Function at 0x4a18b0
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x588fb6
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x6b3854]
xor eax, esp
mov dword [esp + 0xdc], eax
push ebp
push esi
push edi
mov eax, dword [0x6b3854]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x104]
mov esi, dword [esp + 0x10c]
mov ebp, dword [esp + 0x100]
mov edi, dword [esp + 0x110]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
call fcn.004222f0
push 0
lea edx, [esp + 0x30]
push edx
push 0xd5
mov ecx, 0x6c36d8
mov dword [esp + 0x104], 0
call fcn.00426e50
test esi, esi
je 0x4a1954
movzx eax, word [esi + 0x1a]
test ax, ax
jne 0x4a1956
xor eax, eax
mov esi, dword [esp + 0x14]
add esi, 2
cmp dword [esp + 0x1c], 0
push esi
je 0x4a1982
lea ecx, [esp + 0x70]
test ax, ax
je 0x4a199f
movzx eax, ax
push eax
push 0x59b964
push ecx
call fcn.0056d39f
add esp, 0x10
jmp 0x4a19b9
test ax, ax
je 0x4a19a7
movzx edx, ax
push edx
lea eax, [esp + 0x74]
push 0x59b954
push eax
call fcn.0056d39f
add esp, 0x10
jmp 0x4a19b9
push 0x59b94c
push ecx
jmp 0x4a19b1
push 0x593910
lea edx, [esp + 0x74]
push edx
call fcn.0056d39f
add esp, 0xc
mov eax, esi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4a19c0
mov ecx, dword [esp + 0x10]
sub eax, edx
test ecx, ecx
je 0x4a19f2
cmp dword [ecx + 4], 0
je 0x4a19f2
push 2
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00433610
mov esi, dword [esp + 0x14]
jmp 0x4a1a59
mov esi, dword [esp + 0x14]
cmp word [esi + 0xca], 0
je 0x4a1a10
push 2
push 0
push 0xff00
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a1a52
cmp byte [esi + eax], 0x2b
je 0x4a1a44
cmp byte [esi + eax - 1], 0x2b
je 0x4a1a44
mov edx, 0x834
push 2
push 0
cmp word [esi + 0x28], dx
jne 0x4a1a38
push 0xe6e826
lea eax, [esp + 0x78]
push eax
jmp 0x4a1a52
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a1a52
push 2
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x70]
push eax
call fcn.0056d39f
add esp, 8
push 2
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
movzx eax, word [esi + 0x28]
mov edx, 0x801
cmp ax, dx
je 0x4a1b7d
mov ecx, 0x834
cmp ax, cx
je 0x4a1b7d
mov edx, 0x807
cmp ax, dx
jne 0x4a1afa
push 0x96a
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.0056d39f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a1bbd
mov edx, 0x808
cmp ax, dx
jne 0x4a1b0b
push 0x969
jmp 0x4a1aba
mov edx, 0x809
cmp ax, dx
jne 0x4a1b1c
push 0x96b
jmp 0x4a1aba
mov edx, 0x80e
cmp ax, dx
jne 0x4a1b2d
push 0x940
jmp 0x4a1aba
mov edx, 0x80b
cmp ax, dx
jne 0x4a1b41
push 0x950
jmp 0x4a1aba
mov edx, 0x80d
cmp ax, dx
jne 0x4a1b55
push 0x951
jmp 0x4a1aba
mov edx, 0x80a
cmp ax, dx
jne 0x4a1b69
push 0x952
jmp 0x4a1aba
mov edx, 0x80c
cmp ax, dx
jne 0x4a1bc4
push 0x953
jmp 0x4a1aba
push 0x93e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push str._s__s
push edx
call fcn.0056d39f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00433610
fldz
mov ecx, dword [esp + 0x24]
push esi
fstp dword [esp + 0x24]
push ebp
call fcn.00497aa0
movzx eax, word [esi + 0x6a]
dec eax
je 0x4a1c25
dec eax
jne 0x4a1c6c
push 0xed
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s__s
push ecx
call fcn.0056d39f
add esp, 0x10
push 7
push 0
push 0xe61414
lea edx, [esp + 0x78]
push edx
jmp 0x4a1c65
push 0xec
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.0056d39f
add esp, 0x10
push 7
push 0
push 0xe61414
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
cmp word [esi + 0x6c], 0
je 0x4a1cde
push 0x943
mov ecx, 0x6c6100
call fcn.004c00d0
movzx edx, word [esi + 0x6c]
push eax
push edx
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0056d39f
mov ecx, dword [0x6c414c]
mov dx, word [ecx + 0x43c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x6c]
jae 0x4a1ccd
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a1cd7
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
cmp word [esi + 0x6e], 0
je 0x4a1d50
push 0xef
mov ecx, 0x6c6100
call fcn.004c00d0
movzx edx, word [esi + 0x6e]
push eax
push edx
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0056d39f
mov ecx, dword [0x6c414c]
mov dx, word [ecx + 0x65c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x6e]
jae 0x4a1d3f
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a1d49
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
cmp word [esi + 0x70], 0
je 0x4a1dc2
push 0xf0
mov ecx, 0x6c6100
call fcn.004c00d0
movzx edx, word [esi + 0x70]
push eax
push edx
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0056d39f
