byte [ebx + 0x38fd99], al
lea esi, [ebx + 0x5e378]
cmp dword [ebx + 0x5e378], 0
jne 0x482053
push 0x80
push pe_nt_image_headers32
push 0
push esi
call fcn.0042bdd4
add esp, 0x10
mov edi, dword [ebx + 0x5e37c]
mov ebp, dword [ebx + 0x5e390]
inc ebp
sub ebp, dword [ebx + 0x5e394]
cmp dword [esp + 0xc], 2
jne 0x4820ab
mov eax, dword [0xb20588]
cmp byte [eax + 0x34a1], 0
je 0x4820ab
fld qword [ebx + 0x38fd90]
fld st(0)
fchs
sub esp, 0x20
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], ebp
fxch st(1)
fstp qword [esp + 8]
fstp qword [esp]
mov dword [esp + 0x14], 4
call fcn.0042a8bc
add esp, 0x20
jmp 0x4820d9
fld qword [ebx + 0x38fd88]
fld qword [ebx + 0x38fd90]
sub esp, 0x20
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], ebp
fstp qword [esp + 8]
fstp qword [esp]
mov dword [esp + 0x14], 4
call fcn.0042a8bc
add esp, 0x20
sub esp, 4
push edi
push ebp
push esi
call fcn.0042c08c
add esp, 0x10
mov edi, dword [ebx + 0x38fd74]
mov esi, dword [0xb20588]
test edi, edi
jle 0x482173
xor ebp, ebp
fld dword [0xac5040]
fstp qword [esp + 0xc]
nop dword [eax + eax]
fld dword [esi + ebp*8 + 0x2e58c4]
fmul st(0), st(0)
fld dword [esi + ebp*8 + 0x2e58c8]
fmul st(0), st(0)
faddp st(1)
fld qword [esp + 0xc]
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
sahf
ja 0x482131
fstp st(0)
fld qword [esp + 0xc]
sub esp, 0x10
fstp qword [esp]
mov dword [esp + 8], 1
call fcn.00802178
add esp, 0x10
fmul dword [0xac5044]
fstp dword [esp + 0x188]
fld dword [esp + 0x188]
fstp dword [esi + ebp*4 + 0x2e98d4]
inc ebp
cmp edi, ebp
jne 0x482108
mov edi, dword [ebx + 0x38fd74]
mov esi, dword [0xb20588]
mov dword [esi + 0x2e58bc], edi
fld dword [esi + 0x8658]
fst qword [esp + 0x9c]
mov dword [0xb6c7c8], 0
mov dword [0xb6c7c4], 0
mov dword [0xb6c7c0], 0
mov dword [0xb6c7bc], 0
mov dword [0xb6c7b8], 0
mov dword [0xb6c7b4], 0
fld st(0)
fmul st(1)
fst qword [esp + 0x70]
fld dword [esi + 0x8650]
fadd st(0), st(0)
mov eax, dword [esi + 0x3498]
mov dword [esp + 0x184], eax
fidiv dword [esp + 0x184]
fld qword [0xac5048]
fmul st(1), st(0)
fsub st(1)
fstp qword [esp + 0xc]
fxch st(2)
fadd st(0), st(0)
fst qword [esp + 0x60]
fld1
faddp st(2)
fxch st(1)
fst qword [esp + 0x58]
fdivp st(1)
fstp qword [esp + 0x68]
sub esp, 0x10
fstp qword [esp]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
call fcn.0080360c
add esp, 0x10
fld qword [esp + 0x68]
fmulp st(1)
fld qword [esp + 0x9c]
fld st(0)
fmul dword [0xac5050]
fmul st(2)
fstp qword [0xb6c7b4]
fld qword [esp + 0x70]
fstp qword [0xb6c7bc]
fld1
fsubrp st(1)
fld qword [esp + 0xc]
fmulp st(1)
fld qword [esp + 0x60]
fmulp st(2)
fld qword [esp + 0x58]
fsubrp st(2)
fld st(1)
fsqrt
fucom st(0)
fnstsw ax
sahf
jnp 0x482290
fstp st(0)
sub esp, 0x10
fxch st(1)
fstp qword [esp]
fstp qword [esp + 0x1c]
call fcn.00813678
fld qword [esp + 0x1c]
add esp, 0x10
fldz
fxch st(2)
fstp st(2)
fmulp st(1)
fstp qword [0xb6c7c4]
mov eax, dword [0xb20588]
mov byte [eax + 0x34db], 0
mov byte [0xb63874], 0
cmp byte [eax + 0x34dc], 0
je 0x4823ca
mov byte [eax + 0x34dc], 0
mov ecx, dword [eax + 0x86b8]
mov eax, dword [eax + 0x86bc]
mov dword [esp + 0x170], ecx
fld dword [0xac5054]
fst qword [esp + 0xc]
fld st(0)
fidivr dword [esp + 0x170]
mov dword [esp + 0x16c], eax
fxch st(1)
fidivr dword [esp + 0x16c]
lea esi, [ebx + 0x5e3b0]
sub esp, 0x20
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], esi
call fcn.0042f8e8
add esp, 0x20
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3494]
mov dword [esp + 0x174], eax
fild dword [esp + 0x174]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], esi
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x86c0]
mov eax, dword [eax + 0x86c4]
mov dword [esp + 0x17c], ecx
fld qword [esp + 0xc]
fld st(0)
fidivr dword [esp + 0x17c]
mov dword [esp + 0x178], eax
fxch st(1)
fidivr dword [esp + 0x178]
lea esi, [ebx + 0x5e3d8]
sub esp, 0x20
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], esi
call fcn.0042f8e8
add esp, 0x20
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3494]
mov dword [esp + 0x180], eax
fild dword [esp + 0x180]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], esi
mov dword [esp + 0xc], pe_nt_image_headers32
call fcn.0042f8fc
add esp, 0x10
mov esi, dword [esp + 0x298]
mov edi, dword [esp + 0x294]
mov eax, dword [0xb20590]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x482402
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x2320], 0
je 0x482402
push pe_nt_image_headers32
push esi
push edi
push dword [ecx + 0x3490]
call eax
mov ecx, dword [0xb20588]
mov edx, dword [ecx + 0x2ef924]
cmp dword [edx], 0
jle 0x48248a
cmp dword [ecx + 0x2ef934], 2
jne 0x48248a
cmp byte [ecx + 0x2320], 0
je 0x482461
mov eax, dword [0xb20590]
cmp dword [eax + 0xec], 7
jne 0x482461
cmp dword [ecx + 0x17f8], 2
jne 0x482461
mov al, 1
cmp byte [ecx + 0x1786], 0
jne 0x48247e
sub esp, 0xc
push 0x3f800000
push pe_nt_image_headers32
push esi
push edi
push edx
call fcn.00485134
add esp, 0x20
jmp 0x48247c
mov al, 1
cmp byte [ecx + 0x1786], 0
jne 0x48247e
push pe_nt_image_headers32
push esi
push edi
push edx
call fcn.004852c8
add esp, 0x10
xor al, 1
mov ecx, dword [0xb20588]
mov byte [ecx + 0x1786], al
lea edi, [ebx + 0x4010]
fld dword [ecx + 0x3350]
fldz
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
mov esi, edi
jbe 0x4824df
mov edx, 1
mov esi, edi
nop word cs:[eax + eax]
mov eax, dword [esi + 0x800]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x168], edx
fild dword [esp + 0x168]
fld dword [ecx + 0x3350]
fucompp
fnstsw ax
inc edx
sahf
ja 0x4824b8
mov dword [esp + 0xc], edi
lea edx, [ebx + 0x3800]
fld dword [ecx + 0x334c]
fucompp
fnstsw ax
sahf
mov edi, edx
jbe 0x48252f
mov ebp, 1
mov edx, edi
nop word [eax + eax]
mov eax, dword [edx + 0x800]
mov dword [edx], eax
add edx, 4
mov dword [esp + 0x164], ebp
fild dword [esp + 0x164]
fld dword [ecx + 0x334c]
fucompp
fnstsw ax
inc ebp
sahf
ja 0x482508
cmp byte [ecx + 0x2320], 0
je 0x482583
mov eax, dword [0xb20590]
cmp dword [eax + 0xec], 7
jne 0x482583
cmp dword [ecx + 0x17f8], 2
jne 0x482583
sub esp, 4
push pe_nt_image_headers32
push edx
push dword [esp + 0x2a0]
call dword [0xb206a4]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
