Function at 0x480bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x557b8c
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x6397d4]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6397d4]
xor eax, esp
push eax
lea eax, [esp + 0x188]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [esp + 0x198]
mov ebx, dword [esi + 0x5c4]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x481dbd
lea ecx, [esp + 0x20]
call fcn.0041fed0
push 8
lea eax, [esp + 0x24]
push eax
push 0x19
mov ecx, 0x648290
mov dword [esp + 0x19c], 0
call fcn.00425560
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x194], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x198], edx
mov edx, dword [esp + 0x34]
mov dword [esi + 0x19c], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x1a0], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x1ac], ecx
lea ecx, [esp + 0x84]
mov dword [esi + 0x1a4], edx
mov dword [esi + 0x1a8], eax
call fcn.0041fed0
push 8
lea edx, [esp + 0x88]
push edx
push 0x1a
mov ecx, 0x648290
mov byte [esp + 0x19c], 1
call fcn.00425560
push 0x1e1e1e
lea eax, [esp + 0x88]
push eax
push 0xffffffffffffffff
push 0x562815
mov ecx, esi
call fcn.004321d0
push 0x40
lea ecx, [esp + 0xc8]
push 0
push ecx
mov dword [esi + 0x18c], 1
call sub.MSVCR80.dll_memset
push 0x40
lea edx, [esp + 0x114]
push 0
push edx
call sub.MSVCR80.dll_memset
add esp, 0x18
lea ecx, [esp + 0x64]
call fcn.0041fed0
lea ecx, [esp + 0x44]
mov byte [esp + 0x190], 2
call fcn.0041fed0
mov edx, dword [esi + 0x544]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x68]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x19c], 3
call fcn.004807b0
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x68]
push ecx
mov ecx, esi
call fcn.004321a0
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
add ebx, 0x1e
push ebx
push 0x564718
lea edx, [esp + 0xcc]
push edx
call ebp
mov eax, dword [esi]
mov edx, dword [eax + 0xbc]
add esp, 0xc
mov ecx, esi
call edx
test ax, ax
push 6
push 0
jne 0x480d92
push 0xffffff
lea eax, [esp + 0xd0]
push eax
jmp 0x480d9f
push 0xcc92f8
lea ecx, [esp + 0xd0]
push ecx
mov ecx, esi
call fcn.00432170
push 0
push 0
push 0xffffff
push str.
mov ecx, esi
call fcn.00432170
mov edi, dword [esp + 0x18]
movzx eax, word [edi + 0xc7]
mov ebx, dword [sym.imp.MSVCR80.dll_sprintf]
movzx eax, ax
cmp eax, 7
ja case.default.0x480dd8
jmp dword [eax*4 + 0x481de8]
push 0x1d9
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x5627bc
lea edx, [esp + 0x10c]
push edx
jmp 0x480eae
push 0x1da
jmp 0x480e96
push 0x1db
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x5627bc
lea ecx, [esp + 0x10c]
push ecx
jmp 0x480eae
push 0x1dc
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x5627bc
lea edx, [esp + 0x10c]
push edx
jmp 0x480eae
push 0x1dd
jmp 0x480e96
push 0x1de
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x5627bc
lea ecx, [esp + 0x10c]
push ecx
jmp 0x480eae
push 0x99b
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x5627bc
lea edx, [esp + 0x10c]
push edx
jmp 0x480eae
push 0x1df
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x5627bc
lea eax, [esp + 0x10c]
push eax
call ebx
add esp, 0xc
lea ecx, [esp + 0x104]
push ecx
push 0x1cc
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xcc]
push str.___________s_s
push edx
call ebp
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
add esp, 0x10
mov ecx, esi
call edx
movzx eax, al
movzx eax, word [edi + eax*2 + 0xad]
movzx eax, ax
push eax
push 0x1d8
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x10c]
push ecx
call ebx
lea edx, [esp + 0x110]
push edx
lea eax, [esp + 0x154]
push str.________________________________s
push eax
call ebp
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x480]
add esp, 0x18
cmp dx, word [edi + 0x31]
push 0
push 0
push 0x87cefa
jae 0x480f5f
push 0xe61414
lea eax, [esp + 0x154]
push eax
lea ecx, [esp + 0xd8]
push ecx
jmp 0x480f74
push 0xffffff
lea edx, [esp + 0x154]
push edx
lea eax, [esp + 0xd8]
push eax
mov ecx, esi
call fcn.00432180
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx eax, al
