Function at 0x437b10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x677793
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x702ca8]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x702ca8]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
fldz
mov eax, dword [esp + 0xb8]
mov ebp, ecx
mov ecx, dword [esp + 0xbc]
xor ebx, ebx
push ebx
mov dword [ebp], 0x6c1450
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ecx
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x18], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x34], ebx
fst qword [ebp + 0x38]
push ebx
fst qword [ebp + 0x40]
push ebx
fst qword [ebp + 0x48]
push ebx
fstp qword [ebp + 0x50]
mov dword [esp + 0x4c], ebp
mov dword [ebp + 0x58], ebx
call dword [sym.imp.kernel32.dll_CreateEventA]
mov dword [ebp + 0x58], eax
mov dword [esp + 0xb0], ebx
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x68], ebx
mov dword [ebp + 0x6c], ebx
push 7
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0c3c
mov byte [ecx + 4], bl
call fcn.004027b0
fldz
fst qword [ebp + 0xa8]
mov dword [ebp + 0x94], ebx
fst qword [ebp + 0xb0]
mov byte [ebp + 0xb8], bl
mov byte [ebp + 0xb9], bl
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xc0], bl
mov dword [ebp + 0xc4], ebx
fld qword [0x6c7a58]
fstp qword [ebp + 0xc8]
mov byte [ebp + 0xd0], 1
mov byte [ebp + 0xd1], bl
mov dword [ebp + 0xd4], ebx
mov dword [ebp + 0xd8], ebx
mov dword [ebp + 0xdc], ebx
mov dword [ebp + 0xe0], ebx
mov dword [ebp + 0xe4], ebx
mov dword [ebp + 0xe8], ebx
mov dword [ebp + 0xec], ebx
mov dword [ebp + 0xf0], ebx
mov dword [ebp + 0xf4], ebx
mov dword [ebp + 0xf8], ebx
mov dword [ebp + 0x900], ebx
mov dword [ebp + 0x904], ebx
mov dword [ebp + 0x908], ebx
mov dword [ebp + 0x90c], ebx
mov dword [ebp + 0x910], ebx
mov byte [ebp + 0x914], bl
mov byte [ebp + 0x915], bl
mov dword [ebp + 0x8fc], 0x6c6a8c
mov dword [ebp + 0x918], ebx
mov byte [esp + 0xb0], 2
fst qword [ebp + 0x920]
fstp qword [ebp + 0x928]
mov dword [ebp + 0x930], ebx
mov dword [ebp + 0x934], 3
mov dword [0x717c9c], ebp
call dword [sym.imp.WINMM.dll_timeGetTime]
push eax
call fcn.00615c62
push 0x28
call fcn.00604431
add esp, 8
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0xb0], 3
je 0x437cf4
mov edi, eax
call fcn.0045b7c0
jmp 0x437cf6
xor eax, eax
mov byte [esp + 0xb0], 2
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
mov dword [ebp + 0x10], eax
push 0x56
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0c48
mov byte [ecx + 4], bl
call fcn.004027b0
mov edx, dword [ebp + 0x10]
push edx
call fcn.0045bb10
add esp, 0x20
push 0x6c0ca0
push 0x6c0cac
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x1a
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0cb8
mov byte [ecx + 4], bl
call fcn.004027b0
mov eax, dword [ebp + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
mov ecx, ebp
call fcn.0043a2d0
push 4
call fcn.00604431
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0xb0], 4
je 0x437d8e
mov esi, eax
call fcn.00443960
mov esi, 0xf
jmp 0x437d90
xor eax, eax
mov byte [esp + 0xb0], 2
push 0xd0
mov dword [ebp + 0x14], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0xb0], 5
je 0x437dc0
push eax
call fcn.0044c490
jmp 0x437dc2
xor eax, eax
mov byte [esp + 0xb0], 2
push 0x50
mov dword [ebp + 0x30], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0xb0], 6
je 0x437def
push eax
call fcn.00450fb0
jmp 0x437df1
xor eax, eax
mov byte [esp + 0xb0], 2
mov dword [ebp + 0x28], eax
push 0x48
mov byte [eax + 4], 1
call fcn.00604431
mov edi, eax
add esp, 4
mov dword [esp + 0x1c], edi
cmp edi, ebx
mov byte [esp + 0xb0], 7
je 0x437e36
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push ecx
call fcn.0043b810
add esp, 4
push edi
call fcn.00464c40
jmp 0x437e38
xor eax, eax
mov edx, dword [ebp + 0x28]
mov dword [ebp + 0x6c], eax
mov byte [edx + 4], bl
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
mov byte [esp + 0xb0], 8
push 0x46
push 0x6c0cd8
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
call fcn.004027b0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0xbc], 9
call fcn.00402610
mov edi, 0x10
mov byte [esp + 0xb0], 8
cmp dword [esp + 0x38], edi
jb 0x437eaa
mov ecx, dword [esp + 0x24]
push ecx
call fcn.0060445c
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 7
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d20
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0xa
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov edx, dword [0x717c9c]
mov ecx, dword [edx + 0x6c]
call fcn.004652c0
cmp al, bl
jne 0x437f8f
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x64]
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00402610
sub esp, 0x1c
mov byte [esp + 0xe8], 0xb
mov ecx, esp
mov dword [esp + 0x54], esp
push 7
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d20
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x104], 0xc
mov dword [esp + 0x68], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0x104], 8
mov ecx, dword [0x717c9c]
mov ecx, dword [ecx + 0x6c]
call fcn.00466030
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 7
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d20
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0xd
