Function at 0x473274
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd4
push 0
push 0
dec ecx
jne 0x47327c
push ecx
push ebx
push esi
push edi
mov ebx, eax
mov esi, 0x48564c
xor eax, eax
push ebp
push 0x476dc7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx + 0x3c4]
mov edx, dword [eax]
call dword [edx + 0xd8]
cmp al, 1
jne 0x4732ba
mov dword [0x486f04], 1
jmp 0x4732c1
xor eax, eax
mov dword [0x486f04], eax
mov eax, dword [ebx + 0x3c8]
mov edx, dword [eax]
call dword [edx + 0xd8]
cmp al, 1
jne 0x4732df
mov dword [0x486f08], 1
jmp 0x4732e6
xor eax, eax
mov dword [0x486f08], eax
mov eax, dword [ebx + 0x3cc]
mov edx, dword [eax]
call dword [edx + 0xd8]
cmp al, 1
jne 0x473304
mov dword [0x486f0c], 1
jmp 0x47330b
xor eax, eax
mov dword [0x486f0c], eax
mov eax, dword [ebx + 0x3d0]
mov edx, dword [eax]
call dword [edx + 0xd8]
cmp al, 1
jne 0x473329
mov dword [0x486f10], 1
jmp 0x473330
xor eax, eax
mov dword [0x486f10], eax
mov eax, dword [ebx + 0x3d4]
mov edx, dword [eax]
call dword [edx + 0xd8]
cmp al, 1
jne 0x47334e
mov dword [0x486f14], 1
jmp 0x473355
xor eax, eax
mov dword [0x486f14], eax
mov eax, dword [ebx + 0x3d8]
mov edx, dword [eax]
call dword [edx + 0xd8]
cmp al, 1
jne 0x473373
mov dword [0x486f18], 1
jmp 0x47337a
xor eax, eax
mov dword [0x486f18], eax
mov ecx, 0x476de0
xor edx, edx
mov eax, ebx
call fcn.00472120
call fcn.0040b1fc
fstp st(0)
call fcn.0040b1fc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 0x16]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x12]
call fcn.0040b1b4
mov ecx, 0x476dec
mov edx, 8
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e0c
mov edx, 9
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e24
mov edx, 0xa
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e3c
mov edx, 0xa
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x24]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x20]
mov edx, 0xb
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x2c]
mov eax, dword [esi + 0x244]
call fcn.004092b4
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x28]
mov edx, 0xc
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x34]
mov eax, dword [esi + 0x44]
call fcn.004092b4
mov ecx, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x30]
mov edx, 0xc
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x38]
mov eax, dword [esi + 4]
call fcn.004092b4
mov ecx, dword [ebp - 0x38]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3c]
mov eax, dword [esi + 0x10]
call fcn.004092b4
cmp dword [ebp - 0x3c], 0
je 0x4734b3
lea edx, [ebp - 0x40]
mov eax, dword [esi + 0x10]
call fcn.004092b4
mov ecx, dword [ebp - 0x40]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x44]
mov eax, dword [esi + 0x14]
call fcn.004092b4
cmp dword [ebp - 0x44], 0
je 0x4734de
lea edx, [ebp - 0x48]
mov eax, dword [esi + 0x14]
call fcn.004092b4
mov ecx, dword [ebp - 0x48]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4c]
mov eax, dword [esi + 0x18]
call fcn.004092b4
cmp dword [ebp - 0x4c], 0
je 0x473509
lea edx, [ebp - 0x50]
mov eax, dword [esi + 0x18]
call fcn.004092b4
mov ecx, dword [ebp - 0x50]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x54]
mov eax, dword [esi + 0x1c]
call fcn.004092b4
cmp dword [ebp - 0x54], 0
je 0x473534
lea edx, [ebp - 0x58]
mov eax, dword [esi + 0x1c]
call fcn.004092b4
mov ecx, dword [ebp - 0x58]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x5c]
mov eax, dword [esi + 0x20]
call fcn.004092b4
cmp dword [ebp - 0x5c], 0
je 0x47355f
lea edx, [ebp - 0x60]
mov eax, dword [esi + 0x20]
call fcn.004092b4
mov ecx, dword [ebp - 0x60]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x64]
mov eax, dword [esi + 0x24]
call fcn.004092b4
cmp dword [ebp - 0x64], 0
je 0x4735af
lea edx, [ebp - 0x6c]
mov eax, dword [esi + 0x24]
call fcn.004092b4
push dword [ebp - 0x6c]
push 0x476e5c
lea edx, [ebp - 0x70]
mov eax, dword [esi + 0x28]
call fcn.004092b4
push dword [ebp - 0x70]
lea eax, [ebp - 0x68]
mov edx, 3
call fcn.004053d4
mov ecx, dword [ebp - 0x68]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
jmp 0x4735c9
lea edx, [ebp - 0x74]
mov eax, dword [esi + 0x28]
call fcn.004092b4
mov ecx, dword [ebp - 0x74]
mov edx, 0x17
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x80]
mov eax, dword [esi]
call fcn.004092b4
push dword [ebp - 0x80]
lea edx, [ebp - 0x84]
mov eax, dword [esi + 8]
call fcn.004092b4
push dword [ebp - 0x84]
lea edx, [ebp - 0x88]
mov eax, dword [esi + 0x208]
call fcn.004092b4
push dword [ebp - 0x88]
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.004053d4
mov edx, dword [ebp - 0x7c]
lea ecx, [ebp - 0x78]
mov eax, ebx
call fcn.0047afb4
mov ecx, dword [ebp - 0x78]
mov edx, 0x18
mov eax, ebx
call fcn.00472120
lea eax, [ebp - 0x8c]
push eax
lea edx, [ebp - 0x90]
mov eax, dword [esi + 0x208]
call fcn.004092b4
mov eax, dword [ebp - 0x90]
mov ecx, 3
mov edx, 1
call fcn.00405574
mov eax, dword [ebp - 0x8c]
mov edx, 0x476e68
call fcn.00405460
jne 0x4736e4
lea edx, [ebp - 0x98]
mov eax, dword [esi]
call fcn.004092b4
push dword [ebp - 0x98]
lea edx, [ebp - 0x9c]
mov eax, dword [esi + 8]
call fcn.004092b4
push dword [ebp - 0x9c]
lea edx, [ebp - 0xa0]
mov eax, dword [esi + 0x208]
call fcn.004092b4
push dword [ebp - 0xa0]
push 0x476e74
lea edx, [ebp - 0xa4]
mov eax, dword [esi + 0x34]
call fcn.004092b4
push dword [ebp - 0xa4]
lea eax, [ebp - 0x94]
mov edx, 5
call fcn.004053d4
mov ecx, dword [ebp - 0x94]
mov edx, 0x19
mov eax, ebx
call fcn.00472120
jmp 0x473744
lea edx, [ebp - 0xac]
mov eax, dword [esi]
call fcn.004092b4
push dword [ebp - 0xac]
lea edx, [ebp - 0xb0]
mov eax, dword [esi + 8]
call fcn.004092b4
push dword [ebp - 0xb0]
lea edx, [ebp - 0xb4]
mov eax, dword [esi + 0x208]
call fcn.004092b4
push dword [ebp - 0xb4]
lea eax, [ebp - 0xa8]
mov edx, 3
call fcn.004053d4
mov ecx, dword [ebp - 0xa8]
mov edx, 0x19
mov eax, ebx
call fcn.00472120
push dword [0x486ed0]
push 0x476eac
lea eax, [ebp - 0xbc]
push eax
lea edx, [ebp - 0xc0]
mov eax, dword [0x486eec]
call fcn.00409598
mov eax, dword [ebp - 0xc0]
mov ecx, 6
mov edx, 2
call fcn.00405574
push dword [ebp - 0xbc]
push 0x476eb8
lea edx, [ebp - 0xc4]
movzx eax, word [ebp - 0x16]
call fcn.00409598
push dword [ebp - 0xc4]
push 0x476eac
lea edx, [ebp - 0xc8]
movzx eax, word [ebp - 0x14]
call fcn.00409598
push dword [ebp - 0xc8]
push 0x476eac
lea edx, [ebp - 0xcc]
movzx eax, word [ebp - 0x12]
call fcn.00409598
push dword [ebp - 0xcc]
push 0x476eac
lea edx, [ebp - 0xd0]
mov eax, dword [0x486ee8]
call fcn.00409598
push dword [ebp - 0xd0]
push 0x476eac
push dword [0x486eb4]
push 0x476eac
lea edx, [ebp - 0xd4]
mov eax, dword [esi + 0x2b0]
call fcn.004092b4
push dword [ebp - 0xd4]
lea eax, [ebp - 0xb8]
mov edx, 0xf
call fcn.004053d4
mov ecx, dword [ebp - 0xb8]
mov edx, 0x51
mov eax, ebx
call fcn.00472120
mov ecx, 0x476ecc
mov edx, 0x1f
mov eax, ebx
call fcn.00472120
mov ecx, 0x476edc
mov edx, 0x20
mov eax, ebx
call fcn.00472120
mov ecx, 0x476ef4
mov edx, 0x20
mov eax, ebx
call fcn.00472120
mov ecx, 0x476f10
mov edx, 0x20
mov eax, ebx
call fcn.00472120
mov ecx, 0x476f28
mov edx, 0x20
mov eax, ebx
call fcn.00472120
mov ecx, 0x476f4c
mov edx, 0x21
mov eax, ebx
call fcn.00472120
mov ecx, 0x476f64
mov edx, 0x22
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0xd8]
mov eax, dword [esi]
call fcn.004092b4
mov ecx, dword [ebp - 0xd8]
mov edx, 0x25
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0xe0]
mov eax, dword [esi + 0x30]