push esi
push dword [esp + 0x2a4]
call dword [0xb206a4]
add esp, 4
jmp 0x4825ad
push 0
push pe_nt_image_headers32
push edx
push dword [esp + 0x2a0]
call dword [0xb2070c]
push 0
push pe_nt_image_headers32
push esi
push dword [esp + 0x2a4]
call dword [0xb2070c]
mov ebp, dword [esp + 0xc]
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x2320], 0
je 0x4825d7
mov eax, dword [0xb20590]
cmp dword [eax + 0xec], 7
jne 0x4825d7
cmp dword [ecx + 0x17f8], 2
je 0x48260b
sub esp, 4
push pe_nt_image_headers32
push edi
push 0x34000000
call dword [0xb20674]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
push ebp
push 0x34000000
call dword [0xb20674]
add esp, 4
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x34e1], 0
je 0x482722
sub esp, 4
lea esi, [esp + 0x34]
push esi
push pe_nt_image_headers32
push edi
call dword [0xb20688]
add esp, 4
lea eax, [esp + 0x34]
sub esp, 4
push eax
push pe_nt_image_headers32
push ebp
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fldz
fucom st(1)
fnstsw ax
sahf
jbe 0x48265f
fxch st(1)
fchs
fstp dword [esp + 0x30]
fldz
fxch st(1)
fstp st(1)
fld dword [esp + 0x34]
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x482676
fchs
fstp dword [esp + 0x34]
fldz
fstp st(0)
lea eax, [esp + 0x38]
sub esp, 4
push eax
push pe_nt_image_headers32
push edi
call dword [0xb20684]
add esp, 4
lea eax, [esp + 0x3c]
sub esp, 4
push eax
push pe_nt_image_headers32
push ebp
call dword [0xb20684]
add esp, 4
fld dword [esp + 0x38]
fldz
fucom st(1)
fnstsw ax
sahf
jbe 0x4826bf
fxch st(1)
fchs
fstp dword [esp + 0x38]
fldz
fxch st(1)
fstp st(1)
fld dword [esp + 0x3c]
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x4826d6
fchs
fstp dword [esp + 0x3c]
fldz
fstp st(0)
lea eax, [esp + 0x40]
sub esp, 4
push eax
push 4
push esi
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x40]
lea eax, [ebx + 0x1e090]
sub esp, 0x10
fstp qword [esp + 4]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0x160]
fld dword [esp + 0x160]
mov ecx, dword [0xb20588]
fstp dword [ecx + 0x34e4]
mov edx, dword [ecx + 0x3438]
mov eax, edx
shl eax, 4
mov esi, dword [ecx + eax + 0x33e8]
cmp esi, 2
je 0x482816
cmp esi, 1
jne 0x482997
cmp byte [ecx + 0x343c], 0
je 0x48289c
mov byte [ecx + 0x343c], 0
mov edx, dword [ecx + eax + 0x33ec]
mov dword [esp + 0x15c], edx
fild dword [esp + 0x15c]
fdivr dword [0xac5018]
mov edx, dword [ecx + 0x3490]
mov dword [esp + 0x158], edx
fild dword [esp + 0x158]
fxch st(1)
fmul dword [0xac5058]
fld dword [0xac5014]
fld st(1)
fmul st(1)
fmul st(3)
fadd st(1), st(0)
fdivrp st(1)
fxch st(2)
fst qword [ebx + 0x1e0e0]
fxch st(1)
fst qword [ebx + 0x1e0e8]
fxch st(2)
fstp dword [esp + 0x154]
fld dword [esp + 0x154]
fst dword [ebx + 0x1e0f0]
fxch st(1)
fstp qword [ebx + 0x1e100]
fxch st(1)
fstp qword [ebx + 0x1e108]
fst dword [ebx + 0x1e110]
mov dword [ebx + 0x1e0fc], 0
lea edx, [ebx + 0x1e0f8]
mov dword [ebx + 0x1e0f8], 0
mov dword [ebx + 0x1e11c], 0
mov dword [ebx + 0x1e118], 0
fldz
fld st(0)
fxch st(1)
jmp 0x4828b4
fld dword [ecx + eax + 0x33f0]
fldz
fxch st(1)
fucom st(1)
fnstsw ax
sahf
jne 0x48282a
jnp 0x482859
fstp st(1)
fchs
sub esp, 0x10
mov dword [esp + 4], edi
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20664]
fldz
add esp, 4
mov ecx, dword [0xb20588]
mov edx, dword [ecx + 0x3438]
fldz
fstp st(0)
shl edx, 4
fld dword [ecx + edx + 0x33f4]
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jne 0x482874
jnp 0x482999
fchs
sub esp, 0x10
mov dword [esp + 4], ebp
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20664]
add esp, 4
mov ecx, dword [0xb20588]
jmp 0x482997
fld dword [ebx + 0x1e0f0]
fld dword [ebx + 0x1e0fc]
lea edx, [ebx + 0x1e0f8]
fld dword [ebx + 0x1e0f8]
fld dword [ebx + 0x3800]
fadd st(1), st(0)
fxch st(1)
fsubrp st(2)
fxch st(1)
fmul st(2)
fst dword [ebx + 0x3800]
xor esi, esi
nop word cs:[eax + eax]
fld dword [ebx + esi*4 + 0x3804]
fadd st(1), st(0)
fxch st(1)
fsubrp st(2)
fxch st(1)
fmul st(2)
fst dword [ebx + esi*4 + 0x3804]
inc esi
cmp esi, 0x1ff
jne 0x4828d8
fstp st(2)
fstp st(1)
mov esi, dword [ebx + 0x3ffc]
mov dword [edx], esi
fstp dword [ebx + 0x1e0fc]
fld dword [ebx + 0x1e110]
fld dword [ebx + 0x4010]
fld st(0)
fadd dword [ebx + 0x1e118]
fsub dword [ebx + 0x1e11c]
fmul st(2)
fst dword [ebx + 0x4010]
xor edx, edx
nop word [eax + eax]
fld dword [ebx + edx*4 + 0x4014]
fadd st(1), st(0)
fxch st(1)
fsubrp st(2)
fxch st(1)
fmul st(2)
fst dword [ebx + edx*4 + 0x4014]
inc edx
cmp edx, 0x1ff
jne 0x482938
fstp st(2)
fstp st(1)
mov edx, dword [ebx + 0x480c]
mov dword [ebx + 0x1e118], edx
fst dword [ebx + 0x1e11c]
fld dword [ebx + 0x1e0fc]
fsub dword [ebx + 0x1e0f8]
fstp dword [ecx + eax + 0x33f0]
mov dword [esp + 0x150], edx
fsub dword [esp + 0x150]
fstp dword [ecx + eax + 0x33f4]
fldz
fstp st(0)
mov eax, dword [ecx + 0x3370]
cmp eax, 3
ja case.default.0x4829aa
jmp dword [eax*4 + 0x484ca8]
lea eax, [ebx + 0x1000]
push pe_nt_image_headers32
push eax
push edi
push edi
call dword [0xb2069c]
jmp case.default.0x4829aa
lea eax, [ebx + 0x1000]
push pe_nt_image_headers32
push eax
push ebp
push ebp
call dword [0xb2069c]
jmp case.default.0x4829aa
lea esi, [ebx + 0x3000]
push pe_nt_image_headers32
push esi
push ebp
push edi
call dword [0xb20658]
lea eax, [ebx + 0x1000]
push pe_nt_image_headers32
push eax
push esi
push esi
call dword [0xb2069c]
jmp case.default.0x4829aa
mov al, byte [ecx + 0x3375]
xor al, byte [ecx + 0x3374]
mov byte [esp + 0xc], al
mov al, byte [ecx + 0x33e4]
mov byte [esp + 0x58], al
fld dword [ecx + 0x3344]
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jne 0x482a3d
jnp 0x482a95
lea esi, [ebx + 0x3000]
sub esp, 4
push pe_nt_image_headers32
push esi
push ebp
call dword [0xb206a4]
add esp, 4
mov eax, dword [0xb20588]
fld dword [eax + 0x3344]
sub esp, 0x10
mov dword [esp + 4], esi
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20674]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
push edi
push esi
call dword [0xb2065c]
add esp, 4
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x345c], 0
je 0x482c79
cmp byte [ecx + 0x3464], 0
je 0x482b86
mov byte [ecx + 0x3464], 0
mov eax, dword [ecx + 0x3460]
mov ecx, dword [ecx + 0x3490]
