Function at 0x41fee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4c693f
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x521da0]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
or esi, 0xffffffff
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
lea ecx, [esp + 0x60]
mov dword [esp + 0x198], ebx
call dword [0x4ce778]
lea ecx, [esp + 0x78]
mov byte [esp + 0x198], 1
call dword [0x4ce778]
mov ebp, dword [esp + 0x1a0]
lea eax, [ebp + 0x118]
push eax
mov byte [esp + 0x19c], 2
mov dword [esp + 0x30], ebx
call dword [0x4ce57c]
test eax, eax
jne 0x41ffa6
cmp dword [ebp + 0x128], 1
jne 0x41ffa6
mov eax, dword [edi + 0xa0]
mov dword [esp + 0x2c], eax
cmp dword [ebp + 0x20], esi
je 0x420114
lea eax, [ebp + 0x118]
push eax
call dword [0x4ce57c]
test eax, eax
jne 0x420114
mov ecx, dword [edi + 0x11c]
sub ecx, dword [edi + 0x118]
mov esi, dword [ebp + 0x20]
sar ecx, 2
cmp esi, ecx
jb 0x41ffdf
call fcn.00496353
mov edx, dword [edi + 0x118]
mov esi, dword [edx + esi*4]
push 1
mov ecx, esi
call fcn.0045bfb0
mov dword [esp + 0x14], eax
push ebx
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call fcn.0041cac0
mov edx, dword [eax + 4]
mov ecx, dword [eax]
add edx, dword [esp + 0x2c]
cmp dword [esi + 0xa4], 0xffffffff
lea eax, [esi + 0xa4]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
jne 0x420027
or eax, 0xffffffff
jmp 0x420032
push eax
lea ecx, [esi + 0x5c]
call fcn.00412930
mov eax, dword [eax]
mov edx, dword [esi]
mov ecx, dword [ebp + 0x108]
push 0xffffffffffffffff
push ebx
push 1
push edx
mov edx, dword [esp + 0x1b4]
push eax
mov dword [esi + 0x25c], ecx
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x30]
push eax
push ecx
push edx
lea eax, [esp + 0xb0]
push eax
mov ecx, edi
call fcn.0041e650
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x40], ecx
mov ecx, dword [eax]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0xa0], ebx
cmp eax, ebx
je 0x4200c1
push eax
call fcn.00497e19
add esp, 4
mov ecx, dword [esp + 0x1ac]
cmp dword [ebp + 0xd0], ecx
jne 0x420114
cmp dword [esp + 0x1b0], 2
je 0x420114
lea ecx, [esp + 0x78]
mov dword [edi + 0xb64], ebx
mov byte [esp + 0x198], 1
call dword [0x4ce78c]
lea ecx, [esp + 0x60]
mov byte [esp + 0x198], 0
call dword [0x4ce78c]
lea ecx, [esp + 0x30]
call fcn.00418320
xor eax, eax
jmp 0x420d5f
mov eax, dword [esp + 0x1ac]
mov edx, dword [esp + 0x1b0]
cmp dword [ebp + 0xd0], eax
jne 0x42015a
cmp edx, 2
je 0x42015a
lea ecx, [esp + 0x78]
mov byte [esp + 0x198], 1
call dword [0x4ce78c]
lea ecx, [esp + 0x60]
mov byte [esp + 0x198], 0
call dword [0x4ce78c]
xor eax, eax
jmp 0x420d5f
mov dword [ebp + 0xd0], eax
mov dword [ebp + 0xd8], ebx
mov esi, dword [ebp + 0x34]
sub esi, dword [ebp + 0x30]
sar esi, 2
cmp dword [ebp + 0xe0], ebx
jne 0x4201f7
cmp esi, ebx
jle 0x4201f7
nop
mov eax, dword [ebp + 0x34]
sub eax, dword [ebp + 0x30]
sar eax, 2
cmp ebx, eax
jb 0x420199
call fcn.00496353
mov edx, dword [esp + 0x1b0]
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + ebx*4]
cmp ebx, dword [ebp + 0xdc]
je 0x4201eb
cmp ebx, dword [esp + 0x1ac]
je 0x4201cc
cmp dword [eax + 0xe0], 3
mov ecx, 1
mov dword [eax + 0x10c], ecx
je 0x4201eb
mov dword [eax + 0xe0], ecx
jmp 0x4201eb
mov ecx, dword [eax + 0xe0]
cmp ecx, edx
je 0x4201e0
mov dword [eax + 0x10c], 1
cmp ecx, 3
je 0x4201eb
mov dword [eax + 0xe0], edx
inc ebx
cmp ebx, esi
jl 0x420180
mov eax, dword [esp + 0x1ac]
cmp eax, 0xffffffff
je 0x42020e
mov edx, dword [ebp + 0x34]
