Function at 0x497aec
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x59
call dword [0x67bf94]
call fcn.0049dd15
mov eax, dword [0x66a034]
test eax, eax
je 0x497b0b
jmp 0x49dba5
mov eax, dword [0x67cd58]
push eax
push 8
push 0
mov eax, dword [0x67cd38]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebx + 0x50]
add eax, 0xfffffe70
push eax
push 0
push 0x18a
push 0x2b4
push 7
push 0x66409c
push 0x66a034
push 8
call dword [0x67e1fc]
lea eax, [ebx + 0x58]
push eax
push dword [0x66a034]
call dword [0x67cb34]
push dword [ebx + 0x58]
push 3
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
test eax, eax
pop ecx
jl 0x497b89
push dword [ebx + 0x58]
mov eax, dword [0x67cd58]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
jl 0x497b9f
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
pop ecx
jl 0x497bba
push dword [ebx + 0x58]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x148]
test eax, eax
pop ecx
jl 0x497bd5
push dword [ebx + 0x58]
push 0xffffffffffffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x140]
test eax, eax
pop ecx
jl 0x497bf0
push dword [ebx + 0x58]
push 0xffffffffffffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2bc]
test eax, eax
pop ecx
jl 0x497c39
push dword [ebx + 0x58]
mov eax, 0x3280
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
push eax
call dword [0x67c330]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
pop ecx
jl 0x497c70
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
push dword [ebx + 0x58]
push 0x6640ac
push 0x18
push 0x18
push 0
call dword [0x67e520]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1e4]
test eax, eax
pop ecx
jl 0x497c97
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
push dword [ebx + 0x58]
push 0x41100000
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x110]
test eax, eax
pop ecx
jl 0x497d0d
lea ecx, [ebx + 0x58]
call dword [0x67cb18]
push 0x6640c8
push 0x66a038
push 0x65e2e8
call dword [0x67d010]
push dword [0x66a034]
sub eax, eax
push eax
push 2
push eax
push 0x1e0
push 0x11c
push eax
push eax
push eax
push 0x6640e0
push 0x66a03c
push 0x65def0
call dword [0x67d014]
lea eax, [ebx + 0x3c]
push eax
push dword [0x66a03c]
call dword [0x67cb34]
push dword [ebx + 0x3c]
mov eax, dword [0x66a034]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
jl 0x497d26
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x130]
test eax, eax
pop ecx
jl 0x497d41
push dword [ebx + 0x3c]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
pop ecx
jl 0x497d5c
push dword [ebx + 0x3c]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x128]
test eax, eax
pop ecx
jl 0x497dd6
lea ecx, [ebx + 0x3c]
call dword [0x67cb18]
push dword [0x66a03c]
mov eax, 0x1f900
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
push eax
push 4
push 0xa
push 0x1d8
push 0x14
sub eax, eax
push eax
push eax
push eax
push 0x6640f4
push 0x66a040
push 0x65dd30
call dword [0x67d014]
lea eax, [ebx + 0x38]
push eax
push dword [0x66a040]
call dword [0x67cb34]
push dword [ebx + 0x38]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x497df1
push dword [ebx + 0x38]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x497e19
lea ecx, [ebx + 0x38]
call dword [0x67cb18]
push dword [0x66a03c]
push 0
mov eax, dword [0x66a040]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jl 0x497e33
fld dword [ebx + 0x50]
mov eax, dword [0x66a040]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
test eax, eax
jl 0x497e59
fld dword [ebx + 0x30]
faddp st(1)
fsub dword [0x65d404]
push eax
fistp dword [esp]
mov eax, dword [0x66a040]
lea edx, [ebx + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x497e79
fld dword [ebx + 0x20]
push eax
fistp dword [esp]
push 0x50
mov eax, dword [0x66a040]
lea edx, [ebx + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x60]
test eax, eax
jl 0x497ec5
fld dword [ebx + 0x10]
push eax
fistp dword [esp]
sub eax, eax
push eax
push eax
push eax
push 0x664110
push 0x66a044
push 0x65dd30
call dword [0x67d014]
lea eax, [ebx + 4]
push eax
push dword [0x66a044]