mov ecx, dword [0x6c414c]
mov dx, word [ecx + 0x65e]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x70]
jae 0x4a1db1
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a1dbb
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
cmp word [esi + 0x72], 0
je 0x4a1e34
push 0xf1
mov ecx, 0x6c6100
call fcn.004c00d0
movzx edx, word [esi + 0x72]
push eax
push edx
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0056d39f
mov ecx, dword [0x6c414c]
mov dx, word [ecx + 0x660]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x72]
jae 0x4a1e23
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a1e2d
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
cmp word [esi + 0x74], 0
je 0x4a1ea6
push 0xf2
mov ecx, 0x6c6100
call fcn.004c00d0
movzx edx, word [esi + 0x74]
push eax
push edx
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.0056d39f
mov ecx, dword [0x6c414c]
mov dx, word [ecx + 0x662]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x74]
jae 0x4a1e95
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4a1e9f
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
push 0x956
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x70]
push edx
call fcn.0056d39f
add esp, 8
push 2
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00433610
test edi, edi
je 0x4a226f
cmp dword [edi], 0
je 0x4a226f
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5917c0
mov ecx, ebp
call fcn.00433610
lea ecx, [esp + 0x4c]
call fcn.004222f0
mov eax, dword [edi + 8]
mov byte [esp + 0xf8], 1
cmp eax, 1
jne 0x4a1f4b
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a1fba
push 0
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00433620
jmp 0x4a1fba
jbe 0x4a1fba
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049a120
mov esi, eax
test esi, esi
je 0x4a1fba
movzx eax, word [esi + 0x26]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a1f8b
push 0
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.00433620
movzx edx, word [esi + 0x24]
mov ecx, dword [esp + 0x24]
push edx
call fcn.0049a150
mov esi, eax
test esi, esi
je 0x4a1fba
nop
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.00433610
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a1fa0
mov eax, dword [edi + 0xc]
cmp eax, 1
jne 0x4a1ff3
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a2061
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.00433620
jmp 0x4a2061
jbe 0x4a2061
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.0049a120
mov esi, eax
test esi, esi
je 0x4a2061
movzx edx, word [esi + 0x26]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a2033
push 1
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00433620
movzx ecx, word [esi + 0x24]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049a150
mov esi, eax
test esi, esi
je 0x4a2061
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.00433610
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a2047
mov eax, dword [edi + 0x10]
cmp eax, 1
jne 0x4a209a
push 0
lea eax, [esp + 0x50]
push eax
push 0x93
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a210a
push 2
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.00433620
jmp 0x4a210a
jbe 0x4a210a
mov ecx, dword [esp + 0x24]
movzx edx, ax
push edx
call fcn.0049a120
mov esi, eax
test esi, esi
je 0x4a210a
movzx ecx, word [esi + 0x26]
push 1
lea eax, [esp + 0x50]
push eax
push ecx
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a20da
push 2
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.00433620
movzx eax, word [esi + 0x24]
mov ecx, dword [esp + 0x24]
push eax
call fcn.0049a150
mov esi, eax
test esi, esi
je 0x4a210a
mov edi, edi
mov ecx, dword [esi]
push 0
push 0
push 0xff00ff
push ecx
mov ecx, ebp
call fcn.00433610
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a20f0
mov eax, dword [edi + 0x14]
cmp eax, 1
jne 0x4a2143
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a21b1
push 3
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00433620
jmp 0x4a21b1
jbe 0x4a21b1
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049a120
mov esi, eax
test esi, esi
je 0x4a21b1
movzx eax, word [esi + 0x26]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a2183
push 3
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.00433620
movzx edx, word [esi + 0x24]
mov ecx, dword [esp + 0x24]
push edx
call fcn.0049a150
mov esi, eax
test esi, esi
je 0x4a21b1
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.00433610
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a2197
