Function at 0x487e10
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x925625
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x134
push ebx
mov ebx, ecx
push esi
push edi
lea ecx, [esp + 0xc]
call fcn.00911f0c
lea ecx, [esp + 0x3c]
mov dword [esp + 0x148], 0
call fcn.00911f0c
lea ecx, [esp + 0x34]
mov byte [esp + 0x148], 1
call fcn.00911f0c
lea ecx, [esp + 0x38]
mov byte [esp + 0x148], 2
call fcn.00911f0c
lea ecx, [esp + 0x30]
mov byte [esp + 0x148], 3
call fcn.00911f0c
lea ecx, [esp + 0x2c]
mov byte [esp + 0x148], 4
call fcn.00911f0c
mov esi, dword [ebp + 0x14]
lea ecx, [esp + 0x30]
mov byte [esp + 0x148], 5
lea eax, [esi + 0x10]
push eax
call fcn.00911f3c
push 0xa907a4
push str.dedw
lea ecx, [esp + 0x38]
call fcn.009121a0
push 0xa77bb0
lea eax, [esp + 0x2c]
push esi
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 6
call fcn.0091206e
lea ecx, [esp + 0x28]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov ecx, dword [0xa8e738]
lea edx, [esp + 0x34]
push ecx
push 0xa
push 0x25
push 0xa771b0
push edx
call fcn.00911f42
mov eax, dword [0xa8e73c]
lea ecx, [esp + 0x4c]
push eax
push 0xa
push 0x25
push 0xa771b0
push ecx
call fcn.00911f42
mov ax, word [ebx + 0x244e]
add esp, 0x28
cmp ax, 3
je 0x488749
cmp ax, 9
jne 0x48832f
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x2528]
mov edx, dword [0xa8e738]
mov ecx, ebx
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2008]
mov ecx, ebx
fstp qword [ebx + 0x2008]
fld qword [ebx + 0x24c8]
fmul qword [ebx + 0x2528]
mov eax, dword [0xa8e738]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2010]
fstp qword [ebx + 0x2010]
fld qword [ebx + 0x2528]
fmul qword [ebx + 0x24d0]
mov ecx, dword [0xa8e738]
push ecx
mov ecx, ebx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2018]
mov ecx, ebx
fstp qword [ebx + 0x2018]
fld qword [ebx + 0x24d8]
fmul qword [ebx + 0x2528]
mov edx, dword [0xa8e738]
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2020]
mov ecx, ebx
fstp qword [ebx + 0x2020]
fld qword [ebx + 0x24e8]
fmul qword [ebx + 0x2528]
mov eax, dword [0xa8e738]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2038]
fstp qword [ebx + 0x2038]
fld qword [ebx + 0x24f8]
fmul qword [ebx + 0x2528]
mov ecx, dword [0xa8e738]
push ecx
mov ecx, ebx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2048]
mov ecx, ebx
fstp qword [ebx + 0x2048]
fld qword [ebx + 0x2528]
fmul qword [ebx + 0x2500]
mov edx, dword [0xa8e738]
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2050]
fstp qword [ebx + 0x2050]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x2508]
fmul qword [ebx + 0x2528]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2058]
fstp qword [ebx + 0x2058]
fld qword [ebx + 0x2510]
fmul qword [ebx + 0x2528]
mov ecx, dword [0xa8e738]
push ecx
mov ecx, ebx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2060]
mov ecx, ebx
fstp qword [ebx + 0x2060]
fld qword [ebx + 0x2518]
fmul qword [ebx + 0x2528]
mov edx, dword [0xa8e738]
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2078]
mov ecx, ebx
fstp qword [ebx + 0x2078]
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x2528]
mov eax, dword [0xa8e738]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20c0]
fstp qword [ebx + 0x20c0]
fld qword [ebx + 0x24c8]
fmul qword [ebx + 0x2528]
mov ecx, dword [0xa8e738]
push ecx
mov ecx, ebx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20c8]
mov ecx, ebx
fstp qword [ebx + 0x20c8]
fld qword [ebx + 0x2528]
fmul qword [ebx + 0x24d0]
mov edx, dword [0xa8e738]
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20d0]
mov ecx, ebx
fstp qword [ebx + 0x20d0]
fld qword [ebx + 0x24d8]
fmul qword [ebx + 0x2528]
mov eax, dword [0xa8e738]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20d8]
fstp qword [ebx + 0x20d8]
fld qword [ebx + 0x24e8]
fmul qword [ebx + 0x2528]
mov ecx, dword [0xa8e738]
push ecx
mov ecx, ebx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20e8]
mov ecx, ebx