cmp eax, 0xc
jge 0x480f97
mov ecx, edi
mov edi, dword [ecx + eax*4 + 0x7f]
jmp 0x480f9a
or edi, 0xffffffff
test edi, edi
mov edx, dword [esp + 0x18]
movzx eax, word [edx + 0x79]
movzx eax, ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edi
mov ecx, esi
fild dword [esp + 0x14]
fstp dword [esp + 0x14]
je 0x481152
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
call eax
cmp al, 0xc
ja 0x481078
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
cmp al, 0xc
je 0x481078
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
mov ecx, esi
call eax
test eax, eax
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
jge 0x481003
fadd dword [0x562930]
fmul qword [0x563b10]
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
mov ecx, esi
fidiv dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call eax
add edi, 0xffffffff
cmp eax, edi
je 0x48103f
fld dword [esp + 0x1c]
fcomp qword [0x567bf8]
fnstsw ax
test ah, 0x41
jne 0x48103f
fld dword [0x567bf0]
fstp dword [esp + 0x1c]
mov edx, dword [esi]
fld dword [esp + 0x1c]
mov eax, dword [edx + 0xa8]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call eax
movzx ecx, al
push ecx
push 0x9b0
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x114]
push edx
call ebx
add esp, 0x14
jmp 0x4810e7
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
push eax
call fcn.00402a90
mov ecx, eax
call fcn.00515240
test eax, eax
mov ecx, esi
jne 0x4810bc
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
call edx
movzx eax, al
push eax
push 0x9b1
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0x10c]
push ecx
jmp 0x4810e2
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
call eax
movzx ecx, al
push ecx
push 0x9b2
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x10c]
push edx
call ebx
add esp, 0xc
fld dword [esp + 0x14]
sub esp, 8
fdiv qword [0x56a040]
mov ecx, 0x64aa48
fstp qword [esp]
push 0x99e
call fcn.004bcff0
push eax
lea eax, [esp + 0x150]
push eax
call ebx
lea ecx, [esp + 0x154]
push ecx
lea edx, [esp + 0xd8]
push str.___________________________s
push edx
call ebp
add esp, 0x1c
push 0
push 0
push 0x55fc55
push 0xffffc8
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x118]
push ecx
mov ecx, esi
call fcn.00432180
jmp 0x481165
push 0
push 0
push 0xffffff
push 0x562815
call fcn.00432170
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
mov edi, dword [esp + 0x18]
movzx eax, word [edi + 0x3f]
test eax, eax
mov ecx, 0x64aa48
je 0x4811b7
push eax
push 0x99f
call fcn.004bcff0
push eax
lea edx, [esp + 0xcc]
push edx
call ebx
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xd0]
push eax
jmp 0x4811f0
push 0x9a1
call fcn.004bcff0
push eax
push 0x9a0
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xcc]
push ecx
call ebx
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xd0]
push edx
mov ecx, esi
call fcn.00432170
xor eax, eax
cmp word [edi + 0x47], 1
sete al
cmp eax, 1
jne 0x48124b
push 0x9a2
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x9a0
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xcc]
push eax
call ebx
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xd0]
push ecx
mov ecx, esi
call fcn.00432170
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx eax, al
fld dword [edi + eax*4 + 0x681]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4812b3
call fcn.00551860
push eax
push 0x9a5
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xcc]
push ecx
call ebx
add esp, 0xc
push 0
push 0
push 0xffffc8
lea edx, [esp + 0xd0]
push edx
mov ecx, esi
call fcn.00432170
jmp 0x4812b5
fstp st(0)
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
movzx eax, al
fld dword [edi + eax*4 + 0x6b1]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x48131d
call fcn.00551860
push eax
push 0x9a5
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xcc]
push eax
call ebx
add esp, 0xc
push 0
push 0
push 0xffffc8
lea ecx, [esp + 0xd0]
push ecx
mov ecx, esi
call fcn.00432170
jmp 0x48131f
fstp st(0)
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx eax, al