mov eax, dword [edi + 0x18]
cmp eax, 1
jne 0x4a21ea
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a225a
push 4
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.00433620
jmp 0x4a225a
jbe 0x4a225a
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.0049a120
mov esi, eax
test esi, esi
je 0x4a225a
movzx edx, word [esi + 0x26]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x6c36d8
call fcn.00426e50
cmp dword [esp + 0x50], 0
je 0x4a222a
push 4
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00433620
movzx ecx, word [esi + 0x24]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0049a150
mov esi, eax
test esi, esi
je 0x4a225a
mov edi, edi
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.00433610
mov esi, dword [esi + 4]
test esi, esi
jne 0x4a2240
lea ecx, [esp + 0x4c]
mov byte [esp + 0xf8], 0
call fcn.00422300
mov esi, dword [esp + 0x14]
push 0
lea eax, [esp + 0x30]
push eax
push 0xffffb0
push 0x5917c0
mov ecx, ebp
call fcn.00433610
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a229c
movzx eax, word [eax + 8]
test ax, ax
je 0x4a229c
mov ecx, eax
jmp 0x4a229e
xor ecx, ecx
movzx eax, word [esi + 0x3a]
mov edi, dword [esp + 0x1c]
test ax, ax
je 0x4a2334
test edi, edi
je 0x4a22e4
movzx edx, word [edi + 8]
test dx, dx
je 0x4a22e4
push edx
add eax, ecx
push eax
push 0x17e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a230a
lea edx, [ecx + eax]
push edx
push 0x17e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push 0x597a24
push eax
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a239b
cmp word [eax + 8], 0
je 0x4a239b
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a23e8
test ecx, ecx
je 0x4a236b
test edi, edi
je 0x4a23a6
movzx eax, word [edi + 8]
test ax, ax
je 0x4a236b
push eax
push ecx
push 0x17e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a23da
test edi, edi
je 0x4a23a6
movzx eax, word [edi + 8]
test ax, ax
je 0x4a23a6
push eax
push 0x17e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a23e3
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a2400
movzx eax, word [edx + 8]
test ax, ax
je 0x4a23ef
push eax
push 0x17e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a2400
movzx eax, word [edx + 0xa]
test ax, ax
jne 0x4a2402
xor eax, eax
movzx ecx, word [esi + 0x3c]
test cx, cx
je 0x4a2493
test edi, edi
je 0x4a2444
movzx edx, word [edi + 0xa]
test dx, dx
je 0x4a2444
push edx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2469
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push 0x597a24
push edx
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a24fa
cmp word [eax + 0xa], 0
je 0x4a24fa
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a2543
test eax, eax
je 0x4a24ca
test edi, edi
je 0x4a2505
movzx ecx, word [edi + 0xa]
test cx, cx
je 0x4a24ca
push ecx
push eax
push 0x17f
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2535
test edi, edi
je 0x4a2505
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4a2505
push eax
push 0x17f
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a253e
test edx, edx
je 0x4a255b
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4a254a
push eax
push 0x17f
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a255b
movzx eax, word [edx + 0xc]
test ax, ax
jne 0x4a255d
xor eax, eax
movzx ecx, word [esi + 0x3e]
test cx, cx
je 0x4a25ee
test edi, edi
je 0x4a259f
movzx edx, word [edi + 0xc]
test dx, dx
je 0x4a259f
push edx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a25c4
add ecx, eax
push ecx
push 0x180
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push 0x597a24
push edx
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a2655
cmp word [eax + 0xc], 0
je 0x4a2655
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a269e
test eax, eax
je 0x4a2625
test edi, edi
je 0x4a2660
movzx ecx, word [edi + 0xc]
test cx, cx
je 0x4a2625
push ecx
push eax
push 0x180
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2690
test edi, edi
je 0x4a2660
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4a2660
push eax
push 0x180
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a2699
test edx, edx
je 0x4a26b6
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4a26a5
push eax
push 0x180
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a26b6
movzx eax, word [edx + 0xe]
test ax, ax
jne 0x4a26b8
xor eax, eax
movzx ecx, word [esi + 0x40]
test cx, cx
je 0x4a2749
test edi, edi
je 0x4a26fa
movzx edx, word [edi + 0xe]
test dx, dx
je 0x4a26fa
