Function at 0x48a540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x575bd1
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x6a7564]
xor eax, esp
mov dword [esp + 0xcc], eax
push ebp
push esi
push edi
mov eax, dword [0x6a7564]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
mov esi, dword [esp + 0xf0]
mov edi, dword [esi + 0x538]
mov dword [esp + 0x14], edi
test edi, edi
je 0x48b604
lea ecx, [esp + 0x18]
call fcn.0042d050
push 0
lea eax, [esp + 0x1c]
push eax
push 0xd4
mov ecx, 0x6b6658
mov dword [esp + 0xf4], 0
call fcn.00431a60
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov dword [esi + 0x178], ecx
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x17c], edx
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x180], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x184], ecx
mov ecx, dword [esp + 0x34]
mov dword [esi + 0x190], ecx
lea ecx, [esp + 0x5c]
mov dword [esi + 0x188], edx
mov dword [esi + 0x18c], eax
call fcn.0042d050
push 0
lea edx, [esp + 0x60]
push edx
push 0x3f
mov ecx, 0x6b6658
mov byte [esp + 0xf4], 1
call fcn.00431a60
push 0x1e1e1e
lea eax, [esp + 0x60]
push eax
push 0xffffffffffffffff
push 0x57ea62
mov ecx, esi
call fcn.0043e400
lea ecx, [esp + 0x3c]
mov dword [esi + 0x170], 1
call fcn.0042d050
push 0
lea ecx, [esp + 0x40]
push ecx
push 0xd5
mov ecx, 0x6b6658
mov byte [esp + 0xf4], 2
call fcn.00431a60
lea eax, [esi + 0x194]
test eax, eax
je 0x48a682
push eax
mov ecx, esi
call fcn.0043e3d0
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [edi + 0x1e]
push edx
lea eax, [esp + 0xa0]
push 0x580ca8
push eax
call ebp
mov edx, dword [esi]
mov eax, dword [edx + 0xbc]
add esp, 0xc
mov ecx, esi
call eax
push 9
push 0
test ax, ax
jne 0x48a6c2
push 0xffffff
lea ecx, [esp + 0xa8]
push ecx
jmp 0x48a6cf
push 0xcc92f8
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.0043e3b0
push 0
push 0
push 0xffffff
push 0x57ea62
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [esi + 0x538]
movzx eax, word [eax + 0x3b]
mov ecx, dword [0x6b6dac]
cmp ax, 8
jne 0x48a70f
call fcn.004994e0
movzx ecx, ax
mov dword [esp + 0x10], ecx
jmp 0x48a71b
call fcn.00499490
movzx edx, ax
mov dword [esp + 0x10], edx
movzx eax, word [edi + 0x3d]
dec eax
cmp eax, 5
ja case.default.0x48a729
jmp dword [eax*4 + 0x48b630]
push 0x959
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0xa4]
push str._s__s
push eax
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0xa8]
push ecx
jmp 0x48a821
push 0x95a
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0xa4]
push str._s__s
push edx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0xa8]
push eax
jmp 0x48a821
push 0x95b
jmp 0x48a7e0
push 0x95c
jmp 0x48a735
push 0x95d
jmp 0x48a780
push 0x95e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0xa4]
push str._s__s
push ecx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.0043e3b0
movzx eax, word [edi + 0xc7]
cmp eax, 7
ja case.0x48a838.6
jmp dword [eax*4 + 0x48b648]
push 0x95f
jmp 0x48a8f9
push 0x960
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0xa4]
push str._s__s
push edx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0xa8]
push eax
jmp 0x48a93a
push 0x961
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0xa4]
push str._s__s
push ecx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea edx, [esp + 0xa8]
push edx
jmp 0x48a93a
push 0x962
jmp 0x48a8f9
push 0x963
jmp 0x48a84e
push 0x964
jmp 0x48a899
push 0x965
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0xa4]