fld dword [edi + eax*4 + 0x219]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x48138d
fmul qword [0x563b10]
sub esp, 8
mov ecx, 0x64aa48
fstp qword [esp]
push 0x9a4
call fcn.004bcff0
push eax
lea ecx, [esp + 0xd0]
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0xffffc8
lea edx, [esp + 0xd0]
push edx
mov ecx, esi
call fcn.00432170
jmp 0x48138f
fstp st(0)
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
movzx eax, al
fld dword [edi + eax*4 + 0x1e9]
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4813fd
fmul qword [0x563b10]
sub esp, 8
mov ecx, 0x64aa48
fstp qword [esp]
push 0x9a3
call fcn.004bcff0
push eax
lea eax, [esp + 0xd0]
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0xffffc8
lea ecx, [esp + 0xd0]
push ecx
mov ecx, esi
call fcn.00432170
jmp 0x4813ff
fstp st(0)
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx eax, al
movzx eax, word [edi + eax*2 + 0x143]
test ax, ax
je 0x481454
movzx ecx, ax
push ecx
push 0x581
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xcc]
push edx
call ebx
add esp, 0xc
push 0
push 0
push 0xffffc8
lea eax, [esp + 0xd0]
push eax
mov ecx, esi
call fcn.00432170
mov edx, dword [esi]
mov eax, dword [edx + 0xbc]
mov ecx, esi
call eax
push eax
call fcn.00402a90
mov ecx, eax
call fcn.0044eb30
mov edi, eax
test edi, edi
je 0x481aa4
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x20]
test eax, eax
jle 0x4814c9
push eax
push 0x524
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x20]
test eax, eax
jge 0x481508
neg eax
push eax
push 0x528
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x24]
fnstsw ax
test ah, 5
jp 0x48155e
fld dword [edi + 0x24]
fmul qword [0x563b10]
fadd qword [0x562ae8]
call fcn.00551860
push eax
push 0x525
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x24]
fnstsw ax
test ah, 0x41
jne 0x4815b4
fld dword [edi + 0x24]
fmul qword [0x563b10]
fsubr qword [0x562ae8]
call fcn.00551860
push eax
push 0x529
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x28]
fnstsw ax
test ah, 5
jp 0x48160a
fld dword [edi + 0x28]
fmul qword [0x563b10]
fadd qword [0x562ae8]
call fcn.00551860
push eax
push 0x526
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x28]
fnstsw ax
test ah, 0x41
jne 0x481660
fld dword [edi + 0x28]
fmul qword [0x563b10]
fsubr qword [0x562ae8]
call fcn.00551860
push eax
push 0x52a
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x2c]
fnstsw ax
test ah, 0x44
jnp 0x4816b0
fld dword [edi + 0x2c]
fmul qword [0x563b10]
call fcn.00551860
push eax
push 0x6cc
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x30]
fnstsw ax
test ah, 5
jp 0x481706
fld dword [edi + 0x30]
fmul qword [0x563b10]
fadd qword [0x562ae8]
call fcn.00551860
push eax
push 0x527
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x30]
fnstsw ax
test ah, 0x41
jne 0x48175c
fld dword [edi + 0x30]
fmul qword [0x563b10]
fsubr qword [0x562ae8]
call fcn.00551860
push eax
push 0x52b
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0xc]
test eax, eax
jle 0x481799
push eax
push 0x53c
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0xc]
test eax, eax
jge 0x4817d8
neg eax
push eax
push 0x53d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x10]
test eax, eax
jle 0x481815
push eax
push 0x53e
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x10]
test eax, eax
jge 0x481854
neg eax
push eax
push 0x53f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x14]
test eax, eax
jle 0x481891
push eax
push 0x540
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x14]
test eax, eax
jge 0x4818d0
neg eax
push eax
push 0x541
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x18]
fnstsw ax
test ah, 5
jp 0x481926
fld dword [edi + 0x18]
fmul qword [0x563b10]
fadd qword [0x562ae8]
call fcn.00551860
push eax
push 0x544
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x18]
fnstsw ax
test ah, 0x41
jne 0x48197c
fld dword [edi + 0x18]
fmul qword [0x563b10]
fsubr qword [0x562ae8]
call fcn.00551860
push eax
push 0x545
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x1c]
fnstsw ax
test ah, 5
jp 0x4819d2