push edx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a271f
add ecx, eax
push ecx
push 0x181
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push 0x597a24
push edx
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a27b0
cmp word [eax + 0xe], 0
je 0x4a27b0
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a27f9
test eax, eax
je 0x4a2780
test edi, edi
je 0x4a27bb
movzx ecx, word [edi + 0xe]
test cx, cx
je 0x4a2780
push ecx
push eax
push 0x181
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
jmp 0x4a27eb
test edi, edi
je 0x4a27bb
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4a27bb
push eax
push 0x181
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a27f4
test edx, edx
je 0x4a280f
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4a2800
push eax
push 0x181
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a280f
mov eax, dword [edx + 0x10]
test eax, eax
jne 0x4a2811
xor eax, eax
mov ecx, dword [esi + 0x44]
test ecx, ecx
je 0x4a28a3
test edi, edi
je 0x4a284f
mov edx, dword [edi + 0x10]
test edx, edx
je 0x4a284f
push edx
add ecx, eax
push ecx
push 0x182
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2874
add ecx, eax
push ecx
push 0x182
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push 0x597a24
push eax
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a2895
cmp dword [eax + 0x10], 0
je 0x4a2895
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a2967
push 0
push 0
push 0x548fdf
jmp 0x4a2962
test eax, eax
je 0x4a28ed
test edi, edi
je 0x4a292b
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x4a28ed
push ecx
push eax
push 0x182
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a2967
test edi, edi
je 0x4a292b
mov eax, dword [edi + 0x10]
test eax, eax
je 0x4a292b
push eax
push 0x182
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4a2967
test edx, edx
je 0x4a297f
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4a296e
push eax
push 0x182
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a297f
movzx eax, word [edx + 0x14]
test ax, ax
jne 0x4a2981
xor eax, eax
movzx ecx, word [esi + 0x4c]
test cx, cx
je 0x4a2a12
test edi, edi
je 0x4a29c3
movzx edx, word [edi + 0x14]
test dx, dx
je 0x4a29c3
push edx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a29e8
add ecx, eax
push ecx
push 0x183
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push 0x597a24
push edx
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a2a79
cmp word [eax + 0x14], 0
je 0x4a2a79
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a2ac2
test eax, eax
je 0x4a2a49
test edi, edi
je 0x4a2a84
movzx ecx, word [edi + 0x14]
test cx, cx
je 0x4a2a49
push ecx
push eax
push 0x183
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2ab4
test edi, edi
je 0x4a2a84
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4a2a84
push eax
push 0x183
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a2abd
test edx, edx
je 0x4a2ad8
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4a2ac9
push eax
push 0x183
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a2ad8
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4a2ada
xor eax, eax
mov ecx, dword [esi + 0x48]
test ecx, ecx
je 0x4a2b6c
test edi, edi
je 0x4a2b18
mov edx, dword [edi + 0x16]
test edx, edx
je 0x4a2b18
push edx
add ecx, eax
push ecx
push 0x184
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2b3d
add ecx, eax
push ecx
push 0x184
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push 0x597a24
push eax
call fcn.0056d39f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a2b5e
cmp dword [eax + 0x16], 0
je 0x4a2b5e
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a2c30
push 0
push 0
push 0x548fdf
jmp 0x4a2c2b
test eax, eax
je 0x4a2bb6
test edi, edi
je 0x4a2bf4
mov ecx, dword [edi + 0x16]
test ecx, ecx
je 0x4a2bb6
push ecx
push eax
push 0x184
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a2c30
test edi, edi
je 0x4a2bf4
mov eax, dword [edi + 0x16]
test eax, eax
je 0x4a2bf4
push eax
push 0x184
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4a2c30
test edx, edx
je 0x4a2c37
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4a2c37
push eax
push 0x184
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
mov edi, dword [esp + 0x1c]
mov esi, 1
fld qword [0x592d50]
movzx eax, si
test ax, ax
jne 0x4a2c56
fldz
fst dword [esp + 0x28]
jmp 0x4a2c66
mov edx, dword [esp + 0x14]
mov ecx, eax
fld dword [edx + ecx*4 + 0x4c]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fmul st(2)