push str._s__s
push eax
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0xa8]
push ecx
mov ecx, esi
call fcn.0043e3b0
movzx eax, word [edi + 0x3b]
sub eax, 3
je 0x48a99b
sub eax, 1
jne 0x48a9e8
push 0x966
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0xa4]
push str._s__s
push edx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0xa8]
push eax
jmp 0x48a9e1
push 0x967
mov ecx, 0x6b8950
call fcn.004c5020
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0xa4]
push str._s__s
push ecx
call fcn.0055adac
add esp, 0x10
push 7
push 0
push 0xffffb0
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.0043e3b0
push 0x958
mov ecx, 0x6b8950
call fcn.004c5020
push eax
movzx eax, word [edi + 0x31]
push eax
push 0x956
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0xa8]
push str._s__d_s
push ecx
call ebp
mov edx, dword [0x6b6dac]
mov ax, word [edx + 0x43c]
add esp, 0x14
push 7
push 0
cmp ax, word [edi + 0x31]
jae 0x48aa45
push 0xe61414
lea ecx, [esp + 0xa8]
push ecx
jmp 0x48aa52
push 0xffffff
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.0043e3b0
push 0
push 0
push 0xffffff
push 0x57ea62
mov ecx, esi
call fcn.0043e3b0
push 0
lea eax, [esp + 0x40]
push eax
push 0xffffb0
push 0x57ea62
mov ecx, esi
call fcn.0043e3b0
movzx ecx, word [edi + 0x31]
push ecx
push 0x972
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0xa4]
push edx
call ebp
movzx eax, word [edi + 0x3d]
dec eax
add esp, 0xc
cmp eax, 5
ja case.default.0x48aab6
jmp dword [eax*4 + 0x48b668]
cmp word [esp + 0x10], 1
push 0
mov ecx, 0x6b8950
push 0
jne 0x48aadd
push 0xffffff
push 0x1d1
jmp 0x48abbb
push 0xe61414
push 0x1d1
jmp 0x48abbb
cmp word [esp + 0x10], 2
push 0
mov ecx, 0x6b8950
push 0
jne 0x48ab0c
push 0xffffff
push 0x1d2
jmp 0x48abbb
push 0xe61414
push 0x1d2
jmp 0x48abbb
cmp word [esp + 0x10], 3
push 0
mov ecx, 0x6b8950
push 0
jne 0x48ab3b
push 0xffffff
push 0x1d3
jmp 0x48abbb
push 0xe61414
push 0x1d3
jmp 0x48abbb
cmp word [esp + 0x10], 4
push 0
mov ecx, 0x6b8950
push 0
jne 0x48ab64
push 0xffffff
push 0x1d4
jmp 0x48abbb
push 0xe61414
push 0x1d4
jmp 0x48abbb
cmp word [esp + 0x10], 5
push 0
mov ecx, 0x6b8950
push 0
jne 0x48ab8d
push 0xffffff
push 0x1d5
jmp 0x48abbb
push 0xe61414
push 0x1d5
jmp 0x48abbb
cmp word [esp + 0x10], 6
push 0
mov ecx, 0x6b8950
push 0
jne 0x48abb1
push 0xffffff
jmp 0x48abb6
push 0xe61414
push 0x1d6
call fcn.004c5020
push eax
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [esi + 0x538]
movzx eax, word [eax + 0x3b]
push 0
push 0
cmp ax, 8
jne 0x48ac08
mov ecx, dword [0x6b6dac]
cmp dword [ecx + 0x404], 1
mov ecx, 0x6b8950
jne 0x48abfc
push 0xffffff
push 0x677
jmp 0x48ac2d
push 0xe61414
push 0x677
jmp 0x48ac2d
mov edx, dword [0x6b6dac]
cmp dword [edx + 0x404], 1
mov ecx, 0x6b8950
jne 0x48ac23
push 0xe61414
jmp 0x48ac28
push 0xffffff
push 0x678
call fcn.004c5020
push eax
mov ecx, esi
call fcn.0043e3b0
movzx eax, word [edi + 0x3b]
cmp ax, 8
jne 0x48ac8b
movzx eax, word [edi + 0x3d]
test ax, ax
je 0x48ac8b
mov ecx, dword [0x6b6dac]
call fcn.00499490
mov ecx, dword [0x6b6dac]
mov di, ax
call fcn.004994e0
cmp di, ax
je 0x48ac8b
push 0
push 0
push 0xe61414
push 0x67c
mov ecx, 0x6b8950
call fcn.004c5020
push eax
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
movzx eax, al
cmp eax, 0xc
jge 0x48ad61
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx + eax*4 + 0x7f]
mov dword [esp + 0x10], edi
test edi, edi
je 0x48ae11
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
mov ecx, esi