call fcn.004092b4
push dword [ebp - 0xe0]
push 0x476f80
lea edx, [ebp - 0xe4]
mov eax, dword [esi + 0x23c]
call fcn.004092b4
push dword [ebp - 0xe4]
lea eax, [ebp - 0xdc]
mov edx, 3
call fcn.004053d4
mov ecx, dword [ebp - 0xdc]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0xe8]
mov eax, dword [esi + 0x240]
call fcn.004092b4
mov ecx, dword [ebp - 0xe8]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0xec]
mov eax, dword [esi + 0x248]
call fcn.004092b4
lea eax, [ebp - 0xec]
mov edx, 0x476f8c
call fcn.0040531c
mov ecx, dword [ebp - 0xec]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
mov ecx, dword [0x486eb8]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
mov ecx, dword [0x486ea4]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
mov ecx, dword [0x486ea8]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
cmp dword [0x486eac], 0
je 0x4739c2
mov ecx, dword [0x486eac]
mov edx, 0x26
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0xf0]
mov eax, dword [esi + 0x2c]
call fcn.004092b4
mov ecx, dword [ebp - 0xf0]
mov edx, 0x27
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0xf4]
mov eax, dword [esi + 0x288]
call fcn.004092b4
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], eax
mov edi, dword [ebp - 0xf8]
test edi, edi
je 0x473a0e
sub edi, 4
mov edi, dword [edi]
lea edx, [ebp - 0xfc]
mov eax, dword [esi + 0x28c]
call fcn.004092b4
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
test eax, eax
je 0x473a3a
sub eax, 4
mov eax, dword [eax]
add eax, edi
cmp eax, 0x2d
jle 0x473abd
lea edx, [ebp - 0x100]
mov eax, dword [esi + 0x288]
call fcn.004092b4
cmp dword [ebp - 0x100], 0
je 0x473a7e
lea edx, [ebp - 0x104]
mov eax, dword [esi + 0x288]
call fcn.004092b4
mov ecx, dword [ebp - 0x104]
mov edx, 0x28
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x108]
mov eax, dword [esi + 0x28c]
call fcn.004092b4
cmp dword [ebp - 0x108], 0
je 0x473b12
lea edx, [ebp - 0x10c]
mov eax, dword [esi + 0x28c]
call fcn.004092b4
mov ecx, dword [ebp - 0x10c]
mov edx, 0x28
mov eax, ebx
call fcn.00472120
jmp 0x473b12
lea edx, [ebp - 0x114]
mov eax, dword [esi + 0x288]
call fcn.004092b4
push dword [ebp - 0x114]
push 0x476e5c
lea edx, [ebp - 0x118]
mov eax, dword [esi + 0x28c]
call fcn.004092b4
push dword [ebp - 0x118]
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.004053d4
mov ecx, dword [ebp - 0x110]
mov edx, 0x28
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x11c]
mov eax, dword [esi + 0x290]
call fcn.004092b4
cmp dword [ebp - 0x11c], 0
je 0x473b81
lea edx, [ebp - 0x124]
mov eax, dword [esi + 0x290]
call fcn.004092b4
push dword [ebp - 0x124]
push 0x476e5c
lea edx, [ebp - 0x128]
mov eax, dword [esi + 0x294]
call fcn.004092b4
push dword [ebp - 0x128]
lea eax, [ebp - 0x120]
mov edx, 3
call fcn.004053d4
mov ecx, dword [ebp - 0x120]
mov edx, 0x28
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x12c]
mov eax, dword [esi + 0x298]
call fcn.004092b4
cmp dword [ebp - 0x12c], 0
jne 0x473bb5
lea edx, [ebp - 0x130]
mov eax, dword [esi + 0x29c]
call fcn.004092b4
cmp dword [ebp - 0x130], 0
je 0x473c0a
lea edx, [ebp - 0x138]
mov eax, dword [esi + 0x298]
call fcn.004092b4
push dword [ebp - 0x138]
push 0x476e5c
lea edx, [ebp - 0x13c]
mov eax, dword [esi + 0x29c]
call fcn.004092b4
push dword [ebp - 0x13c]
lea eax, [ebp - 0x134]
mov edx, 3
call fcn.004053d4
mov ecx, dword [ebp - 0x134]
mov edx, 0x28
mov eax, ebx
call fcn.00472120
push 0x476f9c
push dword [esi + 0x234]
push 0x476fac
push 0x476e5c
push dword [esi + 0x22c]
push 0x476fbc
push 0x476e5c
push dword [esi + 0x238]
lea eax, [ebp - 0x140]
mov edx, 8
call fcn.004053d4
mov ecx, dword [ebp - 0x140]
mov edx, 0x28
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x148]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x144]
mov edx, 0x476fcc
call fcn.00405360
mov ecx, dword [ebp - 0x144]
mov edx, 0x33
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x150]
mov eax, dword [esi + 8]
call fcn.004092b4
mov eax, dword [ebp - 0x150]
call fcn.004096d4
lea edx, [ebp - 0x14c]
call fcn.00409598
mov ecx, dword [ebp - 0x14c]
mov edx, 0x34
mov eax, ebx
call fcn.00472120
mov ecx, 0x476ff0
mov edx, 0x35
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x154]
mov eax, dword [esi + 0x2ac]
call fcn.004092b4
mov ecx, dword [ebp - 0x154]
mov edx, 0x35
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x158]
mov eax, dword [esi + 0x1d8]
call fcn.004092b4
cmp dword [ebp - 0x158], 0
je 0x473e53
lea edx, [ebp - 0x15c]
mov eax, dword [esi + 0x1d8]
call fcn.004092b4
mov ecx, dword [ebp - 0x15c]
mov edx, 0x36
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x160]
mov eax, dword [esi + 0x1dc]
call fcn.004092b4
mov ecx, dword [ebp - 0x160]
mov edx, 0x37
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x164]
mov eax, dword [esi + 0x1e8]
call fcn.004092b4
mov ecx, dword [ebp - 0x164]
mov edx, 0x38
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x168]
mov eax, dword [esi + 0x1e0]
call fcn.004092b4
mov ecx, dword [ebp - 0x168]
mov edx, 0x39
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x16c]
mov eax, dword [esi + 0x1e4]
call fcn.004092b4
mov ecx, dword [ebp - 0x16c]
mov edx, 0x3a
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x170]
mov eax, dword [esi + 0x24c]
call fcn.004092b4
cmp dword [ebp - 0x170], 0
je 0x473e42
lea edx, [ebp - 0x178]
mov eax, dword [esi + 0x24c]
call fcn.004092b4
mov eax, dword [ebp - 0x178]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x174]
call fcn.00409598
mov eax, dword [ebp - 0x174]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x17c]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x17c]
mov edx, 0x3b
mov eax, ebx
call fcn.00472120
jmp 0x473e53
mov ecx, 0x476e5c
mov edx, 0x3b
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x180]
mov eax, dword [esi + 0x7c]
call fcn.004092b4
cmp dword [ebp - 0x180], 0
je 0x474015
lea edx, [ebp - 0x184]
mov eax, dword [esi + 0x7c]
call fcn.004092b4
cmp dword [ebp - 0x184], 0
je 0x473ee6
lea edx, [ebp - 0x18c]
mov eax, dword [esi + 0x7c]
call fcn.004092b4
mov eax, dword [ebp - 0x18c]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x188]
call fcn.00409598
mov eax, dword [ebp - 0x188]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x190]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x190]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x473ef7
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x194]
mov eax, dword [esi + 0x80]
call fcn.004092b4
cmp dword [ebp - 0x194], 0
je 0x473f75
lea edx, [ebp - 0x19c]
mov eax, dword [esi + 0x80]
call fcn.004092b4
mov eax, dword [ebp - 0x19c]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x198]
call fcn.00409598
mov eax, dword [ebp - 0x198]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x1a0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x1a0]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x473f86
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1a4]
mov eax, dword [esi + 0x84]
call fcn.004092b4
cmp dword [ebp - 0x1a4], 0
je 0x474004
lea edx, [ebp - 0x1ac]
mov eax, dword [esi + 0x84]
call fcn.004092b4
mov eax, dword [ebp - 0x1ac]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x1a8]
call fcn.00409598
mov eax, dword [ebp - 0x1a8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x1b0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x1b0]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x474015