fstp qword [ebx + 0x20e8]
fld qword [ebx + 0x24f8]
fmul qword [ebx + 0x2528]
mov edx, dword [0xa8e738]
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20f0]
mov ecx, ebx
fstp qword [ebx + 0x20f0]
fld qword [ebx + 0x2528]
fmul qword [ebx + 0x2500]
mov eax, dword [0xa8e738]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20f8]
fstp qword [ebx + 0x20f8]
fld qword [ebx + 0x2508]
fmul qword [ebx + 0x2528]
mov ecx, dword [0xa8e738]
push ecx
mov ecx, ebx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2100]
mov ecx, ebx
fstp qword [ebx + 0x2100]
fld qword [ebx + 0x2510]
fmul qword [ebx + 0x2528]
mov edx, dword [0xa8e738]
push edx
fdiv qword [ebx + 0xa00]
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2108]
fstp qword [ebx + 0x2108]
fld qword [ebx + 0x2518]
fmul qword [ebx + 0x2528]
mov eax, dword [0xa8e738]
push eax
fdiv qword [ebx + 0xa00]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2118]
fstp qword [ebx + 0x2118]
jmp 0x488775
cmp ax, 0xa
jne 0x488392
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2088]
mov ecx, ebx
fstp qword [ebx + 0x2088]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2120]
fstp qword [ebx + 0x2120]
jmp 0x488775
cmp ax, 0xb
jne 0x4883f4
mov eax, dword [0xa8e738]
mov ecx, ebx
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push eax
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2090]
fstp qword [ebx + 0x2090]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2128]
fstp qword [ebx + 0x2128]
jmp 0x488775
mov edx, dword [0xa8e738]
mov ecx, ebx
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2008]
mov ecx, ebx
fstp qword [ebx + 0x2008]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x24c8]
fmul qword [ebx + 0x24b8]
push eax
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2010]
fstp qword [ebx + 0x2010]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24b8]
fmul qword [ebx + 0x24d0]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2018]
mov ecx, ebx
fstp qword [ebx + 0x2018]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x24d8]
fmul qword [ebx + 0x24b8]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2020]
mov ecx, ebx
fstp qword [ebx + 0x2020]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x24e8]
fmul qword [ebx + 0x24b8]
push eax
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2038]
fstp qword [ebx + 0x2038]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24f8]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2048]
mov ecx, ebx
fstp qword [ebx + 0x2048]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x24b8]
fmul qword [ebx + 0x2500]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2050]
mov ecx, ebx
fstp qword [ebx + 0x2050]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x2508]
fmul qword [ebx + 0x24b8]
push eax
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2058]
fstp qword [ebx + 0x2058]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x2510]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2060]
mov ecx, ebx
fstp qword [ebx + 0x2060]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x2518]
fmul qword [ebx + 0x24b8]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2078]
mov ecx, ebx
fstp qword [ebx + 0x2078]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push eax
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20c0]
fstp qword [ebx + 0x20c0]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24c8]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20c8]
mov ecx, ebx
fstp qword [ebx + 0x20c8]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x24b8]
fmul qword [ebx + 0x24d0]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20d0]
mov ecx, ebx
fstp qword [ebx + 0x20d0]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x24d8]
fmul qword [ebx + 0x24b8]
push eax
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20d8]
fstp qword [ebx + 0x20d8]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24e8]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20e8]