sub edx, dword [ebp + 0x30]
sar edx, 2
cmp eax, edx
jb 0x42020e
call fcn.00496353
mov ebx, dword [ebp + 0x30]
cmp ebx, dword [ebp + 0x34]
jbe 0x42021b
call fcn.00496353
mov eax, ebp
mov ebp, dword [eax + 0x24]
mov dword [esp + 0x24], ebp
mov esi, dword [eax + 0x34]
mov dword [esp + 0x28], ebx
cmp dword [eax + 0x30], esi
jbe 0x42023c
call fcn.00496353
mov eax, dword [esp + 0x1a0]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x420247
cmp eax, ebp
je 0x42024c
call fcn.00496353
cmp esi, ebx
je 0x420d36
cmp dword [esp + 0x1b4], 0
je 0x420286
test ebp, ebp
jne 0x420583
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420277
call fcn.00496353
mov eax, dword [ebx]
cmp dword [eax + 0xfc], 1
jne 0x420d02
lea ecx, [esp + 0x60]
call dword [0x4ce694]
xor esi, esi
cmp ebp, esi
jne 0x42058b
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4202ab
call fcn.00496353
mov ecx, dword [ebx]
mov eax, dword [ecx + 0xe0]
sub eax, esi
je 0x4206bf
sub eax, 1
jne 0x420d02
cmp ebp, esi
jne 0x420593
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4202dd
call fcn.00496353
mov edx, dword [ebx]
cmp dword [edx + 0x10c], 1
jne 0x420d02
cmp ebp, esi
jne 0x42059b
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420305
call fcn.00496353
mov eax, dword [ebx]
mov dword [eax + 0x10c], esi
cmp ebp, esi
jne 0x4205a3
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420326
call fcn.00496353
mov edx, dword [edi + 0x11c]
sub edx, dword [edi + 0x118]
mov ecx, dword [ebx]
mov esi, dword [ecx + 4]
sar edx, 2
cmp esi, edx
jb 0x420343
call fcn.00496353
mov eax, dword [edi + 0x118]
mov esi, dword [eax + esi*4]
mov ecx, dword [esp + 0x1a4]
push 0
push 0
push esi
push ecx
mov ecx, edi
call fcn.0041d120
test ebp, ebp
jne 0x4205ab
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420379
call fcn.00496353
mov eax, dword [ebx]
mov edx, dword [eax + 0x28]
sub edx, dword [eax + 0x24]
add eax, 0x18
test edx, 0xfffffffc
je 0x4204cc
cmp dword [esi + 0xd4], 1
jne 0x420404
xor eax, eax
or ecx, 0xffffffff
mov dword [esi + 0x120], eax
mov dword [esi + 0x124], ecx
mov dword [esi + 0x128], ecx
mov dword [esi + 0x12c], ecx
mov dword [esi + 0x148], eax
mov dword [esi + 0x14c], eax
mov eax, dword [esi + 0x160]
mov ecx, dword [edi + 0x189c]
push 3
push eax
call dword [0x4ce5fc]
mov ebp, dword [esi + 0x160]
test ebp, ebp
je 0x4203f2
mov ecx, ebp
call dword [0x4ce6e4]
push ebp
call fcn.00485196
add esp, 4
mov ebp, dword [esp + 0x24]
xor eax, eax
mov dword [esi + 0x160], eax
mov dword [esi + 0xd4], eax
mov eax, dword [esi + 0x28c]
test eax, eax
je 0x4204cc
mov ecx, dword [edi + 0x189c]
push 3
push eax
call dword [0x4ce5fc]
mov ecx, dword [esi]
push ecx
push 1
mov ecx, esi
call fcn.00418200
push eax
lea edx, [esp + 0xd8]
push edx
mov ecx, edi
call fcn.00419d20
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x40], ecx
mov ecx, dword [eax]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0xe0], 0
test eax, eax
je 0x42049a
push eax
call fcn.00497e19
add esp, 4
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xf8], 0x40
mov dword [esp + 0xfc], 0
cmp ecx, dword [esi]
jne 0x4204cc
mov edx, dword [esp + 0x1a4]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, edi
call fcn.0041b4c0
test ebp, ebp
jne 0x4205b3
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4204e5
call fcn.00496353
mov eax, dword [ebx]
mov ecx, dword [eax + 0x58]
sub ecx, dword [eax + 0x54]
add eax, 0x48
test ecx, 0xfffffffc
je 0x420694