fstp dword [esp + 0x28]
test edi, edi
je 0x4a2c93
test ax, ax
jne 0x4a2c7f
fst dword [esp + 0x20]
jmp 0x4a2c89
mov ecx, eax
fld dword [edi + ecx*4 + 0x16]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4a2cca
test ax, ax
jne 0x4a2cb2
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a2cd0
mov edx, eax
fld dword [ecx + edx*4 + 0x1a]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a2cd0
fstp st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.0056dc70
test eax, eax
je 0x4a2d84
fstp st(1)
fld dword [esp + 0x20]
call fcn.0056dc70
fadd dword [esp + 0x18]
test eax, eax
je 0x4a2d23
push eax
call fcn.0056dc70
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2d4d
call fcn.0056dc70
push eax
lea edx, [esi + 0x108]
push edx
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.0056d39f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a2d71
fld dword [esp + 0x18]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4a2d71
push 0
push 0
push 0x55fc55
jmp 0x4a2e67
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4a2e6c
fstp st(0)
fld dword [esp + 0x20]
call fcn.0056dc70
fld dword [esp + 0x18]
mov ecx, eax
fld st(0)
test ecx, ecx
je 0x4a2df3
fucomp st(2)
push ecx
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a2dd3
call fcn.0056dc70
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a2e2a
lea edx, [esi + 0x108]
fstp st(0)
push edx
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4a2e22
fld st(2)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4a2e4f
fstp st(1)
call fcn.0056dc70
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.0056d39f
add esp, 0x10
fld dword [esp + 0x18]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a2e51
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a2e6c
fstp st(0)
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4a2e73
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
inc esi
cmp esi, 5
jle 0x4a2c40
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x78]
sub eax, 0
je 0x4a2e9b
dec eax
jne 0x4a2ebb
push eax
push eax
push 0xffffff
push 0x111
jmp 0x4a2ea9
push 0
push 0
push 0xffffff
push 0x110
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
mov ecx, ebp
call fcn.00433610
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a2ed0
movzx eax, word [eax + 0x1a]
test ax, ax
je 0x4a2ed0
mov esi, eax
jmp 0x4a2ed2
xor esi, esi
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0x80]
test ax, ax
jne 0x4a2eef
cmp word [ecx + 0x82], ax
je 0x4a30dd
mov edx, 0x80a
cmp word [ecx + 0x28], dx
movzx edx, word [ecx + 0x82]
je 0x4a2ffe
cmp ax, dx
jne 0x4a2f66
test edi, edi
je 0x4a2f3a
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4a2f3a
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push 0x59b8fc
jmp 0x4a2fc7
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push 0x597a10
push ecx
call fcn.0056d39f
add esp, 0x10
jmp 0x4a2fd4
test edi, edi
je 0x4a2fa9
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4a2fa7
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.0056d39f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a2fd4
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.0056d39f
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a30c8
cmp word [eax + 0x1a], 0
je 0x4a30c8
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4a30d6
cmp ax, dx
jne 0x4a305f
test edi, edi
je 0x4a3030
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4a3030
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d_____d_
jmp 0x4a2fc7
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push 0x597a08
push ecx
call fcn.0056d39f
add esp, 0x10
jmp 0x4a2fd4
test edi, edi
je 0x4a30a5
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4a30a3
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.0056d39f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a2fd4
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d_____d__
jmp 0x4a2fc7
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00433610
test edi, edi
je 0x4a3144
movzx eax, word [edi + 0x34]
test ax, ax
je 0x4a3144
push eax
push 0x186
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.0056d39f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a312f
mov eax, dword [esp + 0x10]
cmp word [eax + 0x1a], 0
je 0x4a312f
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4a313d
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0x84]
test ax, ax
jne 0x4a3161
cmp word [ecx + 0x86], ax
je 0x4a335f
mov edx, 0x80a
cmp word [ecx + 0x28], dx
je 0x4a3272