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x6c]
lea edx, [esp + 0x58]
call fcn.00465a40
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0xbc], 0xe
call fcn.00402610
mov byte [esp + 0xb0], 8
cmp dword [esp + 0x38], edi
jb 0x43801d
mov ecx, dword [esp + 0x24]
push ecx
call fcn.0060445c
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x74], ebx
push 0xa
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d28
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0xf
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov edx, dword [0x717c9c]
mov ecx, dword [edx + 0x6c]
call fcn.004652c0
cmp al, bl
jne 0x4380df
mov eax, dword [ebp + 0x74]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xa
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d28
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xec], 0x10
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov ecx, dword [0x717c9c]
mov edx, dword [ecx + 0x6c]
push edx
mov byte [esp + 0xf0], 8
call fcn.00466250
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xa
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d28
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x11
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x6c]
call fcn.00465c60
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0x74], eax
push 9
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d34
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x12
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov ecx, dword [0x717c9c]
mov ecx, dword [ecx + 0x6c]
call fcn.004652c0
cmp al, bl
jne 0x4381f9
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 9
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d34
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xec], 0x13
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x6c]
push eax
mov byte [esp + 0xf0], 8
call fcn.00466250
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 9
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d34
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x14
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov ecx, dword [0x717c9c]
mov ecx, dword [ecx + 0x6c]
call fcn.00465c60
cmp eax, 0xd903
setne al
cmp al, bl
mov byte [ebp + 0x70], al
je 0x438266
mov dword [ebp + 0x74], ebx
fld qword [0x6dda20]
sub esp, 0x1c
mov ecx, esp
fstp qword [ebp + 0xa0]
mov dword [esp + 0x30], esp
push edi
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d40
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x15
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov edx, dword [0x717c9c]
mov ecx, dword [edx + 0x6c]
call fcn.004652c0
cmp al, bl
jne 0x438334
fld qword [ebp + 0xa0]
sub esp, 0x24
mov ecx, esp
fstp qword [esp + 0x1c]
mov dword [esp + 0x38], esp
push edi
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d40
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xf0], 0x16
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x6c]
push ecx
mov byte [esp + 0xf4], 8
call fcn.004663d0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d40
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x17
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov edx, dword [0x717c9c]
mov ecx, dword [edx + 0x6c]
call fcn.00465da0
fstp qword [ebp + 0xa0]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x6c0d54
mov dword [ebp + 0x94], 0xffffffff
call fcn.00402ee0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x18
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x6c]
call fcn.004652c0
cmp al, bl
jne 0x438449
mov ecx, dword [ebp + 0x94]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c0d54
call fcn.00402ee0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xec], 0x19
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x6c]
push eax
mov byte [esp + 0xf0], 8
call fcn.00466250
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x6c0d54
call fcn.00402ee0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x1a
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov ecx, dword [0x717c9c]
mov ecx, dword [ecx + 0x6c]
call fcn.00465c60
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x6c0d64
mov dword [ebp + 0x94], eax
mov byte [ebp + 0x98], bl
call fcn.00402ee0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x1b
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov edx, dword [0x717c9c]
mov ecx, dword [edx + 0x6c]
call fcn.004652c0
cmp al, bl
jne 0x438552
movzx eax, byte [ebp + 0x98]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c0d64
call fcn.00402ee0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xec], 0x1c
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov ecx, dword [0x717c9c]
mov edx, dword [ecx + 0x6c]
push edx
mov byte [esp + 0xf0], 8
call fcn.00466550
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x6c0d64
call fcn.00402ee0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xe8], 0x1d
mov dword [esp + 0x50], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x717f14
mov byte [ecx + 4], bl
call fcn.00402610
mov byte [esp + 0xe8], 8
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x6c]
call fcn.00465ef0
push 0x58
mov byte [ebp + 0x98], al
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x1e