mov ecx, ebx
fstp qword [ebx + 0x20e8]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x24f8]
fmul qword [ebx + 0x24b8]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20f0]
fstp qword [ebx + 0x20f0]
mov eax, dword [0xa8e738]
push eax
fld qword [ebx + 0x24b8]
fmul qword [ebx + 0x2500]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x20f8]
fstp qword [ebx + 0x20f8]
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x2508]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2100]
mov ecx, ebx
fstp qword [ebx + 0x2100]
mov edx, dword [0xa8e738]
fld qword [ebx + 0x2510]
fmul qword [ebx + 0x24b8]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2108]
fstp qword [ebx + 0x2108]
mov eax, dword [0xa8e738]
fld qword [ebx + 0x2518]
fmul qword [ebx + 0x24b8]
push eax
jmp 0x488311
mov ecx, dword [0xa8e738]
fld qword [ebx + 0x24b8]
fmul qword [ebx + 0x24c0]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
fadd qword [ebx + 0x2080]
fstp qword [ebx + 0x2080]
mov eax, dword [ebx + 0x584]
test eax, eax
jle 0x488799
cmp eax, dword [ebx + 0x588]
jge 0x488799
mov edx, dword [ebp + 0xc]
add eax, edx
push eax
lea eax, [esp + 0x10]
push 0xa773a4
push eax
jmp 0x4887a7
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0xc]
push ecx
push 0xa773a4
push edx
call fcn.00911f42
mov eax, dword [esp + 0x18]
add esp, 0xc
lea edi, [esi + 4]
push eax
push 0xa786b8
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea ecx, [esp + 0x2c]
push edi
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 7
call fcn.0091206e
lea ecx, [esp + 0x28]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov ax, word [ebx + 0x244e]
cmp ax, 1
jne 0x488819
push 0xa773a0
lea ecx, [esp + 0x10]
call fcn.00911f06
jmp 0x488d33
cmp ax, 2
je 0x488806
cmp ax, 3
jne 0x488874
fld qword [ebx + 0x2450]
fst qword [esp + 0x14]
fcomp qword [0x9cb978]
fnstsw ax
test ah, 1
je 0x488853
lea edx, [esp + 0xc]
push 0xa77394
push edx
call fcn.00911f42
add esp, 8
jmp 0x488d33
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
lea edx, [esp + 0x14]
push 0xa77388
push edx
call fcn.00911f42
add esp, 0x10
jmp 0x488d33
mov ax, word [ebx + 0x2448]
cmp ax, 0x23
je 0x488c70
cmp ax, 0x51
je 0x488c70
cmp ax, 0x42
je 0x488c70
cmp ax, 0x43
je 0x488c70
cmp ax, 0x44
je 0x488c70
cmp ax, 0x45
je 0x488c70
cmp ax, 0x55
je 0x488c70
cmp ax, 0x57
je 0x488c70
cmp ax, 0x4d
je 0x488c70
cmp ax, 0x5a
je 0x488c70
cmp ax, 0x5b
je 0x488c70
cmp ax, 2
je 0x488b98
cmp ax, 9
je 0x488b98
cmp ax, 4
je 0x488a31
cmp ax, 5
je 0x488a31
cmp ax, 6
je 0x488a31
cmp ax, 0xc
je 0x488a31
cmp ax, 0xd
je 0x488a31
cmp ax, 0xe
je 0x488a31
mov al, byte [ebx + 0x24a0]
mov ecx, dword [ebx + 0x2454]
cmp al, 1
mov eax, dword [ebx + 0x2450]
mov edx, ecx
mov dword [esp + 0x18], ecx
push edx
mov dword [esp + 0x18], eax
push eax
mov ecx, ebx
jne 0x4889cf
call fcn.0068e470
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
fsubr qword [esp + 0x14]
fld dword [ebx + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4889a6
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
movsx eax, word [ebx + 0x244a]
push ecx
push edx
push eax
push 0xa786a8
lea ecx, [esp + 0x1c]
push ecx
call fcn.00911f42
add esp, 0x14
jmp 0x488d33
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
movsx ecx, word [ebx + 0x244a]
push edx
push eax
push ecx
lea edx, [esp + 0x18]
push 0xa78698
push edx
call fcn.00911f42
add esp, 0x14
jmp 0x488d33
call fcn.0068e470
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
fsubr qword [esp + 0x14]
fld dword [ebx + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x488a08
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
movsx eax, word [ebx + 0x244a]
push ecx
push edx
push eax
push 0xa7868c
jmp 0x488994
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
movsx ecx, word [ebx + 0x244a]
push edx
push eax
push ecx
lea edx, [esp + 0x18]
push 0xa78680
push edx
call fcn.00911f42
add esp, 0x14
jmp 0x488d33