movzx edx, word [ecx + 0x86]
cmp ax, dx
jne 0x4a31d8
test edi, edi
je 0x4a31ac
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4a31ac
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push 0x59b8fc
jmp 0x4a323b
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push 0x597a10
push ecx
call fcn.0056d39f
add esp, 0x10
jmp 0x4a3248
test edi, edi
je 0x4a321d
mov ecx, dword [esp + 0x1c]
movzx edi, word [ecx + 0x32]
test di, di
je 0x4a321b
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.0056d39f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a3248
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.0056d39f
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a334a
cmp word [eax + 0x1a], 0
je 0x4a334a
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4a3358
movzx ecx, word [ecx + 0x86]
cmp ax, cx
jne 0x4a32df
test edi, edi
je 0x4a32b0
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4a32b0
push eax
mov eax, ecx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d_____d_
lea edx, [esp + 0x7c]
push edx
jmp 0x4a3240
mov eax, ecx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea edx, [esp + 0x74]
push 0x597a08
push edx
call fcn.0056d39f
add esp, 0x10
jmp 0x4a3248
test edi, edi
je 0x4a3327
mov edx, dword [esp + 0x1c]
movzx edi, word [edx + 0x32]
test di, di
je 0x4a3325
movzx edx, si
push edi
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.0056d39f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4a3248
mov edi, edx
movzx edx, si
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d_____d__
jmp 0x4a323b
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00433610
mov eax, dword [esp + 0x14]
cmp word [eax + 0x80], 0
jne 0x4a345f
cmp word [eax + 0x82], 0
jne 0x4a345f
cmp word [eax + 0x84], 0
jne 0x4a345f
cmp word [eax + 0x86], 0
jne 0x4a345f
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4a33df
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4a33df
test edi, edi
je 0x4a341a
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4a33df
push eax
push ecx
push 0x2a9
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d__d_
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a344a
test edi, edi
je 0x4a341a
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4a341a
push eax
push 0x2a9
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a3453
test edx, edx
je 0x4a345f
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4a345f
push eax
push 0x2a9
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4a3474
fldz
fst dword [esp + 0x28]
jmp 0x4a3487
mov edx, dword [esp + 0x14]
mov ecx, eax
fld dword [edx + ecx*4 + 0x88]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fld qword [0x592d50]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
test edi, edi
je 0x4a34c2
test ax, ax
jne 0x4a34aa
fxch st(1)
fst dword [esp + 0x20]
jmp 0x4a34b6
mov ecx, eax
fld dword [edi + ecx*4 + 0x32]
fstp dword [esp + 0x20]
fxch st(1)
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
fxch st(1)
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4a34fd
test ax, ax
jne 0x4a34e3
fxch st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a3503
mov edx, eax
fld dword [ecx + edx*4 + 0x32]
fstp dword [esp + 0x18]
fxch st(1)
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4a3503
fstp st(0)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.0056dc70
test eax, eax
je 0x4a35b7
fstp st(1)
fld dword [esp + 0x20]
call fcn.0056dc70
fadd dword [esp + 0x18]
test eax, eax
je 0x4a3556
push eax
call fcn.0056dc70
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a3580
call fcn.0056dc70
push eax
lea edx, [esi + 0x187]
push edx
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.0056d39f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a35a4
fld dword [esp + 0x18]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4a35a4
push 0
push 0
push 0x55fc55
jmp 0x4a369a
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4a369f
fstp st(0)
fld dword [esp + 0x20]
call fcn.0056dc70
fld dword [esp + 0x18]
mov ecx, eax
fld st(0)
test ecx, ecx
je 0x4a3626
fucomp st(2)
push ecx
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a3606
call fcn.0056dc70
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a365d
lea edx, [esi + 0x187]
fstp st(0)
push edx
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4a3655
fld st(2)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4a3682
fstp st(1)
call fcn.0056dc70
push eax
lea ecx, [esi + 0x187]
push ecx