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1b4]
mov eax, dword [esi + 0x1ec]
call fcn.004092b4
cmp dword [ebp - 0x1b4], 0
je 0x474171
lea edx, [ebp - 0x1b8]
mov eax, dword [esi + 0x1ec]
call fcn.004092b4
mov ecx, dword [ebp - 0x1b8]
mov edx, 0x36
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1bc]
mov eax, dword [esi + 0x1f0]
call fcn.004092b4
mov ecx, dword [ebp - 0x1bc]
mov edx, 0x37
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1c0]
mov eax, dword [esi + 0x1fc]
call fcn.004092b4
mov ecx, dword [ebp - 0x1c0]
mov edx, 0x38
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1c4]
mov eax, dword [esi + 0x1f4]
call fcn.004092b4
mov ecx, dword [ebp - 0x1c4]
mov edx, 0x39
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1c8]
mov eax, dword [esi + 0x1f8]
call fcn.004092b4
mov ecx, dword [ebp - 0x1c8]
mov edx, 0x3a
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1cc]
mov eax, dword [esi + 0x250]
call fcn.004092b4
cmp dword [ebp - 0x1cc], 0
je 0x474160
lea edx, [ebp - 0x1d4]
mov eax, dword [esi + 0x250]
call fcn.004092b4
mov eax, dword [ebp - 0x1d4]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x1d0]
call fcn.00409598
mov eax, dword [ebp - 0x1d0]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x1d8]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x1d8]
mov edx, 0x3b
mov eax, ebx
call fcn.00472120
jmp 0x474171
mov ecx, 0x476e5c
mov edx, 0x3b
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1dc]
mov eax, dword [esi + 0x88]
call fcn.004092b4
cmp dword [ebp - 0x1dc], 0
je 0x47433c
lea edx, [ebp - 0x1e0]
mov eax, dword [esi + 0x88]
call fcn.004092b4
cmp dword [ebp - 0x1e0], 0
je 0x47420d
lea edx, [ebp - 0x1e8]
mov eax, dword [esi + 0x88]
call fcn.004092b4
mov eax, dword [ebp - 0x1e8]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x1e4]
call fcn.00409598
mov eax, dword [ebp - 0x1e4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x1ec]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x1ec]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x47421e
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x1f0]
mov eax, dword [esi + 0x8c]
call fcn.004092b4
cmp dword [ebp - 0x1f0], 0
je 0x47429c
lea edx, [ebp - 0x1f8]
mov eax, dword [esi + 0x8c]
call fcn.004092b4
mov eax, dword [ebp - 0x1f8]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x1f4]
call fcn.00409598
mov eax, dword [ebp - 0x1f4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x1fc]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x1fc]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x4742ad
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x200]
mov eax, dword [esi + 0x90]
call fcn.004092b4
cmp dword [ebp - 0x200], 0
je 0x47432b
lea edx, [ebp - 0x208]
mov eax, dword [esi + 0x90]
call fcn.004092b4
mov eax, dword [ebp - 0x208]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x204]
call fcn.00409598
mov eax, dword [ebp - 0x204]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x20c]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x20c]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x47433c
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x210]
mov eax, dword [esi + 0x94]
call fcn.004092b4
cmp dword [ebp - 0x210], 0
je 0x47450f
lea edx, [ebp - 0x214]
mov eax, dword [esi + 0x94]
call fcn.004092b4
cmp dword [ebp - 0x214], 0
je 0x4743d8
lea edx, [ebp - 0x21c]
mov eax, dword [esi + 0x94]
call fcn.004092b4
mov eax, dword [ebp - 0x21c]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x218]
call fcn.00409598
mov eax, dword [ebp - 0x218]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x220]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x220]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x4743e9
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x224]
mov eax, dword [esi + 0x98]
call fcn.004092b4
cmp dword [ebp - 0x224], 0
je 0x474467
lea edx, [ebp - 0x22c]
mov eax, dword [esi + 0x98]
call fcn.004092b4
mov eax, dword [ebp - 0x22c]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x228]
call fcn.00409598
mov eax, dword [ebp - 0x228]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x230]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x230]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x474478
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x234]
mov eax, dword [esi + 0x9c]
call fcn.004092b4
cmp dword [ebp - 0x234], 0
je 0x4744fe
lea edx, [ebp - 0x23c]
mov eax, dword [esi + 0x9c]
call fcn.004092b4
mov eax, dword [ebp - 0x23c]
call fcn.00409748
test edx, edx
jge 0x4744b9
neg eax
adc edx, 0
neg edx
push edx
push eax
lea eax, [ebp - 0x238]
call fcn.00409684
mov eax, dword [ebp - 0x238]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x240]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x240]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x47450f
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x244]
mov eax, dword [esi + 0xd4]
call fcn.004092b4
cmp dword [ebp - 0x244], 0
je 0x4746da
lea edx, [ebp - 0x248]
mov eax, dword [esi + 0xd4]
call fcn.004092b4
cmp dword [ebp - 0x248], 0
je 0x4745ab
lea edx, [ebp - 0x250]
mov eax, dword [esi + 0xd4]
call fcn.004092b4
mov eax, dword [ebp - 0x250]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x24c]
call fcn.00409598
mov eax, dword [ebp - 0x24c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x254]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x254]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x4745bc
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x258]
mov eax, dword [esi + 0xd8]
call fcn.004092b4
cmp dword [ebp - 0x258], 0
je 0x47463a
lea edx, [ebp - 0x260]
mov eax, dword [esi + 0xd8]
call fcn.004092b4
mov eax, dword [ebp - 0x260]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x25c]
call fcn.00409598
mov eax, dword [ebp - 0x25c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x264]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x264]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x47464b
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x268]
mov eax, dword [esi + 0xdc]
call fcn.004092b4
cmp dword [ebp - 0x268], 0
je 0x4746c9
lea edx, [ebp - 0x270]
mov eax, dword [esi + 0xdc]
call fcn.004092b4
mov eax, dword [ebp - 0x270]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x26c]
call fcn.00409598
mov eax, dword [ebp - 0x26c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x274]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x274]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x4746da
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x278]
mov eax, dword [esi + 0xe0]
call fcn.004092b4
cmp dword [ebp - 0x278], 0
je 0x4748a5
lea edx, [ebp - 0x27c]
mov eax, dword [esi + 0xe0]
call fcn.004092b4
cmp dword [ebp - 0x27c], 0
je 0x474776
lea edx, [ebp - 0x284]
mov eax, dword [esi + 0xe0]
call fcn.004092b4
mov eax, dword [ebp - 0x284]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x280]
call fcn.00409598
mov eax, dword [ebp - 0x280]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x288]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x288]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x474787
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x28c]
mov eax, dword [esi + 0xe4]
call fcn.004092b4
cmp dword [ebp - 0x28c], 0
je 0x474805
lea edx, [ebp - 0x294]
mov eax, dword [esi + 0xe4]
call fcn.004092b4
mov eax, dword [ebp - 0x294]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x290]