xor edi, edi
cmp ax, 4
je 0x488ab0
cmp ax, 5
je 0x488ab0
cmp ax, 6
je 0x488ab0
cmp ax, 0xc
je 0x488aa8
cmp ax, 0xd
je 0x488aa8
cmp ax, 0xe
je 0x488aa8
cmp ax, 0xf
je 0x488aa0
cmp ax, 0x10
je 0x488aa0
cmp ax, 0x11
je 0x488aa0
mov edx, dword [ebx + 0x964]
movsx ecx, ax
cmp ecx, edx
je 0x488a9b
cmp ax, 0x13
je 0x488a9b
cmp ecx, dword [ebx + 0x968]
je 0x488a9b
cmp ax, 0x15
je 0x488a96
cmp ax, 0x16
je 0x488a96
cmp ax, 0x17
jne 0x488ab6
lea edi, [ecx - 0x14]
jmp 0x488ab6
lea edi, [ecx - 0x11]
jmp 0x488ab6
movsx edi, ax
sub edi, 0xe
jmp 0x488ab6
movsx edi, ax
sub edi, 0xb
jmp 0x488ab6
movsx edi, ax
sub edi, 3
mov al, byte [ebx + 0x24a0]
mov ecx, dword [ebx + 0x2454]
cmp al, 1
mov eax, dword [ebx + 0x2450]
mov edx, ecx
mov dword [esp + 0x18], ecx
push edx
mov dword [esp + 0x18], eax
push eax
mov ecx, ebx
jne 0x488b39
call fcn.0068e470
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
fsubr qword [esp + 0x14]
fld dword [ebx + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x488b17
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
movsx eax, word [ebx + 0x244a]
push ecx
push edx
push eax
push edi
push 0xa7866c
jmp 0x488d26
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
movsx ecx, word [ebx + 0x244a]
push edx
push eax
push ecx
push edi
lea edx, [esp + 0x1c]
push 0xa78658
push edx
jmp 0x488d2b
call fcn.0068e470
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
fsubr qword [esp + 0x14]
fld dword [ebx + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x488b76
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
movsx eax, word [ebx + 0x244a]
push ecx
push edx
push eax
push edi
push 0xa78644
jmp 0x488d26
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
movsx ecx, word [ebx + 0x244a]
push edx
push eax
push ecx
push edi
lea edx, [esp + 0x1c]
push 0xa78630
push edx
jmp 0x488d2b
movsx eax, word [ebx + 0x244a]
push 2
lea edx, [esp + 0x2c]
lea ecx, [eax + eax - 2]
push ecx
push edx
lea ecx, [ebx + 0x50]
call fcn.0091237a
mov al, byte [ebx + 0x24a0]
mov byte [esp + 0x148], 8
cmp al, 1
jne 0x488c35
mov ecx, dword [ebx + 0x2454]
mov eax, dword [ebx + 0x2450]
mov edx, ecx
mov dword [esp + 0x18], ecx
push edx
push eax
mov ecx, ebx
mov dword [esp + 0x1c], eax
call fcn.0068e470
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubr qword [esp + 0x14]
fld dword [ebx + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x488c1a
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
lea ecx, [esp + 0x18]
push 0xa78620
push ecx
jmp 0x488c52
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
lea edx, [esp + 0x18]
push 0xa78610
push edx
jmp 0x488c52
mov eax, dword [ebx + 0x2454]
mov ecx, dword [ebx + 0x2450]
mov edx, dword [esp + 0x28]
push eax
push ecx
push edx
lea eax, [esp + 0x18]
push 0xa78604
push eax
call fcn.00911f42
add esp, 0x14
lea ecx, [esp + 0x28]
mov byte [esp + 0x148], 5
call fcn.00911ee2
jmp 0x488d33
cmp byte [ebx + 0x24a0], 1
jne 0x488d03
mov edx, dword [ebx + 0x2454]
mov ecx, dword [ebx + 0x2450]
mov eax, edx
mov dword [esp + 0x14], ecx
push eax
push ecx
mov ecx, ebx
mov dword [esp + 0x20], edx
call fcn.0068e470
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubr qword [esp + 0x14]
fld dword [ebx + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x488cdd
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
movsx ecx, word [ebx + 0x244c]
push edx
push eax
movsx edx, word [ebx + 0x244a]
push ecx
push edx
lea eax, [esp + 0x1c]
push 0xa785f0
push eax
jmp 0x488d2b
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
movsx eax, word [ebx + 0x244c]
push ecx
push edx
movsx ecx, word [ebx + 0x244a]
push eax
push ecx
lea edx, [esp + 0x1c]
push 0xa785dc
push edx
jmp 0x488d2b
mov eax, dword [ebx + 0x2454]
mov ecx, dword [ebx + 0x2450]
movsx edx, word [ebx + 0x244c]
push eax
push ecx
movsx eax, word [ebx + 0x244a]
push edx
push eax
push 0xa785c8
lea ecx, [esp + 0x20]
push ecx
call fcn.00911f42
add esp, 0x18
mov edx, dword [esp + 0xc]