mov dword [esp + 0x14c], ecx
fild dword [esp + 0x14c]
fmul dword [0xac5010]
mov dword [esp + 0x148], eax
fild dword [esp + 0x148]
fmul qword [0xac5060]
fld st(1)
fmul st(1)
fld dword [0xac5014]
fld st(1)
fadd st(1)
fdivp st(2)
fxch st(1)
fstp dword [esp + 0x144]
fld dword [esp + 0x144]
fstp dword [ebx + 0x1e120]
fld st(1)
fmul st(1)
fmul st(3)
fadd st(1), st(0)
fdivrp st(1)
fxch st(2)
fst qword [ebx + 0x1e130]
fxch st(1)
fst qword [ebx + 0x1e138]
fxch st(2)
fstp dword [esp + 0x140]
fld dword [esp + 0x140]
fst dword [ebx + 0x1e140]
fxch st(1)
fstp qword [ebx + 0x1e150]
fxch st(1)
fstp qword [ebx + 0x1e158]
fstp dword [ebx + 0x1e160]
mov dword [ebx + 0x1e148], 0
mov dword [ebx + 0x1e168], 0
mov dword [ebx + 0x1e128], 0
lea esi, [ebx + 0x1e124]
mov dword [ebx + 0x1e124], 0
jmp 0x482b8c
lea esi, [ebx + 0x1e124]
sub esp, 4
lea eax, [esp + 0x34]
push eax
push pe_nt_image_headers32
push edi
call dword [0xb20688]
add esp, 4
sub esp, 4
lea eax, [esp + 0x7c]
push eax
push pe_nt_image_headers32
push ebp
call dword [0xb20688]
add esp, 4
fld dword [esi]
fld dword [esp + 0x30]
fucom st(1)
fnstsw ax
sahf
jbe 0x482bcd
fstp st(1)
fst dword [esi]
fldz
fstp st(0)
fld dword [ebx + 0x1e128]
fld dword [esp + 0x78]
fucom st(1)
fnstsw ax
sahf
jbe 0x482bea
fstp st(1)
fst dword [ebx + 0x1e128]
fldz
fstp st(0)
fld dword [0xac5068]
fxch st(2)
fucom st(2)
fnstsw ax
sahf
jbe 0x482c6d
fxch st(1)
fucom st(2)
fstp st(2)
fnstsw ax
sahf
fldz
fxch st(2)
fxch st(1)
jbe 0x482c6d
fstp st(2)
fld st(1)
fsub dword [ebx + 0x1e148]
fmul dword [ebx + 0x1e140]
fsubp st(2)
fxch st(1)
fst dword [ebx + 0x1e148]
fld st(1)
fsub dword [ebx + 0x1e168]
fmul dword [ebx + 0x1e160]
fsubp st(2)
fxch st(1)
fst dword [ebx + 0x1e168]
fld st(1)
fdiv st(1)
mov eax, dword [0xb20588]
fstp dword [eax + 0x3348]
fld dword [ebx + 0x1e120]
fmul st(2), st(0)
fxch st(2)
fstp dword [ebx + 0x1e124]
fmulp st(1)
fstp dword [ebx + 0x1e128]
fldz
fldz
fldz
fxch st(2)
fstp st(0)
fstp st(0)
fstp st(0)
mov ecx, dword [0xb20588]
fld dword [ecx + 0x3348]
fld1
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jne 0x482c8e
jnp 0x482cab
sub esp, 0x10
mov dword [esp + 4], ebp
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20674]
add esp, 4
fldz
fstp st(0)
lea ecx, [ebx + 0x1000]
mov al, byte [esp + 0x58]
cmp byte [esp + 0xc], al
mov eax, dword [0xb2069c]
jne 0x482cce
push pe_nt_image_headers32
push ecx
push ebp
push edi
call eax
jmp case.default.0x4829aa
push pe_nt_image_headers32
push ecx
push edi
push ebp
call eax
mov edi, dword [0xb20588]
cmp byte [edi + 0x354e], 0
je 0x482cf0
cmp dword [edi + 0x2ef8ec], 6
jne 0x482d04
lea esi, [ebx + 0x1000]
cmp dword [edi + 0x3328], 0xffffffa0
jge 0x482d32
jmp 0x482e7a
add edi, 0x3550
lea eax, [ebx + 0x1000]
sub esp, 8
push eax
push edi
call fcn.00430424
add esp, 0x10
mov esi, eax
mov edi, dword [0xb20588]
cmp dword [edi + 0x3328], 0xffffffa0
jl 0x482e7a
fld dword [edi + 0x332c]
xor eax, eax
mov ecx, dword [0xac51b8]
fld dword [0xac506c]
fld dword [0xac5070]
nop word cs:[eax + eax]
mov dword [esp + 0x248], ecx
mov dword [esp + 0x24c], 0
fild qword [esp + 0x248]
fmul st(2)
imul ecx, ecx, 0x19660d
add ecx, 0x3c6ef35f
mov dword [esp + 0x250], ecx
mov dword [esp + 0x254], 0
fild qword [esp + 0x250]
fmul st(3)
faddp st(1)
imul ecx, ecx, 0x19660d
add ecx, 0x3c6ef35f
mov dword [esp + 0x258], ecx
mov dword [esp + 0x25c], 0
fild qword [esp + 0x258]
fmul st(3)
faddp st(1)
imul ecx, ecx, 0x19660d
add ecx, 0x3c6ef35f
mov dword [esp + 0x260], ecx
mov dword [esp + 0x264], 0
fild qword [esp + 0x260]
fmul st(3)
imul ecx, ecx, 0x19660d
add ecx, 0x3c6ef35f
mov dword [esp + 0x268], ecx
mov dword [esp + 0x26c], 0
fild qword [esp + 0x268]
fmul st(4)
faddp st(1)
imul ecx, ecx, 0x19660d
add ecx, 0x3c6ef35f
mov dword [esp + 0x270], ecx
mov dword [esp + 0x274], 0
fild qword [esp + 0x270]
fmul st(4)
faddp st(1)
imul ecx, ecx, 0x19660d
add ecx, 0x3c6ef35f
fxch st(1)
fadd st(2)
fmul st(4)
fadd dword [esi + eax*8]
fstp dword [esi + eax*8]
fadd st(1)
fmul st(3)
fadd dword [esi + eax*8 + 4]
fstp dword [esi + eax*8 + 4]
inc eax
cmp eax, 0x200
jne 0x482d58
fstp st(2)
fstp st(0)
fstp st(0)
mov dword [0xac51b8], ecx
lea ebp, [edi + 0x874c]
sub esp, 0xc
push ebp
call sub.KERNEL32.DLL_EnterCriticalSection
add esp, 0xc
mov eax, dword [edi + 0x8764]
cmp eax, 0x44000
jne 0x482ea5
mov dword [edi + 0x8764], 0
xor eax, eax
lea eax, [edi + eax*8 + 0x876c]
sub esp, 4
push 0x1000
push eax
push esi
call dword [0xb206ac]
add esp, 4
add dword [edi + 0x8764], 0x200
mov eax, dword [edi + 0x8768]
cmp eax, 0x43fff
jg 0x482ee1
add eax, 0x200
mov dword [edi + 0x8768], eax
sub esp, 0xc
push ebp
call sub.KERNEL32.DLL_LeaveCriticalSection
add esp, 0xc
mov ecx, dword [0xb20588]
mov eax, dword [ecx + 0x2ef928]
cmp dword [eax], 0
jle 0x48305e
cmp dword [ecx + 0x2ef934], 2
jne 0x48305e
cmp byte [ecx + 0x2ef93c], 0
je 0x4831b6
cmp byte [ecx + 0x2ef93e], 0
je 0x48301b
sub esp, 4
lea eax, [esp + 0x34]
push eax
push 0x400
push esi
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x482f55
fchs
fstp dword [esp + 0x30]
fldz
fstp st(0)
lea eax, [esp + 0x34]
sub esp, 4
push eax
push 0x400
push esi
call dword [0xb20684]
add esp, 4
fld dword [esp + 0x34]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x482f81
fchs
fst dword [esp + 0x34]
fld dword [esp + 0x30]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
jbe 0x482f96
fstp st(1)
fst dword [esp + 0x30]
fldz
fstp st(0)
lea eax, [ebx + 0x1e0b8]
sub esp, 0x10
fst qword [esp + 0x1c]
fstp qword [esp + 4]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0x134]
fld dword [esp + 0x134]
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
mov ecx, dword [0xb20588]
jbe 0x48301b
fld qword [esp + 0xc]
fld st(0)
fdivr dword [ecx + 0x2ef94c]
fld1
fucom st(1)
fnstsw ax
sahf
ja 0x483011
fstp st(0)
fld st(1)
fmul st(1)
fld dword [0xac5074]
fxch st(1)
fucompp
fnstsw ax
sahf
fldz
fxch st(1)
jbe 0x483011
fstp st(1)
fstp st(0)
fdivr dword [0xac5074]
fldz
fldz
fxch st(2)
fstp st(1)
fstp st(1)
fstp dword [ecx + 0x2ef940]
mov al, 1
cmp byte [ecx + 0x1786], 0
jne 0x483058
mov eax, dword [ecx + 0x2ef928]
fld dword [ecx + 0x2ef940]
sub esp, 0x10
fstp dword [esp + 0xc]