call dword [0x67cb34]
push dword [ebx + 4]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x84]
test eax, eax
pop ecx
jl 0x497ee0
push dword [ebx + 4]
push 0xb4
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x497efb
push dword [ebx + 4]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x497f16
push dword [ebx + 4]
push 2
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x11c]
test eax, eax
pop ecx
jl 0x497f3e
lea ecx, [ebx + 4]
call dword [0x67cb18]
push dword [0x66a03c]
push 0
mov eax, dword [0x66a044]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jl 0x497f58
fld dword [ebx + 0x50]
mov eax, dword [0x66a044]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
test eax, eax
jl 0x497f7e
fld dword [ebx + 0x30]
faddp st(1)
fadd dword [0x65d340]
push eax
fistp dword [esp]
mov eax, dword [0x66a044]
lea edx, [ebx + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x497f9e
fld dword [ebx + 0x20]
push eax
fistp dword [esp]
push 0x32
mov eax, dword [0x66a044]
lea edx, [ebx + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x60]
test eax, eax
jl 0x497fe5
fld dword [ebx + 0x10]
push eax
fistp dword [esp]
sub eax, eax
push eax
push eax
push eax
push 0x66412c
push 0x66a048
push 0x65e074
call dword [0x67d014]
lea eax, [ebx]
push eax
push dword [0x66a048]
call dword [0x67cb34]
push dword [ebx]
push 0xffffffffffffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x64]
test eax, eax
pop ecx
jl 0x498002
push dword [ebx]
push 0x42480000
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa0]
test eax, eax
pop ecx
jl 0x49801b
push dword [ebx]
mov eax, dword [0x66a044]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x60]
test eax, eax
jl 0x498034
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
pop ecx
jl 0x49804e
push dword [ebx]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb8]
test eax, eax
pop ecx
jl 0x49806d
push dword [ebx]
push 0x3fb99999
push 0x9999999a
mov eax, dword [esp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
test eax, eax
pop ecx
jl 0x49809d
lea ecx, [ebx]
call dword [0x67cb18]
mov eax, 0x13
mov edx, dword [0x66a03c]
push eax
push edx
push 0
push 4
mov eax, dword [0x66a040]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x4980b7
fld dword [ebx + 0x50]
mov eax, dword [0x66a040]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x60]
test eax, eax
jl 0x498117
fld dword [ebx + 0x30]
faddp st(1)
push eax
fistp dword [esp]
push 0x1d8
push 0xfa
sub eax, eax
push eax
push eax
push eax
push 0x664148
push 0x66a04c
push 0x65df3c
call dword [0x67e2cc]
lea eax, [ebx - 4]
push eax
push 0x66a04c
push 0x13
call dword [0x67e2d4]
push eax
call dword [0x67cb34]
push dword [ebx - 4]
push 0x645064
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
pop ecx
jl 0x498132
push dword [ebx - 4]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
pop ecx
jl 0x49814d
push dword [ebx - 4]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xd4]
test eax, eax
pop ecx
jl 0x498175
lea ecx, [ebx - 4]
call dword [0x67cb18]
push dword [0x66a034]
push 0
mov eax, dword [0x66a03c]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
jl 0x498193
fld dword [ebx + 0x50]
push eax
fistp dword [esp]
mov eax, dword [0x66a03c]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
jl 0x4981ad
fld dword [ebx + 0x30]
mov eax, dword [0x66a03c]
lea edx, [ebx + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
jl 0x4981cd
fld dword [ebx + 0x20]
faddp st(1)
push eax
fistp dword [esp]
mov eax, dword [0x66a03c]
lea edx, [ebx + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jl 0x49821d
fld dword [ebx + 0x10]
push eax
fistp dword [esp]
push 0x146
sub eax, eax
push eax
push eax
push eax
push 0x66415c
push 0x66a050
push 0x65def0
call dword [0x67d014]
lea eax, [ebx - 8]
push eax
push dword [0x66a050]
call dword [0x67cb34]
push dword [ebx - 8]
mov eax, dword [0x66a034]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
jl 0x498236
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x130]
test eax, eax
pop ecx