call fcn.00409598
mov eax, dword [ebp - 0x290]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x298]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x298]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x474816
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x29c]
mov eax, dword [esi + 0xe8]
call fcn.004092b4
cmp dword [ebp - 0x29c], 0
je 0x474894
lea edx, [ebp - 0x2a4]
mov eax, dword [esi + 0xe8]
call fcn.004092b4
mov eax, dword [ebp - 0x2a4]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x2a0]
call fcn.00409598
mov eax, dword [ebp - 0x2a0]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x2a8]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x2a8]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x4748a5
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x2ac]
mov eax, dword [esi + 0xec]
call fcn.004092b4
cmp dword [ebp - 0x2ac], 0
je 0x474a78
lea edx, [ebp - 0x2b0]
mov eax, dword [esi + 0xec]
call fcn.004092b4
cmp dword [ebp - 0x2b0], 0
je 0x474941
lea edx, [ebp - 0x2b8]
mov eax, dword [esi + 0xec]
call fcn.004092b4
mov eax, dword [ebp - 0x2b8]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x2b4]
call fcn.00409598
mov eax, dword [ebp - 0x2b4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x2bc]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x2bc]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x474952
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x2c0]
mov eax, dword [esi + 0xf0]
call fcn.004092b4
cmp dword [ebp - 0x2c0], 0
je 0x4749d0
lea edx, [ebp - 0x2c8]
mov eax, dword [esi + 0xf0]
call fcn.004092b4
mov eax, dword [ebp - 0x2c8]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x2c4]
call fcn.00409598
mov eax, dword [ebp - 0x2c4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x2cc]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x2cc]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x4749e1
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x2d0]
mov eax, dword [esi + 0xf4]
call fcn.004092b4
cmp dword [ebp - 0x2d0], 0
je 0x474a67
lea edx, [ebp - 0x2d8]
mov eax, dword [esi + 0xf4]
call fcn.004092b4
mov eax, dword [ebp - 0x2d8]
call fcn.00409748
test edx, edx
jge 0x474a22
neg eax
adc edx, 0
neg edx
push edx
push eax
lea eax, [ebp - 0x2d4]
call fcn.00409684
mov eax, dword [ebp - 0x2d4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x2dc]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x2dc]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x474a78
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x2e0]
mov eax, dword [esi + 0x50]
call fcn.004092b4
cmp dword [ebp - 0x2e0], 0
je 0x474c2e
lea edx, [ebp - 0x2e4]
mov eax, dword [esi + 0x50]
call fcn.004092b4
cmp dword [ebp - 0x2e4], 0
je 0x474b0b
lea edx, [ebp - 0x2ec]
mov eax, dword [esi + 0x50]
call fcn.004092b4
mov eax, dword [ebp - 0x2ec]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x2e8]
call fcn.00409598
mov eax, dword [ebp - 0x2e8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x2f0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x2f0]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x474b1c
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x2f4]
mov eax, dword [esi + 0x54]
call fcn.004092b4
cmp dword [ebp - 0x2f4], 0
je 0x474b94
lea edx, [ebp - 0x2fc]
mov eax, dword [esi + 0x54]
call fcn.004092b4
mov eax, dword [ebp - 0x2fc]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x2f8]
call fcn.00409598
mov eax, dword [ebp - 0x2f8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x300]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x300]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x474ba5
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x304]
mov eax, dword [esi + 0x58]
call fcn.004092b4
cmp dword [ebp - 0x304], 0
je 0x474c1d
lea edx, [ebp - 0x30c]
mov eax, dword [esi + 0x58]
call fcn.004092b4
mov eax, dword [ebp - 0x30c]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x308]
call fcn.00409598
mov eax, dword [ebp - 0x308]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x310]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x310]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x474c2e
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x314]
mov eax, dword [esi + 0x6c]
call fcn.004092b4
cmp dword [ebp - 0x314], 0
je 0x474de4
lea edx, [ebp - 0x318]
mov eax, dword [esi + 0x6c]
call fcn.004092b4
cmp dword [ebp - 0x318], 0
je 0x474cc1
lea edx, [ebp - 0x320]
mov eax, dword [esi + 0x6c]
call fcn.004092b4
mov eax, dword [ebp - 0x320]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x31c]
call fcn.00409598
mov eax, dword [ebp - 0x31c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x324]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x324]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x474cd2
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x328]
mov eax, dword [esi + 0x70]
call fcn.004092b4
cmp dword [ebp - 0x328], 0
je 0x474d4a
lea edx, [ebp - 0x330]
mov eax, dword [esi + 0x70]
call fcn.004092b4
mov eax, dword [ebp - 0x330]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x32c]
call fcn.00409598
mov eax, dword [ebp - 0x32c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x334]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x334]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x474d5b
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x338]
mov eax, dword [esi + 0x74]
call fcn.004092b4
cmp dword [ebp - 0x338], 0
je 0x474dd3
lea edx, [ebp - 0x340]
mov eax, dword [esi + 0x74]
call fcn.004092b4
mov eax, dword [ebp - 0x340]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x33c]
call fcn.00409598
mov eax, dword [ebp - 0x33c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x344]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x344]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x474de4
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x348]
mov eax, dword [esi + 0xa8]
call fcn.004092b4
cmp dword [ebp - 0x348], 0
je 0x474faf
lea edx, [ebp - 0x34c]
mov eax, dword [esi + 0xa8]
call fcn.004092b4
cmp dword [ebp - 0x34c], 0
je 0x474e80
lea edx, [ebp - 0x354]
mov eax, dword [esi + 0xa8]
call fcn.004092b4
mov eax, dword [ebp - 0x354]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x350]
call fcn.00409598
mov eax, dword [ebp - 0x350]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x358]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x358]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x474e91
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x35c]
mov eax, dword [esi + 0xac]
call fcn.004092b4
cmp dword [ebp - 0x35c], 0
je 0x474f0f
lea edx, [ebp - 0x364]
mov eax, dword [esi + 0xac]
call fcn.004092b4
mov eax, dword [ebp - 0x364]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x360]
call fcn.00409598
mov eax, dword [ebp - 0x360]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x368]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x368]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x474f20
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x36c]
mov eax, dword [esi + 0xb0]
call fcn.004092b4
cmp dword [ebp - 0x36c], 0
je 0x474f9e
lea edx, [ebp - 0x374]
mov eax, dword [esi + 0xb0]
call fcn.004092b4
mov eax, dword [ebp - 0x374]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x370]
call fcn.00409598