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.0056d39f
add esp, 0x10
fld dword [esp + 0x18]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4a3684
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4a369f
fstp st(0)
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4a36a6
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
inc esi
cmp esi, 5
jle 0x4a3464
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4a36c5
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4a36c5
mov esi, eax
jmp 0x4a36c7
xor esi, esi
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xa4]
test ax, ax
je 0x4a3771
test edi, edi
je 0x4a3715
movzx ecx, word [edi + 0x4e]
test cx, cx
je 0x4a3715
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x18d
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.0056d39f
add esp, 0x14
jmp 0x4a373f
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x18d
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x74]
push 0x597a24
push ecx
call fcn.0056d39f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4a375e
test si, si
je 0x4a375e
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4a3820
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4a3820
test si, si
je 0x4a37ac
test edi, edi
je 0x4a37e7
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4a37ac
movzx edx, si
push eax
push edx
push 0x18d
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.0056d39f
add esp, 0x14
jmp 0x4a3812
test edi, edi
je 0x4a37e7
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4a37e7
push eax
push 0x18d
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4a381b
test si, si
je 0x4a3827
movzx edx, si
push edx
push 0x18d
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xa8]
test ax, ax
je 0x4a3870
push eax
mov eax, edx
add eax, 2
push eax
push 0x18e
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea ecx, [esp + 0x78]
push ecx
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00433610
mov eax, dword [esp + 0x14]
cmp word [eax + 0xac], 0
je 0x4a3aa0
movzx ecx, word [eax + 0xaa]
test cx, cx
je 0x4a3aa0
xor eax, eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov word [esp + 0x69], ax
mov byte [esp + 0x6b], al
lea eax, [ecx - 1]
mov byte [esp + 0x4c], 0
cmp eax, 0xa
ja case.default.0x4a38ca
jmp dword [eax*4 + 0x4a3b60]
push 0x196
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a38e6
jmp case.default.0x4a38ca
push 0x197
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3910
jmp case.default.0x4a38ca
push 0x198
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3934
jmp case.default.0x4a38ca
push 0x199
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3958
jmp case.default.0x4a38ca
push 0x19a
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3980
jmp case.default.0x4a38ca
push 0x19b
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a39a4
jmp case.default.0x4a38ca
push 0x19c
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a39c8
jmp case.default.0x4a38ca
push 0x19d
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a39f0
jmp case.default.0x4a38ca
push 0x19e
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3a11
jmp case.default.0x4a38ca
push 0x19f
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3a32
jmp case.default.0x4a38ca
push 0x1a0
mov ecx, 0x6c6100
call fcn.004c00d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4a3a53
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0xac]
push ecx
lea edx, [esp + 0x50]
push edx
push 0x1a1
mov ecx, 0x6c6100
call fcn.004c00d0
push eax
lea eax, [esp + 0x78]
push eax
call fcn.0056d39f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433610
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x24]
mov edx, 0x100
test word [eax + 0x28], dx
je 0x4a3abe
mov ecx, eax
push ecx
push ebp
mov ecx, esi
call fcn.0049a760
mov edx, dword [esp + 0x14]
cmp word [edx + 0xca], 0
je 0x4a3ad7
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.004a1160
mov edx, dword [esp + 0x14]
mov ecx, 0x834
cmp word [edx + 0x28], cx
jne 0x4a3af1
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.00499250
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5917c0
mov ecx, ebp
call fcn.00433610
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x24]
push 1
push 0xc8d7aa
push eax
push ebp
mov ecx, esi
call fcn.00499ba0
lea ecx, [esp + 0x2c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.00422300
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0xdc]
xor ecx, esp
call fcn.0056ca39
add esp, 0xec
ret 0x14