jl 0x498251
push dword [ebx - 8]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
pop ecx
jl 0x49826c
push dword [ebx - 8]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x128]
test eax, eax
pop ecx
jl 0x4982eb
lea ecx, [ebx - 8]
call dword [0x67cb18]
push dword [0x66a050]
mov eax, 0x22600
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
push eax
push 4
push 0xa
push 0x1d8
push 0x14
sub eax, eax
push eax
push eax
push eax
push 0x664170
push 0x66a054
push 0x65dd30
call dword [0x67d014]
lea eax, [ebx - 0xc]
push eax
push dword [0x66a054]
call dword [0x67cb34]
push dword [ebx - 0xc]
mov eax, dword [0x66a050]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x12c]
test eax, eax
jl 0x498301
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x49831c
push dword [ebx - 0xc]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x498381
lea ecx, [ebx - 0xc]
call dword [0x67cb18]
sub eax, eax
mov edx, dword [0x66a050]
push eax
push edx
sub eax, eax
push eax
push 4
push 0x28
push 0x1d8
push 0xe6
push eax
push eax
push eax
push 0x664188
push 0x66a058
push 0x65e0a8
call dword [0x67e2cc]
mov eax, 0x66a058
push eax
push 0
call dword [0x67e2d4]
push eax
mov eax, dword [0x66a050]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x12c]
test eax, eax
jl 0x498397
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
pop ecx
jl 0x4983be
mov eax, 0x66a058
push eax
push 0
call dword [0x67e2d4]
push eax
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xf0]
test eax, eax
pop ecx
jl 0x4983f2
mov eax, 0x66a058
push eax
push 0
call dword [0x67e2d4]
push eax
push 0x66419c
call dword [0x67cbb0]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2a4]
test eax, eax
pop ecx
jl 0x49844b
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
push 0x66a058
push 0
call dword [0x67e2d4]
push eax
mov eax, 0x22700
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
push eax
push 0
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jl 0x49847a
fld dword [ebx + 0x50]
fsub dword [0x65d354]
push eax
fistp dword [esp]
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
jl 0x4984ce
fld dword [ebx + 0x30]
fsub dword [0x65d348]
push eax
fistp dword [esp]
push 0x14
sub eax, eax
push eax
push eax
push eax
push 0x6641ac
push 0x66a05c
push 0x65dd30
call dword [0x67d014]
lea eax, [ebx - 0x10]
push eax
push dword [0x66a05c]
call dword [0x67cb34]
push dword [ebx - 0x10]
push 0x252525
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x4984e9
push dword [ebx - 0x10]
push 0xff00
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x498504
push dword [ebx - 0x10]
push 2
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x11c]
test eax, eax
pop ecx
jl 0x49852f
lea ecx, [ebx - 0x10]
call dword [0x67cb18]
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x90]
test eax, eax
jl 0x498557
fld dword [ebx + 0x50]
fistp dword [ebx + 0x78]
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x94]
test eax, eax
jl 0x49857c
fld dword [ebx + 0x50]
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jl 0x498620
fld dword [ebx + 0x30]
faddp st(1)
fadd dword [0x65d408]
fistp dword [ebx + 0x74]
mov dword [ebx + 0x7c], 1
jmp 0x49859c
mov eax, dword [ebx + 0x7c]
mov edx, dword [0x66a050]
push eax
push edx
push 0
push dword [ebx + 0x78]
push dword [ebx + 0x74]
push 0x4d
push 0x1c
sub eax, eax
push eax
push eax
push eax
push 0x6641c0
push 0x66a060
push 0x65de20
call dword [0x67e2cc]
mov eax, dword [ebx + 0x7c]
jmp 0x4989ef
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0x13480
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x49867a
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0x5580
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x4986d4
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0x5500
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x49872e
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0xb500
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x498788
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0x1a000