mov eax, dword [ebp - 0x370]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x378]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x378]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x474faf
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x37c]
mov eax, dword [esi + 0xb4]
call fcn.004092b4
cmp dword [ebp - 0x37c], 0
je 0x47517a
lea edx, [ebp - 0x380]
mov eax, dword [esi + 0xb4]
call fcn.004092b4
cmp dword [ebp - 0x380], 0
je 0x47504b
lea edx, [ebp - 0x388]
mov eax, dword [esi + 0xb4]
call fcn.004092b4
mov eax, dword [ebp - 0x388]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x384]
call fcn.00409598
mov eax, dword [ebp - 0x384]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x38c]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x38c]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x47505c
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x390]
mov eax, dword [esi + 0xb8]
call fcn.004092b4
cmp dword [ebp - 0x390], 0
je 0x4750da
lea edx, [ebp - 0x398]
mov eax, dword [esi + 0xb8]
call fcn.004092b4
mov eax, dword [ebp - 0x398]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x394]
call fcn.00409598
mov eax, dword [ebp - 0x394]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x39c]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x39c]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x4750eb
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3a0]
mov eax, dword [esi + 0xbc]
call fcn.004092b4
cmp dword [ebp - 0x3a0], 0
je 0x475169
lea edx, [ebp - 0x3a8]
mov eax, dword [esi + 0xbc]
call fcn.004092b4
mov eax, dword [ebp - 0x3a8]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x3a4]
call fcn.00409598
mov eax, dword [ebp - 0x3a4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x3ac]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x3ac]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x47517a
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3b0]
mov eax, dword [esi + 0xc0]
call fcn.004092b4
cmp dword [ebp - 0x3b0], 0
je 0x475345
lea edx, [ebp - 0x3b4]
mov eax, dword [esi + 0xc0]
call fcn.004092b4
cmp dword [ebp - 0x3b4], 0
je 0x475216
lea edx, [ebp - 0x3bc]
mov eax, dword [esi + 0xc0]
call fcn.004092b4
mov eax, dword [ebp - 0x3bc]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x3b8]
call fcn.00409598
mov eax, dword [ebp - 0x3b8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x3c0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x3c0]
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
jmp 0x475227
mov ecx, 0x476e5c
mov edx, 0x3c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3c4]
mov eax, dword [esi + 0xc4]
call fcn.004092b4
cmp dword [ebp - 0x3c4], 0
je 0x4752a5
lea edx, [ebp - 0x3cc]
mov eax, dword [esi + 0xc4]
call fcn.004092b4
mov eax, dword [ebp - 0x3cc]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x3c8]
call fcn.00409598
mov eax, dword [ebp - 0x3c8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x3d0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x3d0]
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
jmp 0x4752b6
mov ecx, 0x476e5c
mov edx, 0x3d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3d4]
mov eax, dword [esi + 0xc8]
call fcn.004092b4
cmp dword [ebp - 0x3d4], 0
je 0x475334
lea edx, [ebp - 0x3dc]
mov eax, dword [esi + 0xc8]
call fcn.004092b4
mov eax, dword [ebp - 0x3dc]
call fcn.004096d4
cdq
xor eax, edx
sub eax, edx
lea edx, [ebp - 0x3d8]
call fcn.00409598
mov eax, dword [ebp - 0x3d8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x3e0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x3e0]
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
jmp 0x475345
mov ecx, 0x476e5c
mov edx, 0x3e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3e4]
mov eax, dword [esi + 0x254]
call fcn.004092b4
cmp dword [ebp - 0x3e4], 0
je 0x4753c4
lea edx, [ebp - 0x3f0]
mov eax, dword [esi + 0x254]
call fcn.004092b4
mov eax, dword [ebp - 0x3f0]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x3ec]
call fcn.0040ac40
mov eax, dword [ebp - 0x3ec]
call fcn.0040ad88
add esp, 0xfffffff8
fistp qword [esp]
wait
lea ecx, [ebp - 0x3e8]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x3e8]
mov edx, 0x3f
mov eax, ebx
call fcn.00472120
jmp 0x4753d5
mov ecx, 0x476e5c
mov edx, 0x3f
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x3f4]
mov eax, dword [esi + 0x25c]
call fcn.004092b4
cmp dword [ebp - 0x3f4], 0
je 0x475454
lea edx, [ebp - 0x400]
mov eax, dword [esi + 0x25c]
call fcn.004092b4
mov eax, dword [ebp - 0x400]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x3fc]
call fcn.0040ac40
mov eax, dword [ebp - 0x3fc]
call fcn.0040ad88
add esp, 0xfffffff8
fistp qword [esp]
wait
lea ecx, [ebp - 0x3f8]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x3f8]
mov edx, 0x40
mov eax, ebx
call fcn.00472120
jmp 0x475465
mov ecx, 0x476e5c
mov edx, 0x40
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x404]
mov eax, dword [esi + 0x258]
call fcn.004092b4
cmp dword [ebp - 0x404], 0
je 0x475526
lea edx, [ebp - 0x408]
mov eax, dword [esi + 0x258]
call fcn.004092b4
mov ecx, dword [ebp - 0x408]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x40c]
mov eax, dword [esi + 0x25c]
call fcn.004092b4
cmp dword [ebp - 0x40c], 0
je 0x475526
lea edx, [ebp - 0x414]
mov eax, dword [esi + 0x25c]
call fcn.004092b4
mov eax, dword [ebp - 0x414]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x410]
call fcn.0040ac40
mov eax, dword [ebp - 0x410]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x418]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x418]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x41c]
mov eax, dword [esi + 0xfc]
call fcn.004092b4
cmp dword [ebp - 0x41c], 0
je 0x4755e7
lea edx, [ebp - 0x420]
mov eax, dword [esi + 0xfc]
call fcn.004092b4
mov ecx, dword [ebp - 0x420]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x424]
mov eax, dword [esi + 0x108]
call fcn.004092b4
cmp dword [ebp - 0x424], 0
je 0x4755e7
lea edx, [ebp - 0x42c]
mov eax, dword [esi + 0x108]
call fcn.004092b4
mov eax, dword [ebp - 0x42c]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x428]
call fcn.0040ac40
mov eax, dword [ebp - 0x428]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x430]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x430]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x434]
mov eax, dword [esi + 0x110]
call fcn.004092b4
cmp dword [ebp - 0x434], 0
je 0x4756a8
lea edx, [ebp - 0x438]
mov eax, dword [esi + 0x110]
call fcn.004092b4
mov ecx, dword [ebp - 0x438]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x43c]
mov eax, dword [esi + 0x11c]
call fcn.004092b4
cmp dword [ebp - 0x43c], 0
je 0x4756a8
lea edx, [ebp - 0x444]
mov eax, dword [esi + 0x11c]
call fcn.004092b4
mov eax, dword [ebp - 0x444]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x440]
call fcn.0040ac40
mov eax, dword [ebp - 0x440]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x448]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x448]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x44c]
mov eax, dword [esi + 0x25c]
call fcn.004092b4
cmp dword [ebp - 0x44c], 0
je 0x4757c0
lea edx, [ebp - 0x454]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x454]
lea eax, [ebp - 0x450]
mov edx, 0x47700c
call fcn.00405360
mov ecx, dword [ebp - 0x450]
mov edx, 0x5f
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x458]
mov eax, dword [esi + 0x260]
call fcn.004092b4
cmp dword [ebp - 0x458], 0