test ebp, ebp
jne 0x4205bb
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420515
call fcn.00496353
mov ecx, dword [ebx]
push 0
add ecx, 0x48
call dword [0x4ce6f8]
mov edx, dword [eax]
mov dword [esp + 0x14], edx
test ebp, ebp
jne 0x4205c3
call fcn.00496353
cmp ebx, dword [ebp + 0x10]
jb 0x42053f
call fcn.00496353
mov ecx, dword [ebx]
push 0
add ecx, 0x60
call dword [0x4ce6f8]
mov eax, dword [eax]
push eax
lea eax, [esp + 0xcc]
push eax
mov ecx, esi
call fcn.0041cac0
mov edx, dword [eax + 4]
mov ecx, dword [eax]
add edx, dword [esp + 0x2c]
cmp dword [esi + 0xa4], 0xffffffff
lea eax, [esi + 0xa4]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
jne 0x4205cb
or ebx, 0xffffffff
jmp 0x4205d6
mov eax, dword [ebp]
jmp 0x42026d
mov eax, dword [ebp]
jmp 0x4202a1
mov eax, dword [ebp]
jmp 0x4202d3
mov eax, dword [ebp]
jmp 0x4202fb
mov eax, dword [ebp]
jmp 0x42031c
mov eax, dword [ebp]
jmp 0x42036f
mov eax, dword [ebp]
jmp 0x4204db
mov eax, dword [ebp]
jmp 0x42050b
mov ebp, dword [ebp]
jmp 0x420535
push eax
lea ecx, [esi + 0x5c]
call fcn.00412930
mov ebx, dword [eax]
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
mov dword [esp + 0x1c], ebx
call fcn.0045bfb0
mov ecx, dword [esi + 0x28c]
push 0
add ecx, 0x18
mov ebp, eax
call dword [0x4ce6a0]
mov ecx, dword [esi + 0x290]
mov dword [eax], ecx
fld dword [edi + 0x18b8]
fisub dword [esp + 0x18]
mov eax, dword [edi + 0x189c]
mov edx, dword [eax + 4]
mov ecx, dword [esi + 0x28c]
sub esp, 8
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 4]
fld dword [eax + 0x26c]
fstp dword [esp]
push 0
push edx
call dword [0x4ce6c8]
mov eax, dword [esi]
mov edx, dword [esp + 0x1a4]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push eax
push ebx
lea ecx, [esp + 0x30]
push ecx
push ebp
push edx
lea eax, [esp + 0x150]
push eax
mov ecx, edi
call fcn.0041e650
mov eax, dword [esp + 0x154]
test eax, eax
je 0x420676
push eax
call fcn.00497e19
add esp, 4
mov ecx, dword [esi + 0x28c]
push ebx
push 3
push ecx
mov ecx, dword [edi + 0x189c]
call dword [0x4ce600]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
test ebp, ebp
jne 0x4206ba
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4206a9
call fcn.00496353
mov edx, dword [ebx]
mov dword [edx + 0xe0], 1
jmp 0x420d02
mov eax, dword [ebp]
jmp 0x42069f
cmp ebp, esi
jne 0x4207b5
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4206d8
call fcn.00496353
mov eax, dword [ebx]
cmp dword [eax + 0x10c], 1
jne 0x420d02
cmp ebp, esi
jne 0x4207bd
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420700
call fcn.00496353
mov ecx, dword [ebx]
mov dword [ecx + 0x10c], esi
cmp ebp, esi
jne 0x4207c5
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420721
call fcn.00496353
mov eax, dword [edi + 0x11c]
sub eax, dword [edi + 0x118]
mov edx, dword [ebx]
mov esi, dword [edx + 4]
sar eax, 2
cmp esi, eax
jb 0x42073e
call fcn.00496353
mov ecx, dword [edi + 0x118]
mov esi, dword [ecx + esi*4]
mov edx, dword [esp + 0x1a4]
push 0
push 0
push esi
push edx
mov ecx, edi
call fcn.0041d120
test ebp, ebp
jne 0x4207cd
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420770
call fcn.00496353
mov ecx, dword [ebx]
push 0
add ecx, 0x30
call dword [0x4ce6f8]
mov eax, dword [eax]
push eax
lea eax, [esp + 0xc4]
push eax
mov ecx, esi
call fcn.0041cac0
cmp dword [esi + 0xa4], 0xffffffff
mov ecx, dword [eax]
mov edx, dword [eax + 4]
lea eax, [esi + 0xa4]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
jne 0x4207d2