cmp al, 0xc
jae 0x48ad6d
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
call eax
mov dword [esp + 0x38], eax
fild dword [esp + 0x38]
test eax, eax
jge 0x48ace9
fadd dword [0x57e5c0]
fmul qword [0x57e5e8]
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
mov ecx, esi
fidiv dword [esp + 0x10]
fstp dword [esp + 0x10]
call eax
lea ecx, [edi - 1]
cmp eax, ecx
je 0x48ad25
fld dword [esp + 0x10]
fcomp qword [0x584388]
fnstsw ax
test ah, 0x41
jne 0x48ad25
fld dword [0x584384]
fstp dword [esp + 0x10]
mov edx, dword [esi]
fld dword [esp + 0x10]
mov eax, dword [edx + 0xa8]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call eax
movzx ecx, al
push ecx
push 0x1d7
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0xac]
push edx
call fcn.0055adac
add esp, 0x14
jmp 0x48adb8
or edi, 0xffffffff
mov dword [esp + 0x10], edi
jmp 0x48acb7
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
call edx
movzx eax, ax
push eax
call fcn.00401a70
mov ecx, eax
call fcn.0051cc50
test eax, eax
jne 0x48adb8
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx ecx, al
push ecx
push 0x195
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0xa4]
push edx
call fcn.0055adac
add esp, 0xc
push 0
push 0
push 0xe6e826
lea eax, [esp + 0xa8]
push eax
mov ecx, esi
call fcn.0043e3b0
cmp dword [0x69b184], 0
je 0x48ae11
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
push edi
mov ecx, esi
call eax
push eax
lea ecx, [esp + 0xa4]
push str._d____d
push ecx
call ebp
add esp, 0x10
push 0
push 0
push 0xe6e826
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
test al, al
jbe 0x48ae74
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
mov edi, dword [esp + 0x14]
movzx eax, al
movzx eax, word [edi + eax*2 + 0xad]
push eax
push 0x1d8
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0xa4]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0xe6e826
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.0043e3b0
jmp 0x48ae78
mov edi, dword [esp + 0x14]
mov eax, dword [esi]
mov edx, dword [eax + 0xb8]
mov ecx, esi
call edx
test eax, eax
je 0x48aeca
mov eax, dword [esi]
mov edx, dword [eax + 0xb8]
mov ecx, esi
call edx
push eax
push 0x246
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0xffc800
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
movzx eax, word [edi + 0x86b]
test ax, ax
je 0x48af48
push 0
push 0
push 0xe6e826
push 0x54f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
mov ecx, esi
call fcn.0043e3b0
movzx eax, word [edi + 0x86b]
push eax
call fcn.00401a70
mov ecx, eax
call fcn.00489fe0
test eax, eax
je 0x48af48
movzx edx, word [eax + 6]
push edx
push 0x550
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0xe6e826
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
mov edx, dword [esi]
mov eax, dword [edx + 0xbc]
mov ecx, esi
call eax
movzx ecx, ax
push ecx
call fcn.00401a70
mov ecx, eax
call fcn.00458a40
mov edi, eax
test edi, edi
je 0x48b586
mov eax, dword [edi + 0x1e]
test eax, eax
jle 0x48afab
push eax
push 0x524
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0x1e]
test eax, eax
jge 0x48afea
neg eax
push eax
push 0x528
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x22]
fnstsw ax
test ah, 5
jp 0x48b040
fld dword [edi + 0x22]
fmul qword [0x57e5e8]
fadd qword [0x57f010]
call fcn.0055b110
push eax
push 0x525
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x22]
fnstsw ax
test ah, 0x41
jne 0x48b096
fld dword [edi + 0x22]
fmul qword [0x57e5e8]
fsubr qword [0x57f010]
call fcn.0055b110