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004808ec
add esp, 0x10
xor al, 1
mov ecx, dword [0xb20588]
mov byte [ecx + 0x1786], al
cmp byte [ecx + 0x2ef960], 0
je 0x48307d
cmp dword [ecx + 0x17f8], 2
jne 0x48307d
cmp byte [ecx + 0x1778], 0
je 0x483226
cmp byte [ecx + 0x8640], 0
je 0x483093
mov eax, esi
call fcn.0041e470
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x2ef961], 0
je 0x483107
cmp byte [ecx + 0x34d9], 0
je 0x48328f
cmp byte [ecx + 0x2ef962], 0
je 0x483159
lea eax, [ebx + 0x367318]
mov edx, dword [ecx + 0x3490]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x12c], edx
fild dword [esp + 0x12c]
mov dword [esp + 0x128], ecx
fild dword [esp + 0x128]
sub esp, 0x20
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], eax
call fcn.0042d88c
fstp st(0)
add esp, 0x20
lea ebp, [ebx + 0x387370]
jmp 0x48319f
fld qword [0xb699d4]
fld qword [ecx + 0x34f8]
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jne 0x483122
jnp 0x483264
fst qword [0xb699d4]
cmp dword [ecx + 0x3544], 5
jne 0x483232
cmp byte [ecx + 0x865c], 0
fld dword [ecx + 0x8650]
fld st(1)
fadd st(1)
fchs
fxch st(1)
fsubrp st(2)
je 0x483152
fstp st(1)
fldz
fstp st(0)
jmp 0x483234
lea ebp, [ebx + 0x5e400]
mov eax, dword [ecx + 0x3490]
mov ecx, dword [ecx + 0x3494]
mov dword [esp + 0x124], eax
fild dword [esp + 0x124]
mov dword [esp + 0x120], ecx
fild dword [esp + 0x120]
sub esp, 0x20
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], ebp
call fcn.0042d21c
fstp st(0)
add esp, 0x20
mov dword [ebx + 0x38fd70], ebp
mov eax, dword [0xb20588]
mov byte [eax + 0x34d9], 0
jmp 0x483295
cmp byte [ecx + 0x2ef93d], 0
je 0x482f1c
sub esp, 4
lea eax, [esp + 0x34]
push eax
push 0x400
push esi
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x4831ef
fchs
fstp dword [esp + 0x30]
fldz
fstp st(0)
lea eax, [esp + 0x34]
sub esp, 4
push eax
push 0x400
push esi
call dword [0xb20684]
add esp, 4
fld dword [esp + 0x34]
fldz
fucom st(1)
fnstsw ax
sahf
jbe 0x484b7b
fxch st(1)
fchs
fst dword [esp + 0x34]
jmp 0x484b7d
mov byte [ecx + 0x34d9], 0
jmp 0x484b6e
fchs
mov eax, dword [ecx + 0x3490]
mov dword [esp + 0x130], eax
fild dword [esp + 0x130]
sub esp, 0x20
fstp qword [esp + 0xc]
fstp qword [esp + 4]
mov dword [esp], 0xb23804
call fcn.0042e1b0
add esp, 0x20
fldz
fstp st(0)
sub esp, 4
push esi
push pe_nt_image_headers32
push 0xb23804
call fcn.0042e298
add esp, 0x10
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x34d9], 0
jne 0x4830a9
mov ebp, dword [ebx + 0x38fd70]
mov edi, dword [esp + 0x29c]
lea eax, [ebx + 0x3873a0]
push eax
push pe_nt_image_headers32
push esi
push ebp
call fcn.0042ab00
add esp, 0x10
lea eax, [ebx + 0x3e228]
mov dword [esp + 0xdc], eax
lea eax, [ebx + 0xd860]
mov dword [esp + 0x9c], eax
lea eax, [ebx + 0xe860]
mov dword [esp + 0xd8], eax
lea eax, [ebx + 0x10860]
mov dword [esp + 0xd4], eax
lea eax, [ebx + 0x5e3b0]
mov dword [esp + 0xb4], eax
lea eax, [ebx + 0x4820]
mov dword [esp + 0x58], eax
lea eax, [ebx + 0x8840]
mov dword [esp + 0x84], eax
lea eax, [ebx + 0x5e2d0]
mov dword [esp + 0xcc], eax
lea eax, [ebx + 0x5e378]
mov dword [esp + 0xb8], eax
lea eax, [ebx + 0x15860]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x5e3a4]
mov dword [esp + 0xd0], eax
lea eax, [ebx + 0x1d090]
mov dword [esp + 0x54], eax
lea eax, [ebx + 0x1a080]
mov dword [esp + 0x68], eax
lea eax, [ebx + 0x38fd48]
mov dword [esp + 0xbc], eax
lea eax, [ebx + 0x38f3f8]
mov dword [esp + 0xc0], eax
lea eax, [ebx + 0x5e3d8]
mov dword [esp + 0xc8], eax
lea eax, [ebx + 0x1b880]
mov dword [esp + 0x98], eax
lea eax, [ebx + 0x7820]
mov dword [esp + 0x88], eax
lea eax, [ebx + 0x2000]
mov dword [esp + 0x90], eax
lea eax, [ebx + 0x19870]
mov dword [esp + 0x80], eax
lea eax, [ebx + 0x18070]
mov dword [esp + 0xa8], eax
lea eax, [ebx + 0x17860]
mov dword [esp + 0x8c], eax
lea eax, [ebx + 0x16060]
mov dword [esp + 0xb0], eax
lea eax, [ebx + 0x3e270]
mov dword [esp + 0xa4], eax
lea ebp, [ebx + 0x1c090]
lea eax, [ebx + 0x38fd20]
mov dword [esp + 0x94], eax
mov edx, dword [ebx + 0x3873a4]
mov ecx, dword [ebx + 0x3873a8]
lea eax, [ebx + 0x8814]
mov dword [esp + 0xc4], eax
lea eax, [ebx + 0x881c]
mov dword [esp + 0xac], eax
mov dword [esp + 0x70], 0
mov dword [esp + 0x60], ebp
nop dword [eax + eax]
sub edx, ecx
cmp edx, 0x200
jl 0x484b6e
shl ecx, 2
mov eax, dword [ebx + 0x3873b0]
add eax, ecx
add ecx, dword [ebx + 0x3873b4]
push pe_nt_image_headers32
push ebx
push ecx
push eax
call dword [0xb2069c]
add dword [ebx + 0x3873a8], 0x200
mov edx, dword [0xb20588]
mov ecx, dword [edx + 0x2ef92c]
cmp dword [ecx], 0
jle 0x483528
cmp dword [edx + 0x2ef934], 2
jne 0x483528
cmp byte [edx + 0x8749], 0
je 0x4834b9
cmp byte [edx + 0x2ef8f2], 0
je 0x4834ea
cmp byte [ecx + 4], 0
jne 0x4834a6
cmp byte [ecx + 0x104f0], 0
je 0x483528
push 0x3f800000
push 0
push ebx
push ecx
call fcn.004808ec
add esp, 0x10
jmp 0x483528
mov al, 1
cmp byte [edx + 0x1786], 0
jne 0x483521
fld dword [edx + 0x2ef95c]
sub esp, 0x10
fstp dword [esp + 0xc]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004808ec
add esp, 0x10
jmp 0x483519
mov al, 1
cmp byte [edx + 0x1786], 0
jne 0x483521
fld dword [edx + 0x2ef95c]
sub esp, 0x10
fstp dword [esp + 0xc]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 8], pe_nt_image_headers32
call fcn.004808ec
add esp, 0x10
xor al, 1
mov edx, dword [0xb20588]
mov byte [edx + 0x1786], al
nop
sub esp, 4
push 0
push ebx
push dword [esp + 0xe8]
call fcn.0042b8ac
add esp, 0x10
mov esi, eax
cmp byte [ebx + 0x3e26c], 0
je 0x483561
mov eax, dword [0xb20588]
add eax, 0x5dc8
sub esp, 8
push esi
push eax
call fcn.00430424
add esp, 0x10
mov esi, eax
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x2ef8ec]
cmp ecx, 3
je 0x4836c8
cmp ecx, 4
jne 0x483818
fld dword [eax + 0x2ef90c]
fmul dword [0xac5078]
fstp dword [esp + 0x14]
sub esp, 4
push 0x400
push ebp
push esi
call dword [0xb206a4]
add esp, 4
sub esp, 0x10
mov dword [esp + 4], ebp
fld dword [esp + 0x24]
fstp dword [esp]
mov dword [esp + 8], 0x400
call dword [0xb20674]
add esp, 4
mov eax, dword [0xb20588]
cmp byte [eax + 0x34e2], 0
je 0x483674
sub esp, 4
lea eax, [esp + 0x34]
push eax
push 0x400
push ebp