mov dword [esp + 0x18], 0xffffffff
jmp 0x4207e1
mov eax, dword [ebp]
jmp 0x4206ce
mov eax, dword [ebp]
jmp 0x4206f6
mov eax, dword [ebp]
jmp 0x420717
mov eax, dword [ebp]
jmp 0x420766
push eax
lea ecx, [esi + 0x5c]
call fcn.00412930
mov eax, dword [eax]
mov dword [esp + 0x18], eax
test ebp, ebp
jne 0x4208da
call fcn.00496353
cmp ebx, dword [ebp + 0x10]
jb 0x4207f8
call fcn.00496353
mov ecx, dword [esp + 0x28]
mov ecx, dword [ecx]
push 0
add ecx, 0x18
call dword [0x4ce6f8]
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.0045bfb0
cmp dword [esi + 0xd4], 1
mov ebp, eax
mov dword [esp + 0x14], ebp
jne 0x420a53
mov eax, dword [esp + 0x1a8]
mov dword [eax], 1
cmp dword [esi + 0x290], 0
jne 0x42086c
mov edx, dword [esp + 0x1a4]
push eax
push esi
push edx
mov ecx, edi
call fcn.0041d5c0
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x164]
call fcn.00412930
mov ecx, dword [eax]
push 0
push 0x17
push ecx
push esi
mov ecx, edi
call fcn.0041f380
cmp dword [esi + 0x15c], 0xffffffff
lea eax, [esi + 0x15c]
je 0x4208e2
push eax
lea ecx, [esi + 0x164]
call fcn.00412930
mov ecx, dword [esi + 0x28c]
push 0
add ecx, 0x18
mov ebx, eax
call dword [0x4ce6a0]
mov edx, dword [ebx]
mov dword [eax], edx
fld dword [edi + 0x18b8]
fisub dword [esp + 0x18]
mov eax, dword [edi + 0x189c]
mov ecx, dword [esi + 0x28c]
sub esp, 8
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 4]
fld dword [eax + 0x26c]
mov eax, dword [eax + 4]
fstp dword [esp]
push 0
push eax
call dword [0x4ce6c8]
jmp 0x4208fd
mov ebp, dword [ebp]
jmp 0x4207ee
mov ecx, dword [esi + 0x28c]
push 0
add ecx, 0x68
call dword [0x4ce6cc]
fldz
mov ecx, dword [eax]
fstp dword [ecx + 0x17c]
cmp dword [esi + 0x160], 0
jne 0x420a06
push 0xe4
call fcn.00485167
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x198], 3
test eax, eax
je 0x420931
mov ecx, eax
call dword [0x4ce6c0]
jmp 0x420933
xor eax, eax
mov ecx, dword [esi + 0x28c]
mov dword [esi + 0x160], eax
mov ebx, dword [eax]
push 0
add ecx, 0x18
mov byte [esp + 0x19c], 2
call dword [0x4ce6a0]
mov edx, dword [eax]
mov eax, dword [edi + 0x189c]
mov ecx, dword [eax + 4]
push edx
mov edx, dword [ebx]
push ecx
mov ecx, dword [esi + 0x160]
call edx
mov ecx, dword [esi + 0x160]
push 1
call dword [0x4ce6c4]
fld dword [edi + 0x18b8]
fisub dword [esp + 0x18]
mov eax, dword [edi + 0x189c]
mov ecx, dword [esi + 0x160]
sub esp, 8
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 4]
fld dword [eax + 0x26c]
mov eax, dword [eax + 4]
fstp dword [esp]
push 0
push eax
call dword [0x4ce6c8]
mov ecx, dword [esi + 0x160]
mov byte [ecx + 0xb8], 1
mov ecx, dword [esi + 0x160]
push 0
add ecx, 0x68
call dword [0x4ce6cc]
mov edx, dword [esi + 0x160]
mov eax, dword [eax]
mov dword [edx + 0x80], eax
mov ecx, dword [esi + 0x160]
push ecx
mov ecx, dword [edi + 0x189c]
call dword [0x4ce6d0]
fld1
mov edx, dword [esi + 0x160]
mov eax, dword [edx + 0x80]
fstp dword [eax + 0x17c]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esi + 0x160]
push ebx
push 3
push ecx
mov ecx, dword [edi + 0x189c]
call dword [0x4ce600]
mov edx, dword [esi]
mov ecx, dword [esp + 0x1a4]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push edx
push ebx
lea eax, [esp + 0x30]
push eax
push ebp
push ecx
lea edx, [esp + 0x120]
push edx
mov ecx, edi
call fcn.0041e650
mov eax, dword [esp + 0x124]
jmp 0x420cbd
cmp dword [esi + 0x298], 0
mov ebx, dword [esp + 0x1a4]
jne 0x420afc
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push ebp