je 0x47577c
lea edx, [ebp - 0x460]
mov eax, dword [esi + 0x260]
call fcn.004092b4
mov eax, dword [ebp - 0x460]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x45c]
call fcn.0040ac40
mov eax, dword [ebp - 0x45c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x464]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x464]
mov edx, 0x60
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x41
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x42
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x41
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x468]
mov eax, dword [esi + 0x130]
call fcn.004092b4
cmp dword [ebp - 0x468], 0
je 0x475881
lea edx, [ebp - 0x46c]
mov eax, dword [esi + 0x124]
call fcn.004092b4
mov ecx, dword [ebp - 0x46c]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x470]
mov eax, dword [esi + 0x130]
call fcn.004092b4
cmp dword [ebp - 0x470], 0
je 0x475881
lea edx, [ebp - 0x478]
mov eax, dword [esi + 0x130]
call fcn.004092b4
mov eax, dword [ebp - 0x478]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x474]
call fcn.0040ac40
mov eax, dword [ebp - 0x474]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x47c]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x47c]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x480]
mov eax, dword [esi + 0x144]
call fcn.004092b4
cmp dword [ebp - 0x480], 0
je 0x475942
lea edx, [ebp - 0x484]
mov eax, dword [esi + 0x138]
call fcn.004092b4
mov ecx, dword [ebp - 0x484]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x488]
mov eax, dword [esi + 0x144]
call fcn.004092b4
cmp dword [ebp - 0x488], 0
je 0x475942
lea edx, [ebp - 0x490]
mov eax, dword [esi + 0x144]
call fcn.004092b4
mov eax, dword [ebp - 0x490]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x48c]
call fcn.0040ac40
mov eax, dword [ebp - 0x48c]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x494]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x494]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x498]
mov eax, dword [esi + 0x158]
call fcn.004092b4
cmp dword [ebp - 0x498], 0
je 0x475a03
lea edx, [ebp - 0x49c]
mov eax, dword [esi + 0x14c]
call fcn.004092b4
mov ecx, dword [ebp - 0x49c]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4a0]
mov eax, dword [esi + 0x158]
call fcn.004092b4
cmp dword [ebp - 0x4a0], 0
je 0x475a03
lea edx, [ebp - 0x4a8]
mov eax, dword [esi + 0x158]
call fcn.004092b4
mov eax, dword [ebp - 0x4a8]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x4a4]
call fcn.0040ac40
mov eax, dword [ebp - 0x4a4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x4ac]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x4ac]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4b0]
mov eax, dword [esi + 0x16c]
call fcn.004092b4
cmp dword [ebp - 0x4b0], 0
je 0x475ac4
lea edx, [ebp - 0x4b4]
mov eax, dword [esi + 0x160]
call fcn.004092b4
mov ecx, dword [ebp - 0x4b4]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4b8]
mov eax, dword [esi + 0x16c]
call fcn.004092b4
cmp dword [ebp - 0x4b8], 0
je 0x475ac4
lea edx, [ebp - 0x4c0]
mov eax, dword [esi + 0x16c]
call fcn.004092b4
mov eax, dword [ebp - 0x4c0]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x4bc]
call fcn.0040ac40
mov eax, dword [ebp - 0x4bc]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x4c4]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x4c4]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4c8]
mov eax, dword [esi + 0x180]
call fcn.004092b4
cmp dword [ebp - 0x4c8], 0
je 0x475b85
lea edx, [ebp - 0x4cc]
mov eax, dword [esi + 0x174]
call fcn.004092b4
mov ecx, dword [ebp - 0x4cc]
mov edx, 0x41
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4d0]
mov eax, dword [esi + 0x180]
call fcn.004092b4
cmp dword [ebp - 0x4d0], 0
je 0x475b85
lea edx, [ebp - 0x4d8]
mov eax, dword [esi + 0x180]
call fcn.004092b4
mov eax, dword [ebp - 0x4d8]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x4d4]
call fcn.0040ac40
mov eax, dword [ebp - 0x4d4]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x4dc]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x4dc]
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4e0]
mov eax, dword [esi + 0x264]
call fcn.004092b4
cmp dword [ebp - 0x4e0], 0
je 0x475cb8
mov eax, dword [esi + 0x264]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
je 0x475cb8
lea edx, [ebp - 0x4e8]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x4e8]
lea eax, [ebp - 0x4e4]
mov edx, 0x47702c
call fcn.00405360
mov ecx, dword [ebp - 0x4e4]
mov edx, 0x5f
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4ec]
mov eax, dword [esi + 0x264]
call fcn.004092b4
cmp dword [ebp - 0x4ec], 0
je 0x475c74
lea edx, [ebp - 0x4f4]
mov eax, dword [esi + 0x264]
call fcn.004092b4
mov eax, dword [ebp - 0x4f4]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x4f0]
call fcn.0040ac40
mov eax, dword [ebp - 0x4f0]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x4f8]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x4f8]
mov edx, 0x60
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x41
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x42
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x41
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x42
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x4fc]
mov eax, dword [esi + 0x1c8]
call fcn.004092b4
cmp dword [ebp - 0x4fc], 0
je 0x475dbf
lea edx, [ebp - 0x500]
mov eax, dword [esi + 0x1c4]
call fcn.004092b4
mov ecx, dword [ebp - 0x500]
mov edx, 0x5f
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x504]
mov eax, dword [esi + 0x1c8]
call fcn.004092b4
cmp dword [ebp - 0x504], 0
je 0x475dbf
lea edx, [ebp - 0x50c]
mov eax, dword [esi + 0x1c8]
call fcn.004092b4
mov eax, dword [ebp - 0x50c]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x508]
call fcn.0040ac40
mov eax, dword [ebp - 0x508]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
lea edx, [ebp - 0x514]
mov eax, dword [esi + 0x1c8]
call fcn.004092b4
mov eax, dword [ebp - 0x514]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x510]
call fcn.0040ac40
mov eax, dword [ebp - 0x510]
call fcn.0040ad88
fistp qword [0x486f7c]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x518]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x518]
mov edx, 0x60
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x51c]
mov eax, dword [esi + 0x2a0]
call fcn.004092b4
cmp dword [ebp - 0x51c], 0
je 0x475ec2
lea edx, [ebp - 0x520]
mov eax, dword [esi + 0x2a0]
call fcn.004092b4
mov eax, dword [ebp - 0x520]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
je 0x475ec2
lea edx, [ebp - 0x528]
mov eax, dword [esi + 0x2a4]
call fcn.004092b4
mov ecx, dword [ebp - 0x528]
lea eax, [ebp - 0x524]
mov edx, 0x477050
call fcn.00405360
mov ecx, dword [ebp - 0x524]
mov edx, 0x2c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x52c]
mov eax, dword [esi + 0x2a0]
call fcn.004092b4
cmp dword [ebp - 0x52c], 0
je 0x475ec2
lea edx, [ebp - 0x534]
mov eax, dword [esi + 0x2a0]
call fcn.004092b4
mov eax, dword [ebp - 0x534]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x530]
call fcn.0040ac40
mov eax, dword [ebp - 0x530]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x538]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x538]
mov edx, 0x2d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x53c]
mov eax, dword [esi + 0x268]
call fcn.004092b4
cmp dword [ebp - 0x53c], 0
je 0x475f9b
lea edx, [ebp - 0x540]