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x4835fe
fchs
fstp dword [esp + 0x30]
fldz
fstp st(0)
sub esp, 4
lea eax, [esp + 0x38]
push eax
push 0x400
push ebp
call dword [0xb20684]
add esp, 4
fld dword [esp + 0x34]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x48362a
fchs
fst dword [esp + 0x34]
fld dword [esp + 0x30]
fucompp
fnstsw ax
xor ecx, ecx
sahf
setbe cl
fld dword [esp + ecx*4 + 0x30]
fmul dword [0xac507c]
sub esp, 0x10
fstp qword [esp + 4]
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0x118]
fld dword [esp + 0x118]
mov eax, dword [0xb20588]
fstp dword [eax + 0x34e8]
sub esp, 0xc
push 0
push 1
push 0x400
push dword [esp + 0x6c]
push ebp
call dword [0xb20708]
add esp, 0xc
xor eax, eax
mov edx, dword [esp + 0x2a0]
nop
mov ecx, dword [ebx + eax*8 + 0x1d090]
mov dword [edx + eax*4], ecx
mov ecx, dword [ebx + eax*8 + 0x1d094]
mov dword [edi + eax*4], ecx
inc eax
cmp eax, 0x200
jne 0x483698
jmp 0x483804
fld dword [eax + 0x2ef90c]
fmul dword [0xac5078]
fstp dword [esp + 0x14]
sub esp, 4
push 0x400
push ebp
push esi
call dword [0xb206a4]
add esp, 4
sub esp, 0x10
mov dword [esp + 4], ebp
fld dword [esp + 0x24]
fstp dword [esp]
mov dword [esp + 8], 0x400
call dword [0xb20674]
add esp, 4
mov eax, dword [0xb20588]
cmp byte [eax + 0x34e2], 0
je 0x4837be
sub esp, 4
lea eax, [esp + 0x34]
push eax
push 0x400
push ebp
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x483748
fchs
fstp dword [esp + 0x30]
fldz
fstp st(0)
sub esp, 4
lea eax, [esp + 0x38]
push eax
push 0x400
push ebp
call dword [0xb20684]
add esp, 4
fld dword [esp + 0x34]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x483774
fchs
fst dword [esp + 0x34]
fld dword [esp + 0x30]
fucompp
fnstsw ax
xor ecx, ecx
sahf
setbe cl
fld dword [esp + ecx*4 + 0x30]
fmul dword [0xac507c]
sub esp, 0x10
fstp qword [esp + 4]
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0x11c]
fld dword [esp + 0x11c]
mov eax, dword [0xb20588]
fstp dword [eax + 0x34e8]
sub esp, 0xc
push 0
push 1
push 0x400
push dword [esp + 0x6c]
push ebp
call dword [0xb20708]
add esp, 0xc
xor eax, eax
mov edx, dword [esp + 0x2a0]
nop dword [eax]
mov ecx, dword [ebx + eax*8 + 0x1d090]
mov dword [edi + eax*4], ecx
mov ecx, dword [ebx + eax*8 + 0x1d094]
mov dword [edx + eax*4], ecx
inc eax
cmp eax, 0x200
jne 0x4837e8
inc dword [esp + 0x70]
jmp 0x483822
mov dword [eax + 0x34e8], 0xbf800000
sub esp, 4
push 0x3000
push dword [esp + 0xe0]
push dword [esp + 0xa8]
call fcn.008076d9
add esp, 0x10
sub esp, 4
push pe_nt_image_headers32
push dword [esp + 0xdc]
push esi
call dword [0xb206a8]
add esp, 4
mov eax, dword [0xb20588]
cmp dword [eax + 0x3544], 2
ja 0x483874
cmp byte [eax + 0x2ef963], 0
je 0x483c5d
mov dword [0xb699cc], 0
mov dword [0xb699c8], 0
mov byte [eax + 0x86a0], 0
fldz
fnstcw word [esp + 0x1e]
movzx ecx, word [esp + 0x1e]
mov word [esp + 0x1e], 0xc7f
fldcw word [esp + 0x1e]
mov word [esp + 0x1e], cx
fistp dword [esp + 0x108]
fldcw word [esp + 0x1e]
mov ecx, dword [esp + 0x108]
mov dword [eax + 0x86ac], ecx
mov eax, dword [ebx + 0x38fd7c]
push dword [eax + 4]
push dword [eax]
push dword [esp + 0x60]
push dword [esp + 0xa8]
call dword [0xb206b8]
mov esi, dword [0xb20588]
mov eax, dword [esi + 0x3544]
cmp eax, 3
jb 0x483989
mov dword [ebx + 0x881c], 0
mov dword [ebx + 0x8818], 0
mov ecx, dword [esp + 0x58]
mov dword [ecx + 0xc], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx], 0
je 0x48393f
cmp eax, 5
jne 0x4839e8
mov cl, byte [esi + 0x865c]
test cl, cl
je 0x4839e8
mov ecx, dword [ebx + 0x8818]
mov dword [ebx + 0x4828], ecx
mov dword [ebx + 0x482c], 0x80000000
xor ecx, ecx
mov edx, dword [esp + 0xc4]
nop word cs:[eax + eax]
fld dword [edx]
mov ebp, dword [edx - 4]
mov dword [ebx + ecx*8 + 0x4830], ebp
fchs
fstp dword [ebx + ecx*8 + 0x4834]
add edx, 0xfffffff8
inc ecx
cmp ecx, 0x3fe
jne 0x483968
cmp eax, 1
jne 0x4839e8
mov eax, dword [esi + 0x3548]
cmp eax, 3
ja 0x48399e
cmp eax, 2
jne 0x4839e8
sub esp, 4
push 0x4010
push 0
push dword [esp + 0x90]
call fcn.0080778b
add esp, 0x10
xor eax, eax
mov ecx, dword [esp + 0xac]
nop dword [eax + eax]
mov edx, dword [ecx - 4]
mov dword [ebx + eax*8 + 0x8848], edx
fld dword [ecx]
fchs
fstp dword [ebx + eax*8 + 0x884c]
add ecx, 0xfffffff8
inc eax
cmp eax, 0x3ff
jne 0x4839c8
cmp byte [esi + 0x2b8794], 0
je 0x483ab2
mov eax, dword [ebx + 0x38fd7c]
push dword [eax + 0x24]
push dword [eax + 0x20]
push dword [esp + 0x70]
push dword [esp + 0x64]
call dword [0xb206d4]
sub esp, 4
push pe_nt_image_headers32
mov edi, dword [esp + 0x14]
push edi
push dword [esp + 0xa4]
call dword [0xb206a4]
add esp, 4
mov ebp, dword [0xb20588]
lea esi, [ebp + 0x228770]
sub esp, 0xc
push esi
call sub.KERNEL32.DLL_EnterCriticalSection
add esp, 0xc
mov eax, dword [ebp + 0x228788]
cmp eax, 0x24000
jne 0x483a5d
mov dword [ebp + 0x228788], 0
xor eax, eax
lea eax, [ebp + eax*4 + 0x228790]
sub esp, 4
push 0x800
push eax
push edi
call dword [0xb206ac]
add esp, 4
add dword [ebp + 0x228788], 0x200
mov eax, dword [ebp + 0x22878c]
cmp eax, 0x23fff
jg 0x483a99
add eax, 0x200
mov dword [ebp + 0x22878c], eax
sub esp, 0xc
push esi
call sub.KERNEL32.DLL_LeaveCriticalSection
add esp, 0xc
mov esi, dword [0xb20588]
mov edi, dword [esp + 0x29c]
cmp byte [esi + 0x2ef964], 0
mov ebp, dword [esp + 0x60]
jne 0x483ae1
add esi, 0x2eb8dc
sub esp, 4
push 0x800
push dword [esp + 0x60]
push esi
call dword [0xb2066c]
add esp, 4
mov esi, dword [0xb20588]
mov eax, dword [esi + 0x3544]
cmp eax, 1
jne 0x483d18
mov eax, dword [esi + 0x3548]
cmp eax, 3
ja 0x483cde
cmp eax, 2
je 0x483cde
fldz
fstp st(0)
mov al, byte [esi + 0x3514]
test al, al
fld1
jne 0x483b20
fstp st(0)
fld dword [esi + 0x3540]
mov ecx, dword [esi + 0x3548]
cmp ecx, 1
ja 0x483ba8
cmp byte [esi + 0x86a0], 0
je case.0x483d23.0
fstp dword [esp + 0x14]
mov eax, dword [ebx + 0x38fd7c]
sub esp, 4
push dword [eax + 4]
push dword [eax]
push dword [esp + 0x64]
call dword [0xb206d0]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
mov ebp, dword [esp + 0x98]
push ebp
push dword [esp + 0x94]
call dword [0xb206a8]
add esp, 4
mov eax, dword [0xb20588]
cmp dword [eax + 0x3548], 0
je 0x483fab
sub esp, 4
push pe_nt_image_headers32
mov esi, dword [esp + 0x70]