mov ecx, ebx
call fcn.00411910
cmp dword [esi + 0xd4], 1
jne 0x420a92
lea edx, [esp + 0x14]
push edx
push esi
push ebx
mov ecx, edi
call fcn.0041d5c0
jmp 0x420afc
cmp dword [esi + 0x298], 0
jne 0x420afc
push 0x60
call fcn.00485167
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x198], 4
test eax, eax
je 0x420abf
mov ecx, eax
call dword [0x4ce6b0]
jmp 0x420ac1
xor eax, eax
push 0
push 0
push ebp
mov ecx, ebx
mov byte [esp + 0x1a4], 2
mov dword [esi + 0x298], eax
call fcn.00411910
push 0
push ebp
mov ecx, ebx
call fcn.00412680
push eax
lea eax, [esi + 0x298]
push eax
mov ecx, edi
call fcn.00417890
push ebp
mov ecx, ebx
call fcn.004124b0
cmp dword [esi + 0x28c], 0
jne 0x420c25
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push eax
push ecx
lea edx, [esp + 0x30]
push edx
push ebp
push ebx
lea eax, [esp + 0xb0]
push eax
mov ecx, edi
call fcn.0041e650
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x40], ecx
mov ecx, dword [eax]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0xa0], 0
test eax, eax
je 0x420b8a
push eax
call fcn.00497e19
add esp, 4
mov eax, dword [esp + 0x24]
mov dword [esp + 0xb8], 0x40
mov dword [esp + 0xbc], 0
test eax, eax
jne 0x420d26
call fcn.00496353
xor eax, eax
mov ecx, dword [esp + 0x28]
cmp ecx, dword [eax + 0x10]
jb 0x420bc1
call fcn.00496353
mov edx, dword [esp + 0x28]
mov eax, dword [edx]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push ebp
mov ecx, ebx
mov dword [eax + 0xf8], 1
call fcn.00411910
push 0
push ebp
mov ecx, ebx
call fcn.00412680
push 0
mov dword [esp + 0x44], eax
push 0x15
lea eax, [esp + 0x38]
push eax
push esi
mov ecx, edi
call fcn.0041f1c0
push ebp
mov ecx, ebx
call fcn.004124b0
mov ecx, dword [esi + 0x28c]
push 0
add ecx, 0x68
call dword [0x4ce6cc]
fld1
mov ecx, dword [eax]
fstp dword [ecx + 0x17c]
mov edx, dword [esp + 0x18]
mov eax, dword [esi + 0x28c]
mov ecx, dword [edi + 0x189c]
push edx
push 3
push eax
call dword [0x4ce600]
mov ecx, dword [esi + 0x28c]
push 0
add ecx, 0x18
call dword [0x4ce6a0]
mov ecx, dword [esi + 0x298]
mov dword [eax], ecx
fld dword [edi + 0x18b8]
fisub dword [esp + 0x18]
mov eax, dword [edi + 0x189c]
mov edx, dword [eax + 4]
mov ecx, dword [esi + 0x28c]
sub esp, 8
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 4]
fld dword [eax + 0x26c]
fstp dword [esp]
push 0
push edx
call dword [0x4ce6c8]
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push eax
push ecx
lea edx, [esp + 0x30]
push edx
push ebp
push ebx
lea eax, [esp + 0x180]
push eax
mov ecx, edi
call fcn.0041e650
mov eax, dword [esp + 0x184]
test eax, eax
je 0x420cca
push eax
call fcn.00497e19
add esp, 4
mov eax, dword [esp + 0x24]
mov ebx, 1
mov dword [esi + 0xb8], ebx
test eax, eax
jne 0x420d2d
call fcn.00496353
xor eax, eax
mov esi, dword [esp + 0x28]
cmp esi, dword [eax + 0x10]
jb 0x420cf2
call fcn.00496353
mov ecx, dword [esi]
mov ebp, dword [esp + 0x24]
mov dword [ecx + 0xf8], ebx
mov ebx, dword [esp + 0x28]
test ebp, ebp
jne 0x420d31
call fcn.00496353
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x420d17
call fcn.00496353
mov eax, dword [esp + 0x1a0]
add ebx, 4
jmp 0x420224
mov eax, dword [eax]
jmp 0x420bb3
mov eax, dword [eax]
jmp 0x420ce4
mov eax, dword [ebp]
jmp 0x420d0d
lea ecx, [esp + 0x78]
mov byte [esp + 0x198], 1
call dword [0x4ce78c]
lea ecx, [esp + 0x60]
mov byte [esp + 0x198], 0
call dword [0x4ce78c]
mov eax, 1
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x188
ret 0x1c