mov eax, dword [esi + 0x268]
call fcn.004092b4
mov eax, dword [ebp - 0x540]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
je 0x475f9b
mov ecx, 0x477088
mov edx, 0x2e
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x544]
mov eax, dword [esi + 0x268]
call fcn.004092b4
cmp dword [ebp - 0x544], 0
je 0x475f9b
lea edx, [ebp - 0x54c]
mov eax, dword [esi + 0x268]
call fcn.004092b4
mov eax, dword [ebp - 0x54c]
call fcn.0040acd8
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x548]
call fcn.0040ac40
mov eax, dword [ebp - 0x548]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x550]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x550]
mov edx, 0x2f
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x554]
mov eax, dword [esi + 0x1cc]
call fcn.004092b4
cmp dword [ebp - 0x554], 0
je 0x476142
mov eax, dword [esi + 0x1cc]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
jb 0x476075
lea edx, [ebp - 0x55c]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x55c]
lea eax, [ebp - 0x558]
mov edx, 0x4770b8
call fcn.00405360
mov ecx, dword [ebp - 0x558]
mov edx, 0x43
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x564]
mov eax, dword [esi + 0x1cc]
call fcn.004092b4
mov eax, dword [ebp - 0x564]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x560]
call fcn.0040ac40
mov eax, dword [ebp - 0x560]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x568]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x568]
mov edx, 0x44
mov eax, ebx
call fcn.00472120
jmp 0x476142
mov eax, dword [esi + 0x1cc]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
jae 0x476142
lea edx, [ebp - 0x570]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x570]
lea eax, [ebp - 0x56c]
mov edx, 0x4770b8
call fcn.00405360
mov ecx, dword [ebp - 0x56c]
mov edx, 0x43
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x578]
mov eax, dword [esi + 0x1cc]
call fcn.004092b4
mov eax, dword [ebp - 0x578]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x574]
call fcn.0040ac40
mov eax, dword [ebp - 0x574]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x580]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x580]
lea eax, [ebp - 0x57c]
mov edx, 0x4770d8
call fcn.00405360
mov ecx, dword [ebp - 0x57c]
mov edx, 0x44
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x584]
mov eax, dword [esi + 0x1cc]
call fcn.004092b4
cmp dword [ebp - 0x584], 0
je 0x4762fb
mov eax, 0x486ec0
call fcn.00405050
fild qword [ebp - 8]
fdiv dword [0x4770dc]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x588]
call fcn.0040ac40
mov edx, dword [ebp - 0x588]
mov eax, 0x486ec0
call fcn.004050a4
lea ecx, [ebp - 0x58c]
xor edx, edx
mov eax, dword [0x486ec0]
call fcn.0046e4b0
mov edx, dword [ebp - 0x58c]
mov eax, 0x486ec0
call fcn.004050a4
lea edx, [ebp - 0x590]
mov eax, dword [0x486ec0]
call fcn.004092b4
mov edx, dword [ebp - 0x590]
mov eax, 0x486ec0
mov ecx, 0x4770e8
call fcn.00405360
push 0x486ec4
mov ecx, 1
mov edx, 1
mov eax, dword [0x486ec0]
call fcn.00405574
mov eax, 0x486ec0
mov ecx, 1
mov edx, 1
call fcn.004055b4
lea edx, [ebp - 0x594]
mov eax, dword [0x486ec4]
call fcn.00408f24
mov edx, dword [ebp - 0x594]
mov eax, 0x486ec0
mov ecx, dword [0x486ec0]
call fcn.00405360
mov eax, 0x486f54
call fcn.00405050
mov eax, 0x486f58
call fcn.00405050
mov eax, ebx
call fcn.0047ae64
mov eax, dword [esi + 0x1cc]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
jb 0x47629b
push 0x4770fc
push dword [0x486f54]
push 0x476e5c
push dword [0x486f58]
lea eax, [ebp - 0x598]
mov edx, 4
call fcn.004053d4
mov ecx, dword [ebp - 0x598]
mov edx, 0x45
mov eax, ebx
call fcn.00472120
jmp 0x4762fb
mov eax, dword [esi + 0x1cc]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
jae 0x4762fb
push 0x477110
push dword [0x486f54]
push 0x476e5c
push dword [0x486f58]
lea eax, [ebp - 0x59c]
mov edx, 4
call fcn.004053d4
mov ecx, dword [ebp - 0x59c]
mov edx, 0x45
mov eax, ebx
call fcn.00472120
mov ecx, 0x47712c
mov edx, 0x45
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x5a0]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
cmp dword [ebp - 0x5a0], 0
je 0x476473
lea edx, [ebp - 0x5a4]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
mov eax, dword [ebp - 0x5a4]
mov edx, 0x477198
call fcn.00405460
je 0x476473
lea edx, [ebp - 0x5a8]
mov eax, dword [esi + 0x270]
call fcn.004092b4
cmp dword [ebp - 0x5a8], 0
je 0x476473
mov ecx, 0x4771a4
mov edx, 0x46
mov eax, ebx
call fcn.00472120
mov ecx, 0x4771f4
mov edx, 0x47
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x5b0]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
mov eax, dword [ebp - 0x5b0]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x5ac]
call fcn.0040ac40
mov eax, dword [ebp - 0x5ac]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x5b4]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x5b4]
mov edx, 0x48
mov eax, ebx
call fcn.00472120
mov ecx, 0x477214
mov edx, 0x47
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x5bc]
mov eax, dword [esi + 0x270]
call fcn.004092b4
mov eax, dword [ebp - 0x5bc]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x5b8]
call fcn.0040ac40
mov eax, dword [ebp - 0x5b8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x5c0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x5c0]
mov edx, 0x48
mov eax, ebx
call fcn.00472120
mov ecx, 0x477244
mov edx, 0x61
mov eax, ebx
call fcn.00472120
jmp 0x476740
lea edx, [ebp - 0x5c4]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
cmp dword [ebp - 0x5c4], 0
je 0x4765dc
lea edx, [ebp - 0x5c8]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
mov eax, dword [ebp - 0x5c8]
mov edx, 0x477198
call fcn.00405460
jne 0x4765dc
lea edx, [ebp - 0x5d0]
mov eax, dword [esi + 0x270]
call fcn.004092b4
mov eax, dword [ebp - 0x5d0]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x5cc]
call fcn.0040ac40
mov eax, dword [ebp - 0x5cc]
mov edx, 0x477198
call fcn.00405460
je 0x4765dc
lea edx, [ebp - 0x5d4]
mov eax, dword [esi + 0x270]
call fcn.004092b4
cmp dword [ebp - 0x5d4], 0
je 0x4765dc
mov ecx, 0x4771a4
mov edx, 0x46
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x47
mov eax, ebx
call fcn.00472120
mov ecx, 0x477214
mov edx, 0x47
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x5dc]
mov eax, dword [esi + 0x270]
call fcn.004092b4
mov eax, dword [ebp - 0x5dc]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x5d8]
call fcn.0040ac40
mov eax, dword [ebp - 0x5d8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
mov ecx, 0x476e5c
mov edx, 0x48
mov eax, ebx
call fcn.00472120
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x5e0]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x5e0]
mov edx, 0x48
mov eax, ebx
call fcn.00472120
mov ecx, 0x477244
mov edx, 0x61
mov eax, ebx
call fcn.00472120
jmp 0x476740
lea edx, [ebp - 0x5e4]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
cmp dword [ebp - 0x5e4], 0
je 0x476740
lea edx, [ebp - 0x5e8]
mov eax, dword [esi + 0x26c]
call fcn.004092b4
mov eax, dword [ebp - 0x5e8]
mov edx, 0x477198
call fcn.00405460
jne 0x476740
lea edx, [ebp - 0x5f0]
mov eax, dword [esi + 0x270]
call fcn.004092b4
mov eax, dword [ebp - 0x5f0]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x5ec]
call fcn.0040ac40
mov eax, dword [ebp - 0x5ec]
mov edx, 0x477198
call fcn.00405460
jne 0x476740
lea edx, [ebp - 0x5f4]
mov eax, dword [esi + 0x270]
call fcn.004092b4
cmp dword [ebp - 0x5f4], 0
je 0x476740
mov ecx, 0x476e5c