push esi
push ebp
call dword [0xb2072c]
add esp, 4
jmp 0x483fc2
test al, al
jne 0x483bb9
cmp byte [esi + 0x353c], 0
je case.0x483d23.0
fstp dword [esp + 0x14]
cmp ecx, 2
je 0x483bf1
mov eax, dword [ebx + 0x38fd7c]
push dword [eax + 0x24]
push dword [eax + 0x20]
push dword [esp + 0xb0]
push dword [esp + 0x64]
call dword [0xb206d4]
mov eax, dword [0xb20588]
cmp dword [eax + 0x3548], 3
je 0x483dbb
mov eax, dword [ebx + 0x38fd7c]
push dword [eax + 0x24]
push dword [eax + 0x20]
push dword [esp + 0xb8]
push dword [esp + 0x90]
call dword [0xb206d4]
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x3548]
cmp eax, 2
je 0x483fc8
cmp eax, 4
jne 0x483dbb
sub esp, 4
push pe_nt_image_headers32
mov esi, dword [esp + 0x88]
push esi
push dword [esp + 0x98]
call dword [0xb2065c]
add esp, 4
fld dword [esp + 0x14]
fmul dword [0xac5018]
jmp 0x483fdc
add eax, 0x2ef968
sub esp, 4
push 0
push esi
push eax
call fcn.0042b8ac
add esp, 0x10
mov ebp, eax
sub esp, 4
push pe_nt_image_headers32
push 0xb699e4
push ebp
call dword [0xb2068c]
add esp, 4
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x86c8]
test eax, eax
je 0x483e78
cmp eax, 1
jne 0x483f10
sub esp, 4
lea eax, [esp + 0x34]
push eax
push pe_nt_image_headers32
push 0xb699e4
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fmul qword [0xac5080]
fstp dword [esp + 0x114]
fld dword [esp + 0x114]
jmp 0x483f0a
add esi, 0x2eb8dc
sub esp, 4
push 0x400
push dword [esp + 0x8c]
push esi
call dword [0xb2066c]
add esp, 4
mov esi, dword [0xb20588]
mov eax, dword [esi + 0x3544]
nop word cs:[eax + eax]
cmp eax, 5
ja case.default.0x483d23
fld1
jmp dword [eax*4 + 0x484cb8]
fstp st(0)
mov eax, dword [ebx + 0x38fd7c]
push dword [eax + 0x24]
push dword [eax + 0x20]
push dword [esp + 0x70]
push dword [esp + 0x64]
call dword [0xb206d4]
mov esi, dword [esp + 0x98]
jmp 0x48400a
fstp dword [esp + 0x14]
mov eax, dword [ebx + 0x38fd7c]
sub esp, 4
push dword [eax + 4]
push dword [eax]
push dword [esp + 0x64]
call dword [0xb206d0]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
mov ebp, dword [esp + 0x98]
push ebp
push dword [esp + 0x94]
call dword [0xb206a8]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
mov esi, dword [esp + 0x70]
push esi
push ebp
mov ebp, dword [esp + 0x70]
call dword [0xb2068c]
fld dword [esp + 0x18]
add esp, 4
jmp 0x483fdc
mov esi, dword [esp + 0x80]
jmp 0x483fd8
xor esi, esi
jmp 0x48400a
fstp st(0)
mov eax, dword [ebx + 0x38fd7c]
sub esp, 4
push dword [eax + 4]
push dword [eax]
push dword [esp + 0x64]
call dword [0xb206d0]
add esp, 4
fld dword [ebx + 0x38fd84]
sub esp, 0x20
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 8], pe_nt_image_headers32
call fcn.0042ddb8
add esp, 0x20
fld1
fsub dword [ebx + 0x3e200]
fld dword [ebx + 0x3e208]
xor eax, eax
fld st(0)
fsubr dword [ebx + eax*4 + 0x1a080]
fmul st(2)
faddp st(1)
inc eax
cmp eax, 0x200
jne 0x483e38
fstp st(1)
fld st(0)
fmul dword [0xac5088]
mov esi, dword [0xb20588]
cmp dword [esi + 0x3498], 0x15887
jg 0x4849f1
lea eax, [esi + 0x34a4]
jmp 0x4849f7
sub esp, 4
push pe_nt_image_headers32
push 0xb6a1e4
push 0xb699e4
call dword [0xb206a4]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
push 0xb6a1e4
push 0xb6a1e4
call dword [0xb20668]
add esp, 4
push 1
lea eax, [esp + 0x34]
push eax
push pe_nt_image_headers32
push 0xb6a1e4
call dword [0xb20680]
fld dword [esp + 0x30]
sub esp, 0x10
fst dword [esp + 0x24]
fstp dword [esp]
call fcn.007fc364
add esp, 0x10
fucom st(0)
fnstsw ax
sahf
jnp 0x483ef6
fstp st(0)
sub esp, 0x10
fld dword [esp + 0x24]
fstp dword [esp]
call fcn.007fc364
add esp, 0x10
fmul qword [0xac5080]
fstp dword [esp + 0x110]
fld dword [esp + 0x110]
fst dword [esp + 0x30]
jmp 0x483f14
fld dword [esp + 0x30]
sub esp, 0x10
fstp qword [esp + 4]
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0x10c]
fld dword [esp + 0x10c]
fstp dword [0xb699d0]
mov eax, dword [0xb20588]
cmp byte [eax + 0x86a0], 0
mov ecx, dword [eax + 0x3544]
je 0x483f70
cmp ecx, 2
je 0x483f94
add eax, 0x2ef9f0
sub esp, 4
push 0
push esi
push eax
call fcn.0042b8ac
add esp, 0x10
jmp 0x483f92
cmp ecx, 1
ja 0x483f94
cmp dword [eax + 0x3538], 0
jle 0x483f94
add eax, 0x2ef9ac
sub esp, 4
push 0
push esi
push eax
call fcn.0042b8ac
add esp, 0x10
mov ebp, eax
mov eax, ebp
call fcn.00485478
fst dword [0xb699cc]
mov eax, dword [0xb20588]
jmp 0x483891
sub esp, 4
push pe_nt_image_headers32
mov esi, dword [esp + 0x70]
push esi
push ebp
call dword [0xb206a0]
add esp, 4
mov ebp, dword [esp + 0x60]
jmp 0x483fd8
mov esi, dword [esp + 0x8c]
nop word [eax + eax]
fld dword [esp + 0x14]
fld1
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jne 0x483feb
jnp 0x484008
sub esp, 0x10
mov dword [esp + 4], esi
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20674]
add esp, 4
jmp 0x48400a
fstp st(0)
mov eax, dword [0xb20588]
cmp byte [eax + 0x2ef965], 0
je 0x484048
cmp byte [eax + 0x2ef966], 0
je 0x484048
sub esp, 4
push pe_nt_image_headers32
push dword [esp + 0x14]
push esi
call dword [0xb206a4]
add esp, 4
jmp 0x484094
sub esp, 8
push esi
push dword [esp + 0xd8]
call fcn.0042f7d0
add esp, 0x10
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x2ef965], 0
jne 0x48407d
sub esp, 8
push eax
push dword [esp + 0xc4]
call fcn.0042c13c
add esp, 0x10
mov ecx, dword [esp + 0xc]
sub esp, 4
push pe_nt_image_headers32
push ecx
push eax
call dword [0xb206a4]
add esp, 4
mov esi, dword [0xb20588]
cmp byte [esi + 0x2b8794], 0
jne 0x484127
lea ebp, [esi + 0x228770]
sub esp, 0xc
push ebp
call sub.KERNEL32.DLL_EnterCriticalSection
add esp, 0xc
mov eax, dword [esi + 0x228788]
cmp eax, 0x24000
jne 0x4840d2
mov dword [esi + 0x228788], 0
xor eax, eax
lea eax, [esi + eax*4 + 0x228790]
sub esp, 4
push 0x800
push eax
push dword [esp + 0x18]
call dword [0xb206ac]
add esp, 4
add dword [esi + 0x228788], 0x200
mov eax, dword [esi + 0x22878c]
cmp eax, 0x23fff
jg 0x484111
add eax, 0x200
mov dword [esi + 0x22878c], eax
sub esp, 0xc
push ebp
call sub.KERNEL32.DLL_LeaveCriticalSection
add esp, 0xc
mov esi, dword [0xb20588]
mov ebp, dword [esp + 0x60]
fld qword [ebx + 0x38fda0]
fadd dword [0xac5090]
fst qword [ebx + 0x38fda0]
fmul dword [0xac5054]
mov eax, dword [esi + 0x3498]