add esi, 8
push edx
push str.debh
mov ecx, esi
call fcn.009121a0
push 0xa77bb0
lea eax, [esp + 0x20]
push esi
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 9
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov ecx, dword [ebx + 0x9a4]
xor eax, eax
mov edx, ecx
lea edi, [esp + 0x40]
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 0x3c
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [ebx + 0x2458]
lea ecx, [esp + 0x44]
push eax
push ecx
nop
call fcn.00b151b7
mov al, byte [ebx + 0x24a4]
add esp, 0xc
cmp al, 0x59
je 0x488dcd
cmp al, 0x79
je 0x488dcd
lea edx, [esp + 0x40]
lea eax, [esp + 0xc]
push edx
push 0xa76fa0
push eax
jmp 0x488dfc
mov ecx, dword [ebp + 8]
push ecx
mov ecx, ebx
call fcn.004fb710
test al, al
je 0x488ded
lea edx, [esp + 0x40]
lea eax, [esp + 0xc]
push edx
push 0xa771dc
push eax
jmp 0x488dfc
lea ecx, [esp + 0x40]
lea edx, [esp + 0xc]
push ecx
push 0xa76fa0
push edx
call fcn.00911f42
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x18]
add esp, 0xc
lea edi, [eax + 0xc]
push ecx
push str.demc
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea edx, [esp + 0x20]
push edi
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0xa
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
lea eax, [ebx + 0x2495]
lea ecx, [esp + 0x2c]
push eax
call fcn.00911f06
lea eax, [esp + 0x28]
push 2
push eax
lea ecx, [esp + 0x34]
call fcn.0091218e
mov edi, dword [eax]
mov byte [esp + 0x148], 0xb
mov esi, 0xa76f28
mov cl, byte [edi]
mov dl, byte [esi]
mov al, cl
cmp cl, dl
jne 0x488ea8
test al, al
je 0x488ea4
mov dl, byte [edi + 1]
mov cl, byte [esi + 1]
mov al, dl
cmp dl, cl
jne 0x488ea8
add edi, 2
add esi, 2
test al, al
jne 0x488e80
xor eax, eax
jmp 0x488ead
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x488f12
lea eax, [esp + 0x1c]
push 2
push eax
lea ecx, [esp + 0x34]
call fcn.0091218e
mov esi, dword [eax]
mov edi, 0xa77194
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x488ef0
test al, al
je 0x488eec
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x488ef0
add esi, 2
add edi, 2
test al, al
jne 0x488ec8
xor eax, eax
jmp 0x488ef5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete byte [esp + 0x13]
call fcn.00911ee2
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], 0
test al, al
je 0x488f17
mov byte [esp + 0x13], 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov al, byte [esp + 0x13]
test al, al
je 0x488fab
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x1c]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00912044
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x14c], 0xc
call fcn.00911f3c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
lea edx, [esp + 0xc]
push str._sup_2__sup_
lea eax, [esp + 0x20]
push edx
push eax
call fcn.009121dc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x14c], 0xd
call fcn.00911f3c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov ecx, dword [esp + 0xc]
push ecx
jmp 0x4890f7
lea edx, [esp + 0x28]
push 2
push edx
lea ecx, [esp + 0x34]
call fcn.0091218e
mov esi, dword [eax]
mov byte [esp + 0x148], 0xe
mov edi, 0xa76f34
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x488ff2
test al, al
je 0x488fee
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x488ff2
add esi, 2
add edi, 2
test al, al
jne 0x488fca
xor eax, eax
jmp 0x488ff7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x48905c
lea eax, [esp + 0x1c]
push 2
push eax
lea ecx, [esp + 0x34]
call fcn.0091218e
mov esi, dword [eax]
mov edi, 0xa77190
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x48903a
test al, al
je 0x489036
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x48903a
add esi, 2
add edi, 2
test al, al
jne 0x489012
xor eax, eax
jmp 0x48903f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete byte [esp + 0x13]
call fcn.00911ee2
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], 0
test al, al
je 0x489061
mov byte [esp + 0x13], 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov al, byte [esp + 0x13]