mov edx, 0x46
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x47
mov eax, ebx
call fcn.00472120
mov ecx, 0x477214
mov edx, 0x47
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x5fc]
mov eax, dword [esi + 0x270]
call fcn.004092b4
mov eax, dword [ebp - 0x5fc]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x5f8]
call fcn.0040ac40
mov eax, dword [ebp - 0x5f8]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
mov ecx, 0x476e5c
mov edx, 0x48
mov eax, ebx
call fcn.00472120
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x600]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x600]
mov edx, 0x48
mov eax, ebx
call fcn.00472120
mov ecx, 0x476e5c
mov edx, 0x61
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x604]
mov eax, dword [esi + 0x274]
call fcn.004092b4
cmp dword [ebp - 0x604], 0
je 0x476823
push 0x4772ac
lea edx, [ebp - 0x60c]
mov eax, dword [esi + 0x278]
call fcn.004092b4
push dword [ebp - 0x60c]
push 0x4772fc
lea edx, [ebp - 0x610]
mov eax, dword [esi + 0x27c]
call fcn.004092b4
push dword [ebp - 0x610]
push 0x47730c
lea eax, [ebp - 0x608]
mov edx, 5
call fcn.004053d4
mov ecx, dword [ebp - 0x608]
mov edx, 0x4b
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x618]
mov eax, dword [esi + 0x274]
call fcn.004092b4
mov eax, dword [ebp - 0x618]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x614]
call fcn.0040ac40
mov eax, dword [ebp - 0x614]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x61c]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x61c]
mov edx, 0x4c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x620]
mov eax, dword [esi + 0x284]
call fcn.004092b4
cmp dword [ebp - 0x620], 0
je 0x4768db
lea edx, [ebp - 0x624]
mov eax, dword [esi + 0x284]
call fcn.004092b4
mov eax, dword [ebp - 0x624]
mov edx, 0x477198
call fcn.00405460
je 0x4768db
mov ecx, 0x477318
mov edx, 0x4b
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x62c]
mov eax, dword [esi + 0x284]
call fcn.004092b4
mov eax, dword [ebp - 0x62c]
call fcn.0040acd8
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x628]
call fcn.0040ac40
mov eax, dword [ebp - 0x628]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x630]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x630]
mov edx, 0x4c
mov eax, ebx
call fcn.00472120
mov eax, dword [0x481418]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x270]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x476958
inc eax
mov dword [ebp - 0x1c], eax
mov dword [0x486fbc], 0
lea ecx, [ebp - 0x638]
mov eax, dword [0x481418]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x270]
mov edx, dword [0x486fbc]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x638]
lea edx, [ebp - 0x634]
call fcn.004092b4
mov ecx, dword [ebp - 0x634]
mov edx, 0x50
mov eax, ebx
call fcn.00472120
inc dword [0x486fbc]
dec dword [ebp - 0x1c]
jne 0x476906
mov eax, dword [esi + 0x1cc]
call fcn.0040acd8
fcomp dword [0x477020]
wait
fnstsw ax
sahf
ja 0x476985
mov ecx, 0x477344
mov edx, 0x63
mov eax, ebx
call fcn.00472120
jmp 0x476cc2
cmp dword [esi + 0x20c], 0
je 0x476cc2
lea edx, [ebp - 0x640]
mov eax, dword [esi + 0x20c]
call fcn.004092b4
mov edx, dword [ebp - 0x640]
lea ecx, [ebp - 0x63c]
mov eax, ebx
call fcn.0047b138
mov ecx, dword [ebp - 0x63c]
mov edx, 0x56
mov eax, ebx
call fcn.00472120
mov ecx, 0x477360
mov edx, 0x58
mov eax, ebx
call fcn.00472120
mov ecx, 0x477370
mov edx, 0x58
mov eax, ebx
call fcn.00472120
mov ecx, 0x477380
mov edx, 0x58
mov eax, ebx
call fcn.00472120
mov ecx, 0x477390
mov edx, 0x58
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x648]
mov eax, dword [esi + 4]
call fcn.004092b4
mov ecx, dword [ebp - 0x648]
lea eax, [ebp - 0x644]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x644]
mov edx, 0x59
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x654]
mov eax, dword [esi + 8]
call fcn.004092b4
mov eax, dword [ebp - 0x654]
call fcn.004096d4
lea edx, [ebp - 0x650]
call fcn.00409598
mov ecx, dword [ebp - 0x650]
lea eax, [ebp - 0x64c]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x64c]
mov edx, 0x59
mov eax, ebx
call fcn.00472120
cmp dword [esi + 0x1cc], 0
je 0x476ab7
lea edx, [ebp - 0x658]
mov eax, dword [esi + 0x1cc]
call fcn.004092b4
mov eax, dword [ebp - 0x658]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x660]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x660]
lea eax, [ebp - 0x65c]
mov edx, 0x4773a0
call fcn.00405360
mov ecx, dword [ebp - 0x65c]
mov edx, 0x59
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x668]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x668]
lea eax, [ebp - 0x664]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x664]
mov edx, 0x59
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x670]
mov eax, dword [esi + 0x20c]
call fcn.004092b4
mov edx, dword [ebp - 0x670]
lea ecx, [ebp - 0x66c]
mov eax, ebx
call fcn.0047b138
mov ecx, dword [ebp - 0x66c]
mov edx, 0x5a
mov eax, ebx
call fcn.00472120
mov ecx, 0x477360
mov edx, 0x5c
mov eax, ebx
call fcn.00472120
mov ecx, 0x477370
mov edx, 0x5c
mov eax, ebx
call fcn.00472120
mov ecx, 0x477380
mov edx, 0x5c
mov eax, ebx
call fcn.00472120
mov ecx, 0x477390
mov edx, 0x5c
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x678]
mov eax, dword [esi + 4]
call fcn.004092b4
mov ecx, dword [ebp - 0x678]
lea eax, [ebp - 0x674]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x674]
mov edx, 0x5d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x684]
mov eax, dword [esi + 8]
call fcn.004092b4
mov eax, dword [ebp - 0x684]
call fcn.004096d4
lea edx, [ebp - 0x680]
call fcn.00409598
mov ecx, dword [ebp - 0x680]
lea eax, [ebp - 0x67c]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x67c]
mov edx, 0x5d
mov eax, ebx
call fcn.00472120
cmp dword [esi + 0x1cc], 0
je 0x476c4f
lea edx, [ebp - 0x688]
mov eax, dword [esi + 0x1cc]
call fcn.004092b4
mov eax, dword [ebp - 0x688]
call fcn.0040ad88
fistp qword [ebp - 8]
wait
push dword [ebp - 4]
push dword [ebp - 8]
lea ecx, [ebp - 0x690]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x690]
lea eax, [ebp - 0x68c]
mov edx, 0x4773a0
call fcn.00405360
mov ecx, dword [ebp - 0x68c]
mov edx, 0x5d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x698]
mov eax, dword [esi + 0xc]
call fcn.004092b4
mov ecx, dword [ebp - 0x698]
lea eax, [ebp - 0x694]
mov edx, 0x476e50
call fcn.00405360
mov ecx, dword [ebp - 0x694]
mov edx, 0x5d
mov eax, ebx
call fcn.00472120
lea edx, [ebp - 0x69c]
mov eax, dword [esi + 0x1c8]
call fcn.004092b4
cmp dword [ebp - 0x69c], 0
je 0x476d30
mov ecx, 0x4773b0
mov edx, 0x49
mov eax, ebx
call fcn.00472120
push dword [0x486f80]
push dword [0x486f7c]
lea ecx, [ebp - 0x6a4]
xor edx, edx
mov al, 3
call fcn.0040aca0
mov ecx, dword [ebp - 0x6a4]
lea eax, [ebp - 0x6a0]
mov edx, 0x4773cc
call fcn.00405360
mov ecx, dword [ebp - 0x6a0]
mov edx, 0x4a
mov eax, ebx
call fcn.00472120
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x476dd1
lea eax, [ebp - 0x6a4]
mov edx, 0x64
call fcn.00405074
lea eax, [ebp - 0x514]
mov edx, 0x63
call fcn.00405074
lea eax, [ebp - 0x384]
call fcn.00405050
lea eax, [ebp - 0x388]
call fcn.00405050
lea eax, [ebp - 0x380]
mov edx, 0x62
call fcn.00405074
lea eax, [ebp - 0x1f4]
call fcn.00405050
lea eax, [ebp - 0x1f8]
call fcn.00405050
lea eax, [ebp - 0x1f0]
mov edx, 0x3e
call fcn.00405074
lea eax, [ebp - 0xf4]
mov edx, 0x25
call fcn.00405074
lea eax, [ebp - 0x60]
mov edx, 0x11
call fcn.00405074
ret