mov dword [esp + 0xfc], eax
fidiv dword [esp + 0xfc]
fdiv qword [esi + 0x2b8868]
fldz
fucom st(1)
fnstsw ax
sahf
jbe 0x484288
fstp st(1)
fstp qword [ebx + 0x38fda0]
cmp byte [esi + 0x8654], 0
je 0x4842b8
cmp dword [esi + 0x3544], 5
jne 0x4842b8
fld qword [0xb6c7b4]
fld qword [0xb6c7bc]
fld qword [0xb6c7c4]
fld qword [0xb6c7a4]
xor eax, eax
fld qword [0xb6c7ac]
fldz
nop word cs:[eax + eax]
fstp st(0)
fld st(4)
fmul st(2)
fchs
fxch st(1)
fmul st(4)
fsubp st(1)
fld st(2)
fmul dword [ebx + eax*4 + 0x15860]
faddp st(1)
fst dword [esp + 0xf4]
fld dword [esp + 0xf4]
fstp dword [ebx + eax*4 + 0x15860]
inc eax
cmp eax, 0x200
fld st(1)
fxch st(1)
fxch st(2)
jne 0x4841b8
fstp st(1)
fxch st(1)
fst qword [0xb6c7a4]
fxch st(1)
fstp qword [0xb6c7ac]
fstp qword [0xb6c79c]
fld qword [0xb6c7d4]
xor eax, eax
fld qword [0xb6c7dc]
fldz
nop word cs:[eax + eax]
fstp st(0)
fld st(4)
fmul st(2)
fchs
fxch st(1)
fmul st(4)
fsubp st(1)
fld st(2)
fmul dword [ebx + eax*4 + 0x15860]
faddp st(1)
fst dword [esp + 0xf0]
fld dword [esp + 0xf0]
fstp dword [ebx + eax*4 + 0x15860]
inc eax
cmp eax, 0x200
fld st(1)
fxch st(1)
fxch st(2)
jne 0x484228
fstp st(5)
fstp st(3)
fstp st(1)
fstp st(1)
fst qword [0xb6c7d4]
fxch st(1)
fstp qword [0xb6c7dc]
fstp qword [0xb6c7cc]
jmp 0x4842b8
fstp st(0)
fld1
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jae 0x4845e8
fstp st(0)
cmp byte [esi + 0x8654], 0
jne 0x48417b
nop word cs:[eax + eax]
sub esp, 8
mov esi, dword [esp + 0x14]
push esi
push dword [esp + 0xdc]
call fcn.0048582c
add esp, 0x10
mov ecx, dword [0xb20588]
cmp dword [ecx + 0x3544], 2
ja 0x4842e8
fstp st(0)
fld dword [0xb699d0]
jmp 0x484315
sub esp, 0x10
fstp qword [esp + 4]
mov eax, dword [esp + 0xd8]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0xec]
fld dword [esp + 0xec]
mov ecx, dword [0xb20588]
fldz
fxch st(1)
fst dword [ecx + 0x86b4]
mov dl, byte [ecx + 0x2ef8f2]
cmp byte [ecx + 0x8748], 0
je 0x484348
fld dword [ecx + 0x8744]
fucompp
fnstsw ax
sahf
jbe 0x48434a
cmp dword [ecx + 0x2ef8ec], 6
setne al
jmp 0x48434c
fstp st(0)
xor eax, eax
test dl, dl
mov byte [ecx + 0x2ef8f2], al
je 0x4843c8
test al, al
jne 0x4843c8
cmp byte [ecx + 0x2ef958], 0
je 0x484390
cmp byte [ecx + 0x8749], 0
je 0x484390
mov eax, dword [ecx + 0x2ef92c]
cmp dword [eax], 0
jle 0x484390
fstp st(0)
add eax, 8
sub esp, 0xc
push eax
call fcn.00437e6c
fldz
add esp, 0x10
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x2ef959], 0
je 0x4843c8
cmp byte [ecx + 0x874a], 0
je 0x4843c8
mov eax, dword [ecx + 0x2ef930]
cmp dword [eax], 0
jle 0x4843c8
fstp st(0)
add eax, 8
sub esp, 0xc
push eax
call fcn.00437e6c
fldz
add esp, 0x10
mov ecx, dword [0xb20588]
nop
cmp dword [ecx + 0x3544], 2
je 0x4843f2
fstp st(0)
sub esp, 4
push pe_nt_image_headers32
push esi
push 0x3ecccccd
call dword [0xb20674]
fldz
add esp, 4
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x86a1], 0
je 0x484498
cmp dword [ecx + 0x2ef8ec], 6
fld1
fstp dword [esp + 0x14]
je 0x484435
fstp st(0)
sub esp, 8
push esi
push dword [esp + 0xcc]
call fcn.00430838
fldz
add esp, 0x10
fld dword [0xac50a0]
fstp dword [esp + 0x14]
mov ecx, dword [0xb20588]
cmp dword [ecx + 0x3544], 2
jne 0x4844a7
cmp byte [ecx + 0x34a0], 0
je 0x4844a7
xor edx, edx
nop word cs:[eax + eax]
fld dword [ebx + edx*4 + 0x15860]
fucomp st(1)
fnstsw ax
mov esi, ebx
xor ebx, ebx
sahf
setae bl
fld dword [ebx*4 + 0xac50a4]
mov ebx, esi
fstp dword [ebx + edx*4 + 0x15860]
inc edx
cmp edx, 0x200
jne 0x484458
fstp st(0)
mov al, 1
mov esi, dword [esp + 0xc]
jmp 0x4844ab
fld1
fstp dword [esp + 0x14]
cmp dword [ecx + 0x3544], 2
je 0x48443e
fstp st(0)
xor eax, eax
mov edx, dword [ecx + 0x2ef930]
cmp dword [edx], 0
jle 0x4846a8
cmp dword [ecx + 0x2ef934], 2
jne 0x4846a8
cmp byte [ecx + 0x874a], 0
je 0x484646
cmp byte [ecx + 0x2ef8f2], 0
je 0x484669
cmp byte [edx + 4], 0
jne 0x4844f4
cmp byte [edx + 0x104f0], 0
je 0x4846a8
push 0x3f800000
push 0
push esi
push edx
mov ebp, eax
call fcn.00480a78
mov eax, ebp
mov ebp, dword [esp + 0x70]
add esp, 0x10
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x34e3], 0
je 0x4846b5
nop dword [eax + eax]
cmp byte [ecx + 0x34e2], 0
jne 0x4846b5
mov ebp, eax
sub esp, 4
lea eax, [esp + 0x34]
push eax
push pe_nt_image_headers32
push esi
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x484563
fchs
fstp dword [esp + 0x30]
fldz
fstp st(0)
sub esp, 4
lea eax, [esp + 0x38]
push eax
push pe_nt_image_headers32
push esi
call dword [0xb20684]
add esp, 4
fld dword [esp + 0x34]
fldz
fucomp st(1)
fnstsw ax
sahf
jbe 0x48458f
fchs
fst dword [esp + 0x34]
fld dword [esp + 0x30]
fucompp
fnstsw ax
xor ecx, ecx
sahf
setbe cl
fld dword [esp + ecx*4 + 0x30]
sub esp, 0x10
fstp qword [esp + 4]
mov eax, dword [esp + 0xcc]
mov dword [esp], eax
call fcn.0042f99c
add esp, 0x10
fstp dword [esp + 0xe8]
fld dword [esp + 0xe8]
mov ecx, dword [0xb20588]
fstp dword [ecx + 0x34ec]
mov eax, ebp
mov ebp, dword [esp + 0x60]
jmp 0x4846b5
sub esp, 0xc
push dword [esi + 0x2e58c0]
fstp qword [esp + 0x24]
call sub.KERNEL32.DLL_SetEvent
add esp, 0xc
fld dword [0xac5094]
fld qword [esp + 0x14]
fucompp
fnstsw ax
sahf
mov esi, dword [0xb20588]
jae 0x48463f
fld qword [esi + 0x2b8868]
fmul qword [0xac5098]
mov eax, dword [esi + 0x3498]
mov dword [esp + 0xf8], eax
fimul dword [esp + 0xf8]
fadd qword [ebx + 0x38fda0]
jmp 0x484168
fldz
jmp 0x484168
mov ebp, eax
mov al, 1
cmp byte [ecx + 0x1786], 0
jne 0x484692
push 0x3f800000
push pe_nt_image_headers32
push esi
push edx
call fcn.00480a78
add esp, 0x10
jmp 0x48468a
mov ebp, eax
mov al, 1
cmp byte [ecx + 0x1786], 0
jne 0x484692
push 0x3f800000
push pe_nt_image_headers32
push esi
push edx
call fcn.00480a78
add esp, 0x10
xor al, 1
mov ecx, dword [0xb20588]
mov byte [ecx + 0x1786], al
mov eax, ebp
mov ebp, dword [esp + 0x60]
nop word cs:[eax + eax]
cmp byte [ecx + 0x34e3], 0
jne 0x484528
mov byte [ecx + 0x2ef8f5], 0
test al, al
jne 0x4847dc
mov ebp, eax
sub esp, 4
push pe_nt_image_headers32
mov esi, dword [esp + 0x70]
push esi
push dword [esp + 0x18]
call dword [0xb20654]
add esp, 4
sub esp, 4
lea eax, [esp + 0x34]
push eax
push pe_nt_image_headers32
push esi
mov esi, dword [esp + 0x1c]
call dword [0xb20688]