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x4987e2
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0x13500
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x49880d
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x90]
test eax, eax
jl 0x498835
fld dword [ebx + 0x50]
fistp dword [ebx + 0x78]
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x94]
test eax, eax
jl 0x498858
fld dword [ebx + 0x50]
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
test eax, eax
jl 0x4988b7
fld dword [ebx + 0x30]
fadd dword [0x65d358]
fsubp st(1)
fistp dword [ebx + 0x74]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0x3100
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
pop ecx
jl 0x498900
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
push 0x6641d4
push 0x1c
push 0x1c
push 0
call dword [0x67e520]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x148]
test eax, eax
pop ecx
jl 0x498949
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
push 0x6641e4
push 0x1c
push 0x1c
push 0
call dword [0x67e520]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x148]
test eax, eax
pop ecx
jl 0x498992
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
push 0x6641f4
push 0x1c
push 0x1c
push 0
call dword [0x67e520]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x148]
test eax, eax
pop ecx
jl 0x4989db
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
jmp 0x498a52
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
push 0x664208
push 0x1c
push 0x1c
push 0
call dword [0x67e520]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x148]
test eax, eax
pop ecx
jl 0x498aaa
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
jmp 0x498a52
cmp eax, 1
je 0x4985da
cmp eax, 2
je 0x498634
cmp eax, 3
je 0x49868e
cmp eax, 4
je 0x4986e8
cmp eax, 5
je 0x498742
cmp eax, 6
je 0x49879c
cmp eax, 7
je 0x498871
cmp eax, 8
je 0x4988cb
cmp eax, 9
je 0x498914
cmp eax, 0xa
je 0x49895d
cmp eax, 0xb
je 0x4989a6
cmp dword [ebx + 0x7c], 6
jle 0x498a61
jmp 0x498c43
mov eax, 0x66a060
push eax
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
mov eax, 0xcf00
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x114]
test eax, eax
pop ecx
jl 0x498ae3
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
mov eax, dword [ebx + 0x7c]
add eax, 6
mov edx, dword [0x66a050]
push eax
push edx
push 0
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
jl 0x498b0a
fld dword [ebx + 0x50]
push eax
fistp dword [esp]
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jl 0x498b37
fld dword [ebx + 0x30]
fsub dword [0x65d40c]
push eax
fistp dword [esp]
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jl 0x498b8f
fld dword [ebx + 0x20]
push eax
fistp dword [esp]
push 0x14
sub eax, eax
push eax
push eax
push eax
push 0x664218
push 0x66a064
push 0x65e074
call dword [0x67e2cc]
lea eax, [ebx - 0x14]
push eax
push 0x66a064
mov eax, dword [ebx + 0x7c]
add eax, 6
push eax
call dword [0x67e2d4]
push eax
call dword [0x67cb34]
push dword [ebx - 0x14]
push 0xffffffffffffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x64]
test eax, eax
pop ecx
jl 0x498bb2
push dword [ebx - 0x14]
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jl 0x498bcb
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa0]
test eax, eax
pop ecx
jl 0x498be9
push dword [ebx - 0x14]
push 0x41a00000
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
pop ecx
jl 0x498c2b
push dword [ebx - 0x14]
mov eax, 0xa800
add eax, dword [0x66a87c]
mov edx, pe_nt_image_headers32
call dword [0x67c9a4]
push eax
call dword [0x67c328]
mov edx, eax
lea ecx, [ebx + 0x44]
call dword [0x67cfe0]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
test eax, eax
pop ecx
jl 0x498c6f
lea ecx, [ebx + 0x44]
call dword [0x67cfd8]
lea ecx, [ebx - 0x14]
call dword [0x67cb18]
cmp dword [ebx + 0x7c], 6
jne 0x498c52
jmp 0x498c83
fild dword [ebx + 0x78]
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jl 0x498ccc
fld dword [ebx + 0x50]
faddp st(1)
fadd dword [0x65d358]
fistp dword [ebx + 0x78]
mov eax, dword [ebx + 0x7c]