test al, al
je 0x4890f2
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x1c]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00912044
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x14c], 0xf
call fcn.00911f3c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
lea edx, [esp + 0xc]
push str._sup_3__sup_
lea eax, [esp + 0x20]
push edx
push eax
call fcn.009121dc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x14c], 0x10
call fcn.00911f3c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov ecx, dword [esp + 0xc]
push ecx
jmp 0x4890f7
mov edx, dword [esp + 0x2c]
push edx
mov esi, dword [ebp + 0x14]
push str.dedw
lea edi, [esi + 0x10]
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea eax, [esp + 0x20]
push edi
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x11
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
cmp word [ebx + 0x244e], 9
jne 0x48916b
mov ecx, dword [0xa8e73c]
mov edx, dword [ebx + 0x252c]
mov eax, dword [ebx + 0x2528]
push ecx
push edx
push eax
mov ecx, ebx
call fcn.004126e0
fstp qword [ebx + 0x24b8]
mov ecx, dword [ebx + 0x24bc]
mov edx, dword [ebx + 0x24b8]
mov eax, dword [esp + 0x38]
push ecx
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00911f42
mov edx, dword [esp + 0x1c]
add esp, 0x10
lea edi, [esi + 0x14]
push edx
push 0xa78594
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea eax, [esp + 0x20]
push edi
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x12
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
mov ecx, dword [ebx + 0x24c4]
mov edx, dword [ebx + 0x24c0]
push ecx
push edx
mov ecx, ebx
call fcn.008f5ce0
fld dword [ebx + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x489260
mov eax, dword [ebx + 0x24c4]
mov ecx, dword [ebx + 0x24c0]
mov edx, dword [esp + 0x34]
push eax
push ecx
lea eax, [esp + 0x14]
push edx
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x1c]
add esp, 0x10
lea edi, [esi + 0x18]
push ecx
push 0xa78590
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea edx, [esp + 0x20]
push edi
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x13
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
jmp 0x489295
lea eax, [esp + 0x30]
push 0xa77bb0
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x14
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
call fcn.00911ee2
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.008f5ce0
fld dword [ebx + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x489341
mov edx, dword [0xa8e738]
mov edi, dword [esp + 0x34]
fld qword [ebx + 0x24c0]
fmul qword [ebx + 0x24b8]
push edx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea eax, [esp + 0x14]
fstp qword [esp]
push edi
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x1c]
add esp, 0x10
lea edi, [esi + 0x1c]
push ecx
push str.sjjhj
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea edx, [esp + 0x20]
push edi
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x15
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
jmp 0x489376
lea eax, [esp + 0x30]
push 0xa77bb0
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x16
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
call fcn.00911ee2
mov edx, dword [ebx + 0x24fc]
mov eax, dword [ebx + 0x24f8]
push edx
push eax
mov ecx, ebx
call fcn.008f5ce0
fld dword [ebx + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x489406
mov ecx, dword [ebx + 0x24fc]
mov edx, dword [ebx + 0x24f8]
mov eax, dword [esp + 0x34]
push ecx
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00911f42
mov edx, dword [esp + 0x1c]
add esp, 0x10
lea edi, [esi + 0x20]
push edx
push 0xa78584
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea eax, [esp + 0x20]
push edi
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x17
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
jmp 0x48943b
lea ecx, [esp + 0x30]
push 0xa77bb0
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x18