add esp, 4
fld dword [esp + 0x30]
fld dword [0xac50ac]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
jbe 0x4847cc
mov ecx, dword [0xb20588]
fld dword [ecx + 0x2ef8f8]
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jbe 0x48472f
fst dword [ecx + 0x2ef8f8]
mov byte [ecx + 0x2ef8f5], 1
cmp dword [ecx + 0x3544], 2
jne 0x48478f
fstp st(0)
xor ecx, ecx
fldz
nop dword [eax]
fstp st(0)
fld dword [ebx + ecx*4 + 0x15860]
fucom st(1)
fnstsw ax
sahf
fld st(1)
ja 0x48476f
fstp st(0)
fld dword [0xac50b4]
fucom st(1)
fstp st(1)
fnstsw ax
sahf
fldz
fxch st(1)
jbe 0x48477e
fstp st(1)
fstp dword [ebx + ecx*4 + 0x15860]
fldz
fldz
fxch st(1)
fstp st(0)
fstp st(0)
inc ecx
cmp ecx, 0x200
fldz
jne 0x484748
jmp 0x4847cc
fstp st(1)
cmp byte [ecx + 0x8678], 0
je 0x4847a7
cmp dword [ecx + 0x8660], 0
je 0x484a6a
fdivr dword [0xac50ac]
sub esp, 0x10
mov dword [esp + 4], esi
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20674]
add esp, 4
fldz
fldz
fstp st(1)
fstp st(0)
mov ecx, dword [0xb20588]
mov eax, ebp
mov ebp, dword [esp + 0x60]
fld dword [ecx + 0x2ef900]
fdiv dword [0xac50b8]
fmul st(0), st(0)
fmul dword [ecx + 0x2ef908]
fstp dword [esp + 0xe4]
fld dword [esp + 0xe4]
cmp byte [ecx + 0x2ef8f0], 0
fldz
jne 0x484828
cmp byte [ecx + 0x2ef8f2], 0
jne 0x484828
cmp byte [ecx + 0x2ef8f3], 0
je 0x4849c7
nop word [eax + eax]
fstp st(1)
fldz
fstp st(0)
test al, al
je 0x484858
fld1
fxch st(1)
fucom st(1)
fstp st(1)
fnstsw ax
fld dword [0xac5078]
sahf
ja 0x484868
fstp st(0)
jmp 0x48485e
fld dword [esp + 0x14]
fmulp st(1)
fmul dword [0xac5078]
fldz
fxch st(1)
fstp st(1)
fstp dword [esp + 0xe0]
fld dword [esp + 0xe0]
fst dword [ebx + 0x38fd80]
sub esp, 0x10
mov dword [esp + 4], esi
fstp dword [esp]
mov dword [esp + 8], pe_nt_image_headers32
call dword [0xb20674]
add esp, 4
mov eax, dword [0xb20588]
mov ecx, dword [eax + 0x2ef8ec]
cmp ecx, 3
jae 0x484918
sub esp, 0xc
push 0
push 1
push pe_nt_image_headers32
push dword [esp + 0x6c]
push esi
call dword [0xb20708]
add esp, 0xc
mov eax, dword [0xb20588]
mov eax, dword [eax + 0x2ef8ec]
sub esp, 4
cmp eax, 1
je 0x48493e
test eax, eax
jne 0x48496c
push 0x800
push edi
mov esi, dword [esp + 0x60]
push esi
call dword [0xb206ac]
add esp, 4
sub esp, 4
push 0x800
push dword [esp + 0x2a8]
push esi
call dword [0xb206ac]
add esp, 4
jmp 0x484998
add ecx, 0xfffffffd
cmp ecx, 2
jb 0x484938
cmp dword [eax + 0x3544], 2
jne 0x4848a9
nop word cs:[eax + eax]
mov eax, dword [esp + 0x70]
jmp 0x48499d
push 0x800
push edi
push dword [esp + 0x60]
call dword [0xb206ac]
add esp, 4
sub esp, 4
push 0x800
push 0
push dword [esp + 0x2ac]
call fcn.0080778b
add esp, 0x10
jmp 0x484998
push 0x800
push 0
push edi
call fcn.0080778b
add esp, 0x10
sub esp, 4
push 0x800
push dword [esp + 0x2a8]
push dword [esp + 0x60]
call dword [0xb206ac]
add esp, 4
mov eax, dword [esp + 0x70]
inc eax
mov edx, dword [ebx + 0x3873a4]
mov ecx, dword [ebx + 0x3873a8]
mov esi, edx
sub esi, ecx
mov dword [esp + 0x70], eax
test eax, eax
setg al
cmp esi, 0x1ff
jg 0x483428
jmp 0x484b70
cmp byte [ecx + 0x2ef8f4], 0
je 0x484b67
mov ecx, eax
mov eax, dword [0xad5758]
mov eax, dword [eax]
cmp byte [eax + 0xbd], 0
mov eax, ecx
jne 0x48482c
jmp 0x484828
lea eax, [esi + 0x34b0]
mov eax, dword [eax]
mov dword [esp + 0x104], eax
fimul dword [esp + 0x104]
fstp dword [esp + 0x100]
fld dword [esp + 0x100]
fxch st(1)
fmul dword [0xac508c]
fstp dword [ebx + 0x3e208]
sub esp, 0x10
fst dword [esp + 0x24]
fstp dword [esp]
call fcn.007f5b60
add esp, 0x10
cmp byte [esi + 0x86a9], 0
je 0x484a47
cmp dword [esi + 0x3518], 0
je 0x484abf
fld dword [0xac5044]
fucompp
fnstsw ax
xor edx, edx
sahf
seta dl
sub esp, 8
mov eax, esi
push 0
push 0
call fcn.004742d0
add esp, 8
jmp 0x484ae9
cmp byte [ecx + 0x8670], 0
je 0x4847a7
fstp st(0)
xor ecx, ecx
fldz
fldz
nop word [eax + eax]
fstp st(1)
fstp st(0)
fld dword [ebx + ecx*4 + 0x1a080]
fld dword [0xac50b0]
fxch st(1)
fucompp
fnstsw ax
sahf
jb 0x484aad
mov dword [ebx + ecx*4 + 0x15860], 0
inc ecx
cmp ecx, 0x200
fldz
fldz
jne 0x484a88
jmp 0x4847cc
fld dword [0xac5044]
fucompp
fnstsw ax
xor edx, edx
sahf
seta dl
fld dword [esp + 0x14]
fmul dword [0xac5018]
sub esp, 0x10
fstp qword [esp]
mov eax, esi
call fcn.004742d0
add esp, 8
mov eax, dword [0xb20588]
cmp dword [eax + 0x2ef8ec], 5
jne 0x484b5e
sub esp, 4
push 0x800
push ebp
mov esi, dword [esp + 0x74]
push esi
call dword [0xb206ac]
add esp, 4
sub esp, 4
push pe_nt_image_headers32
push ebp
push 0x4b000000
call dword [0xb20674]
add esp, 4
sub esp, 0xc
push 0
push 1
push pe_nt_image_headers32
push edi
push ebp
call dword [0xb20708]
add esp, 0xc
sub esp, 4
push 0x800
push dword [esp + 0x2a8]
push edi
call dword [0xb206ac]
add esp, 4
inc dword [esp + 0x70]
jmp 0x48400a
mov esi, dword [esp + 0x68]
jmp 0x48400a
fstp st(0)
jmp 0x48482a
xor eax, eax
add esp, 0x27c
pop esi
pop edi
pop ebx
pop ebp
ret
fxch st(1)
fld dword [esp + 0x30]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
jbe 0x484b92
fstp st(1)
fst dword [esp + 0x30]
fldz
fstp st(0)
fld qword [ebx + 0x1e0b0]
fstp dword [esp + 0x13c]
fld dword [esp + 0x13c]
mov ecx, dword [0xb20588]
cmp byte [ecx + 0x34e1], 0
fucom st(1)
fnstsw ax
jne 0x484bbf
fstp st(0)
fld st(0)
sahf
ja 0x484bc8
fstp st(0)
fldz
fxch st(1)
fstp st(1)
mov ebp, dword [0xb699e0]
lea edi, [ebp + 1]
mov dword [0xb699e0], edi
fadd dword [0xb699dc]
fst dword [0xb699dc]
mov eax, 0x10624dd3
imul dword [ecx + 0x3490]
mov eax, edx
shr eax, 0x1f
sar edx, 5
add edx, eax
cmp ebp, edx
jge 0x484c14
fstp st(0)
fstp st(0)
cmp byte [ecx + 0x2ef93e], 0
jne 0x482f29
jmp 0x48301b
mov dword [esp + 0x138], edi
fidiv dword [esp + 0x138]
fst qword [ebx + 0x1e0d8]
fucom st(1)
fstp st(1)
fnstsw ax
sahf
jbe 0x484c80
fld st(0)
fdivr dword [ecx + 0x2ef94c]
fld1
fucom st(1)
fnstsw ax
sahf
ja 0x484c6d
fstp st(0)
fld st(1)
fmul st(1)
fld dword [0xac5074]
fxch st(1)
fucompp
fnstsw ax
sahf
fldz
fxch st(1)
jbe 0x484c6d
fstp st(1)
fstp st(0)
fdivr dword [0xac5074]
fldz
fldz
fxch st(1)
fxch st(2)
fstp st(2)
fstp st(0)
fstp dword [ecx + 0x2ef940]
mov byte [ecx + 0x2ef93c], 1
fldz
fstp st(0)
mov dword [0xb699dc], 0
mov dword [0xb699e0], 0
cmp byte [ecx + 0x2ef93e], 0
jne 0x482f29
jmp 0x48301b