inc eax
cmp eax, 0xb
mov dword [ebx + 0x7c], eax
jle 0x49859f
jg 0x498c9e
jmp 0x49859c
push 0x66a058
push 0
call dword [0x67e2d4]
push eax
sub eax, eax
push eax
push eax
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jl 0x498d15
fld dword [ebx + 0x50]
fsub dword [0x65d354]
push eax
fistp dword [esp]
push 0x28
push 0x14
sub eax, eax
push eax
push eax
push eax
push 0x66422c
push 0x66a068
push 0x65dd30
call dword [0x67d014]
push dword [0x66a068]
push 0x9723ab
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x498d33
push dword [0x66a068]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x498d51
push dword [0x66a068]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x84]
test eax, eax
pop ecx
jl 0x498d83
push 0x66a058
push 0
call dword [0x67e2d4]
push eax
push 0
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
jl 0x498d9d
fld dword [ebx + 0x50]
mov eax, dword [0x66a068]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
test eax, eax
jl 0x498dc3
fld dword [ebx + 0x30]
fsubp st(1)
fsub dword [0x65d348]
push eax
fistp dword [esp]
mov eax, dword [0x66a068]
lea edx, [ebx + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jl 0x498de1
fld dword [ebx + 0x20]
push eax
fistp dword [esp]
mov eax, dword [0x66a068]
lea edx, [ebx + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x5c]
test eax, eax
jl 0x498dff
fld dword [ebx + 0x10]
push eax
fistp dword [esp]
mov eax, dword [0x66a068]
lea edx, [ebx - 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x60]
test eax, eax
jl 0x498e3e
fld dword [ebx - 0x20]
push eax
fistp dword [esp]
sub eax, eax
push eax
push eax
push eax
push 0x664240
push 0x66a06c
push 0x65dd30
call dword [0x67d014]
push dword [0x66a06c]
push 0x8c0000
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x498e5c
push dword [0x66a06c]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x498e7a
push dword [0x66a06c]
push 1
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x11c]
test eax, eax
pop ecx
jl 0x498e98
push dword [0x66a06c]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x84]
test eax, eax
pop ecx
jl 0x498ee1
mov dword [ebx + 0x7c], 0
jmp 0x498eaa
push 0x66a058
push 0
call dword [0x67e2d4]
push eax
mov eax, dword [ebx + 0x7c]
pop edx
push eax
push edx
sub eax, eax
push eax
push eax
push eax
push 2
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jl 0x498f45
fld dword [ebx + 0x50]
push eax
fistp dword [esp]
sub eax, eax
push eax
push eax
push eax
push 0x664250
push 0x66a070
push 0x65dd30
call dword [0x67e2cc]
lea eax, [ebx - 0x18]
push eax
push 0x66a070
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
call dword [0x67cb34]
cmp dword [ebx + 0x7c], 1
jge 0x498f30
jmp 0x498f4b
push dword [ebx - 0x18]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x84]
test eax, eax
pop ecx
jl 0x498f60
push dword [ebx - 0x18]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x498f88
mov eax, dword [ebx + 0x7c]
jmp 0x499073
push dword [ebx - 0x18]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x498fa8
jmp 0x4990b3
push dword [ebx - 0x18]
push 0x9723ab
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x498fc8
jmp 0x4990b3
jl 0x498fe8
jmp 0x4990b3
jl 0x499008
jmp 0x4990b3
jl 0x499028
jmp 0x4990b3
jl 0x499048
jmp 0x4990b3
jl 0x499068
jmp 0x4990b3
jl 0x499149
jmp 0x4990b3
cmp eax, 0
je 0x498f73
cmp eax, 1
je 0x498f93
cmp eax, 2
je 0x498fb3
lea ecx, [ebx - 0x18]
call dword [0x67cb18]
mov eax, dword [ebx + 0x7c]
and eax, 1
test eax, eax
jne 0x4990cf
jmp 0x4990db
mov dword [ebx + 0x74], 0
jmp 0x4990e2
mov dword [ebx + 0x74], 0x14
push 0x66a058
push 0
call dword [0x67e2d4]
push eax
mov eax, dword [ebx + 0x7c]
pop edx
push eax
push edx
sub eax, eax
push eax
push eax
push dword [ebx + 0x74]
push 0x1e
push 0x14
sub eax, eax
push eax
push eax
push eax
push 0x664260
push 0x66a074
push 0x65dd30
call dword [0x67e2cc]
lea eax, [ebx - 0x2c]
push eax
push 0x66a074
push dword [ebx + 0x7c]
call dword [0x67e2d4]
push eax
call dword [0x67cb34]
push dword [ebx - 0x2c]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x84]