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
call fcn.00911ee2
mov ax, word [ebx + 0x244e]
cmp ax, 0xa
jne 0x4894fc
mov al, byte [ebx + 0x24a5]
test al, al
je 0x4894e3
mov edx, dword [ebp + 8]
lea esi, [ebx + 0x2448]
lea edi, [ebx + 0x2530]
mov ecx, 0x3a
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x1c]
push eax
push ecx
push edx
mov ecx, ebx
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.0041efb0
fld qword [esp + 0x14]
mov ecx, 0x3a
lea esi, [ebx + 0x2530]
lea edi, [ebx + 0x2448]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0xa8e738]
push eax
fmul qword [ebx + 0x24f8]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004126e0
fstp qword [esp + 0x14]
mov esi, dword [ebp + 0x14]
jmp 0x4895a9
cmp byte [ebx + 0x2495], 0x25
jne 0x489585
mov ecx, dword [0xa8e738]
push ecx
jmp 0x48958c
cmp ax, 0xc
je 0x489510
cmp ax, 0xd
je 0x489510
mov eax, dword [0xa8e738]
push eax
jmp 0x48958c
mov al, byte [ebx + 0x24a5]
test al, al
je 0x489585
mov eax, dword [ebp + 8]
lea esi, [ebx + 0x2448]
lea edi, [ebx + 0x2530]
mov ecx, 0x3a
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
push edx
push eax
mov ecx, ebx
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.0041efb0
fld qword [esp + 0x14]
mov ecx, 0x3a
lea esi, [ebx + 0x2530]
lea edi, [ebx + 0x2448]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0xa8e738]
push ecx
jmp 0x4894c4
mov edx, dword [0xa8e738]
push edx
fld qword [ebx + 0x24f8]
fmul qword [ebx + 0x24b8]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.004126e0
fstp qword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
mov ecx, ebx
call fcn.008f5ce0
fld dword [ebx + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x489640
mov edx, dword [0xa8e738]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x34]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x14]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x1c]
add esp, 0x10
lea edi, [esi + 0x24]
push eax
push str.dqhj
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x19
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
jmp 0x489675
lea edx, [esp + 0x30]
push 0xa77bb0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x1a
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
call fcn.00911ee2
fld qword [ebx + 0x24c8]
fmul qword [ebx + 0x24b8]
sub esp, 8
mov ecx, ebx
fstp qword [esp]
call fcn.008f5ce0
fld dword [ebx + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x489721
mov ecx, dword [0xa8e738]
mov edi, dword [esp + 0x34]
fld qword [ebx + 0x24c8]
fmul qword [ebx + 0x24b8]
push ecx
mov ecx, ebx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x14]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x1c]
add esp, 0x10
lea edi, [esi + 0x28]
push eax
push str.rghj
mov ecx, edi
call fcn.009121a0
push 0xa77bb0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x1b
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
jmp 0x489756
lea edx, [esp + 0x30]
push 0xa77bb0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x1c
call fcn.0091206e
mov byte [esp + 0x148], 5
lea ecx, [esp + 0x1c]
call fcn.00911ee2
lea ecx, [esi + 0x2c]
push 0xa77bb0
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x1d
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
add esi, 0x30
push 0xa77bb0
lea eax, [esp + 0x20]
push esi
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0x14c], 0x1e
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x148], 5
call fcn.00911ee2
lea ecx, [esp + 0x2c]
mov byte [esp + 0x148], 4
call fcn.00911ee2
lea ecx, [esp + 0x30]
mov byte [esp + 0x148], 3
call fcn.00911ee2
lea ecx, [esp + 0x38]
mov byte [esp + 0x148], 2
call fcn.00911ee2
lea ecx, [esp + 0x34]
mov byte [esp + 0x148], 1
call fcn.00911ee2
lea ecx, [esp + 0x3c]
mov byte [esp + 0x148], 0
call fcn.00911ee2
lea ecx, [esp + 0xc]
mov dword [esp + 0x148], 0xffffffff
call fcn.00911ee2
mov ecx, dword [esp + 0x140]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x18