fld dword [edi + 0x1c]
fmul qword [0x563b10]
fadd qword [0x562ae8]
call fcn.00551860
push eax
push 0x52c
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
fldz
fcomp dword [edi + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x481a28
fld dword [edi + 0x1c]
fmul qword [0x563b10]
fsubr qword [0x562ae8]
call fcn.00551860
push eax
push 0x52d
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
mov eax, dword [edi + 0x34]
test eax, eax
jle 0x481a65
push eax
push 0x542
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
mov edi, dword [edi + 0x34]
test edi, edi
jge 0x481aa4
neg edi
push edi
push 0x543
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0xac]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x87cefa
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
call fcn.00432170
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx ecx, al
add ecx, 1
test ecx, ecx
jle 0x481c57
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
cmp al, 0xc
je 0x481c57
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
push 0x99c
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xc8]
push ecx
call ebp
add esp, 8
push 0
push 0
push 0xb4b4b4
lea edx, [esp + 0xd0]
push edx
mov ecx, esi
call fcn.00432170
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
mov edi, dword [esp + 0x18]
movzx eax, al
add eax, 1
movzx eax, word [edi + eax*2 + 0xad]
movzx eax, ax
push eax
push 0x1d8
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xcc]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0xb4b4b4
lea edx, [esp + 0xd0]
push edx
mov ecx, esi
call fcn.00432170
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
movzx eax, al
fld dword [edi + eax*4 + 0x21d]
add eax, 1
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x481be4
fmul qword [0x563b10]
sub esp, 8
mov ecx, 0x64aa48
fstp qword [esp]
push 0x9a4
call fcn.004bcff0
push eax
lea eax, [esp + 0xd0]
push eax
call ebx
add esp, 0x10
push 0
push 0
push 0xb4b4b4
lea ecx, [esp + 0xd0]
push ecx
mov ecx, esi
call fcn.00432170
jmp 0x481be6
fstp st(0)
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx eax, al
fld dword [edi + eax*4 + 0x1ed]
add eax, 1
fstp dword [esp + 0x14]
fldz
fld dword [esp + 0x14]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x481c5d
fmul qword [0x563b10]
sub esp, 8
mov ecx, 0x64aa48
fstp qword [esp]
push 0x9a3
call fcn.004bcff0
push eax
lea ecx, [esp + 0xd0]
push ecx
call ebx
add esp, 0x10
push 0
push 0
push 0xb4b4b4
lea edx, [esp + 0xd0]
push edx
mov ecx, esi
call fcn.00432170
jmp 0x481c5f
mov edi, dword [esp + 0x18]
jmp 0x481c5f
fstp st(0)
mov eax, dword [esi]
mov edx, dword [eax + 0xb8]
mov ecx, esi
call edx
test eax, eax
je 0x481cb1
mov eax, dword [esi]
mov edx, dword [eax + 0xb8]
mov ecx, esi
call edx
push eax
push 0x246
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0xac]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0xffc800
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x86b]
test ax, ax
je 0x481d32
push 0
push 0
push 0xe6e826
push 0x54f
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x86b]
movzx edx, ax
push edx
call fcn.00402a90
mov ecx, eax
call fcn.00480680
test eax, eax
je 0x481d32
movzx eax, word [eax + 6]
push eax
push 0x550
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea ecx, [esp + 0xac]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0xe6e826
lea edx, [esp + 0xb0]
push edx
mov ecx, esi
call fcn.00432170
movzx eax, word [edi + 0x2f]
push 1
push 0xc8d7aa
push eax
push esi
mov ecx, 0x649790
call fcn.004970c0
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
push 0
push 0
push 0xffffff
push 0x562815
mov ecx, esi
call fcn.00432170
lea ecx, [esp + 0x44]
mov byte [esp + 0x190], 2
call fcn.0041fee0
lea ecx, [esp + 0x64]
mov byte [esp + 0x190], 1
call fcn.0041fee0
lea ecx, [esp + 0x84]
mov byte [esp + 0x190], 0
call fcn.0041fee0
lea ecx, [esp + 0x20]
mov dword [esp + 0x190], 0xffffffff
call fcn.0041fee0
mov ecx, dword [esp + 0x188]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x170]
xor ecx, esp
call fcn.0055160d
add esp, 0x180
ret 4