test eax, eax
pop ecx
jl 0x499164
push dword [ebx - 0x2c]
push 0xffffff
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x499187
push dword [ebx - 0x2c]
push 0x66a070
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
jl 0x49919d
push dword [ebx + 0x50]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
test eax, eax
pop ecx
jl 0x4991d9
mov eax, dword [ebx + 0x7c]
jmp 0x49924f
push dword [ebx - 0x2c]
push 0x66a060
push dword [ebx + 0x7c]
call dword [0x67e2d4]
lea edx, [ebx - 0x40]
mov ecx, 8
mov dword [edx], ecx
add edx, ecx
and dword [edx], 0
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x68]
test eax, eax
jl 0x4991f9
lea edx, [ebx - 0x40]
lea ecx, [ebx + 0x44]
call dword [0x67cfdc]
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
pop ecx
jl 0x499229
lea ecx, [ebx - 0x40]
push ecx
lea ecx, [ebx + 0x44]
push ecx
mov eax, 0x1010000
call dword [0x67d050]
jmp 0x499262
push dword [ebx - 0x2c]
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
pop ecx
jl 0x499244
push dword [ebx - 0x2c]
push 2
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x11c]
test eax, eax
pop ecx
jl 0x4992c0
jmp 0x499262
cmp eax, 1
jl 0x49925d
cmp eax, 6
jle 0x4991b0
cmp eax, 7
je 0x499217
lea ecx, [ebx - 0x2c]
call dword [0x67cb18]
mov eax, dword [ebx + 0x7c]
inc eax
cmp eax, 7
mov dword [ebx + 0x7c], eax
jg 0x499280
jmp 0x498eaa
mov dword [ebx + 0x5c], 0
jmp 0x49928c
push 0x66a058
push 0
call dword [0x67e2d4]
push eax
mov eax, dword [ebx + 0x5c]
pop edx
push eax
push edx
sub eax, eax
push eax
push eax
push 0x66a058
push 0
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jl 0x499313
fld dword [ebx + 0x50]
fsub dword [0x65d408]
push eax
fistp dword [esp]
push 0x18
push 0x18
sub eax, eax
push eax
push eax
push eax
push 0x664274
push 0x66a078
push 0x65df3c
call dword [0x67e2cc]
mov eax, 0x66a078
push eax
push dword [ebx + 0x5c]
call dword [0x67e2d4]
push eax
push 0x3c323c
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
pop ecx
jl 0x49934e
mov eax, 0x66a078
push eax
push dword [ebx + 0x5c]
call dword [0x67e2d4]
push eax
push 0x66083c
push 0x18
push 0x18
push 0
call dword [0x67e520]
mov dword [ebx + 0x40], eax
push eax
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc4]
test eax, eax
pop ecx
jl 0x49937c
lea ecx, [ebx + 0x40]
call dword [0x67cb18]
mov eax, 0x66a078
push eax
push dword [ebx + 0x5c]
call dword [0x67e2d4]
push eax
push 0
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x64]
test eax, eax
pop ecx
jl 0x4993ac
mov eax, dword [ebx + 0x5c]
inc eax
cmp eax, 0x28
mov dword [ebx + 0x5c], eax
jg 0x499397
jmp 0x49928c
mov eax, dword [0x66a068]
push 0x65d870
push eax
mov ecx, dword [eax]
call dword [ecx + 0x134]
test eax, eax
jl 0x4993c7
mov eax, dword [0x66a06c]
push 0x65d870
push eax
mov ecx, dword [eax]
call dword [ecx + 0x134]
test eax, eax
jl 0x4993ee
push dword [0x66a050]
push 0
push 0x66a060
push 1
call dword [0x67e2d4]
lea edx, [ebx + 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
jl 0x499410
fld dword [ebx + 0x50]
push 0x66a060
push 1
call dword [0x67e2d4]
lea edx, [ebx + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jl 0x499443
fld dword [ebx + 0x30]
fadd st(0)
fsubp st(1)
fsub dword [0x65d358]
push eax
fistp dword [esp]
push 0x66a064
push 7
call dword [0x67e2d4]
lea edx, [ebx + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x8c]
test eax, eax
jl 0x499469
fld dword [ebx + 0x20]
push eax
fistp dword [esp]
push 0x66a060
push 1
call dword [0x67e2d4]
lea edx, [ebx + 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
jl 0x499494
fld dword [ebx + 0x10]
fadd st(0)
push eax
fistp dword [esp]
push 0x66a064
push 7
call dword [0x67e2d4]
lea edx, [ebx - 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x94]
test eax, eax
jl 0x4994bc
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
lea ecx, [ebx + 0x68]
lea edx, [ebx + 0x64]
lea eax, [ebx + 0x60]
push ecx
push edx
push eax
mov eax, 3
call dword [0x67d050]
mov esp, ebp
pop ebp
pop ebx
pop edi
pop esi
ret