push eax
push 0x529
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x26]
fnstsw ax
test ah, 5
jp 0x48b0ec
fld dword [edi + 0x26]
fmul qword [0x57e5e8]
fadd qword [0x57f010]
call fcn.0055b110
push eax
push 0x526
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x26]
fnstsw ax
test ah, 0x41
jne 0x48b142
fld dword [edi + 0x26]
fmul qword [0x57e5e8]
fsubr qword [0x57f010]
call fcn.0055b110
push eax
push 0x52a
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x2a]
fnstsw ax
test ah, 0x44
jnp 0x48b192
fld dword [edi + 0x2a]
fmul qword [0x57e5e8]
call fcn.0055b110
push eax
push 0x6cc
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x2e]
fnstsw ax
test ah, 5
jp 0x48b1e8
fld dword [edi + 0x2e]
fmul qword [0x57e5e8]
fadd qword [0x57f010]
call fcn.0055b110
push eax
push 0x527
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x2e]
fnstsw ax
test ah, 0x41
jne 0x48b23e
fld dword [edi + 0x2e]
fmul qword [0x57e5e8]
fsubr qword [0x57f010]
call fcn.0055b110
push eax
push 0x52b
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0xa]
test eax, eax
jle 0x48b27b
push eax
push 0x53c
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0xa]
test eax, eax
jge 0x48b2ba
neg eax
push eax
push 0x53d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0xe]
test eax, eax
jle 0x48b2f7
push eax
push 0x53e
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0xe]
test eax, eax
jge 0x48b336
neg eax
push eax
push 0x53f
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0x12]
test eax, eax
jle 0x48b373
push eax
push 0x540
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0x12]
test eax, eax
jge 0x48b3b2
neg eax
push eax
push 0x541
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x16]
fnstsw ax
test ah, 5
jp 0x48b408
fld dword [edi + 0x16]
fmul qword [0x57e5e8]
fadd qword [0x57f010]
call fcn.0055b110
push eax
push 0x544
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x16]
fnstsw ax
test ah, 0x41
jne 0x48b45e
fld dword [edi + 0x16]
fmul qword [0x57e5e8]
fsubr qword [0x57f010]
call fcn.0055b110
push eax
push 0x545
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x1a]
fnstsw ax
test ah, 5
jp 0x48b4b4
fld dword [edi + 0x1a]
fmul qword [0x57e5e8]
fadd qword [0x57f010]
call fcn.0055b110
push eax
push 0x52c
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
fldz
fcomp dword [edi + 0x1a]
fnstsw ax
test ah, 0x41
jne 0x48b50a
fld dword [edi + 0x1a]
fmul qword [0x57e5e8]
fsubr qword [0x57f010]
call fcn.0055b110
push eax
push 0x52d
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [edi + 0x32]
test eax, eax
jle 0x48b547
push eax
push 0x542
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.0043e3b0
mov edi, dword [edi + 0x32]
test edi, edi
jge 0x48b586
neg edi
push edi
push 0x543
mov ecx, 0x6b8950
call fcn.004c5020
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.0043e3b0
push 0
push 0
push 0xffffff
push 0x57ea62
mov ecx, esi
call fcn.0043e3b0
push 0
lea edx, [esp + 0x40]
push edx
push 0xffffb0
push 0x57ea62
mov ecx, esi
call fcn.0043e3b0
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0x2f]
push 1
push 0xc8d7aa
push ecx
push esi
mov ecx, 0x6b79b8
call fcn.0049e6b0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xe8], 1
call fcn.0042d060
lea ecx, [esp + 0x5c]
mov byte [esp + 0xe8], 0
call fcn.0042d060
lea ecx, [esp + 0x18]
mov dword [esp + 0xe8], 0xffffffff
call fcn.0042d060
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0xcc]
xor ecx, esp
call fcn.0055a677
add esp, 0xdc
ret 4