je 0x4385c9
push eax
call fcn.0043fb10
jmp 0x4385cb
xor eax, eax
mov byte [esp + 0xb0], 8
push 0x108
mov dword [ebp + 0x2c], eax
call fcn.00604431
add esp, 4
cmp eax, ebx
je 0x4385f0
mov esi, eax
call fcn.004646f0
jmp 0x4385f2
xor eax, eax
push 0x25d0
mov dword [ebp + 0x64], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x1f
je 0x43861a
push eax
call fcn.004618b0
jmp 0x43861c
xor eax, eax
mov byte [esp + 0xb0], 8
push 0x12c
mov dword [ebp + 0x18], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x20
je 0x43864d
mov ecx, eax
call fcn.00444130
jmp 0x43864f
xor eax, eax
mov byte [esp + 0xb0], 8
mov ecx, dword [ebp + 0x18]
mov dword [ebp + 0x1c], eax
call fcn.00462f10
push edi
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x21
je 0x438683
push eax
call fcn.00455a70
jmp 0x438685
xor eax, eax
mov byte [esp + 0xb0], 8
push 0x98
mov dword [ebp + 0x20], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x22
je 0x4386b5
push eax
call fcn.00468f40
jmp 0x4386b7
xor eax, eax
mov byte [esp + 0xb0], 8
push 0xd0
mov dword [ebp + 0x60], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x23
je 0x4386e7
push eax
call fcn.00454640
jmp 0x4386e9
xor eax, eax
mov byte [esp + 0xb0], 8
push 0xa8
mov dword [ebp + 0x34], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x24
je 0x43871a
mov esi, eax
call fcn.004694e0
jmp 0x43871c
xor eax, eax
mov byte [esp + 0xb0], 8
push 0x1960
mov dword [ebp + 0x24], eax
call fcn.00604431
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xb0], 0x25
je 0x43874d
mov ecx, eax
call fcn.0048e1d0
jmp 0x43874f
xor eax, eax
mov byte [esp + 0xb0], 8
mov dword [ebp + 0x68], eax
mov ecx, dword [0x717c9c]
mov esi, dword [ecx + 0x30]
call fcn.0044cb50
fsub qword [esi + 0xb8]
xor eax, eax
sub esp, 0x1c
fst qword [ebp + 0x48]
lea edi, [ebp + 0xfc]
fstp qword [ebp + 0x40]
mov ecx, 0x200
fld qword [0x6ddbe8]
mov dword [esp + 0x30], esp
fstp qword [ebp + 0x50]
rep stosd dword es:[edi], eax
mov edx, dword [ebp + 0x28]
mov eax, esp
push eax
mov byte [edx + 4], 1
call fcn.0043b6f0
mov esi, dword [ebp + 0x28]
add esp, 4
call fcn.004520c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push ecx
call fcn.0043b6f0
add esp, 4
lea edx, [esp + 0x78]
push edx
call fcn.00464c40
sub esp, 0x1c
mov byte [esp + 0xcc], 0x26
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xe
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d78
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov byte [esp + 0xe8], 0x27
mov ecx, esp
mov dword [esp + 0x50], esp
push 8
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d88
mov byte [ecx + 4], bl
call fcn.004027b0
lea ecx, [esp + 0x94]
mov byte [esp + 0xe8], 0x26
call fcn.00465ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
mov byte [ebp + 0xb9], al
push 0xe
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d94
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov byte [esp + 0xe8], 0x28
mov ecx, esp
mov dword [esp + 0x50], esp
push 8
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0d88
mov byte [ecx + 4], bl
call fcn.004027b0
mov byte [esp + 0xe8], 0x26
lea ecx, [esp + 0x94]
call fcn.00465c60
cmp eax, ebx
mov dword [ebp + 0xbc], eax
jl 0x43889b
cmp eax, 1
jl 0x4388a1
mov dword [ebp + 0xbc], ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 8
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0da4
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov byte [esp + 0xe8], 0x29
mov ecx, esp
mov dword [esp + 0x50], esp
push 7
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0db0
mov byte [ecx + 4], bl
call fcn.004027b0
lea ecx, [esp + 0x94]
mov byte [esp + 0xe8], 0x26
call fcn.00465ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
mov byte [ebp + 0xc0], al
push 0xb
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0db8
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov byte [esp + 0xe8], 0x2a
mov ecx, esp
mov dword [esp + 0x50], esp
push 8
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0dc4
mov byte [ecx + 4], bl
call fcn.004027b0
lea ecx, [esp + 0x94]
mov byte [esp + 0xe8], 0x26
call fcn.00465c60
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
mov dword [ebp + 0xc4], eax
push 0x14
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0dd0
mov byte [ecx + 4], bl
call fcn.004027b0
sub esp, 0x1c
mov byte [esp + 0xe8], 0x2b
mov ecx, esp
mov dword [esp + 0x50], esp
push 5
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6c0de8
mov byte [ecx + 4], bl
call fcn.004027b0
lea ecx, [esp + 0x94]
mov byte [esp + 0xe8], 0x26
call fcn.00465da0
fstp qword [ebp + 0xc8]
mov eax, dword [ebp + 0x28]
sub esp, 0x1c
mov ecx, esp
mov byte [eax + 4], bl
mov dword [esp + 0x30], esp
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov byte [ecx + 4], bl
push 8
push 0x6c0df0
call fcn.004027b0
lea ecx, [esp + 0x3c]
push ecx
call fcn.00488db0
add esp, 0x20
mov edi, 0x10
mov byte [esp + 0xb0], 0x2c
cmp dword [eax + 0x18], edi
jb 0x438a03
mov eax, dword [eax + 4]
jmp 0x438a06
add eax, 4
push eax
push 0x6c0dfc
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 8
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x6ba1c0
mov byte [ecx + 4], bl
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
cmp dword [esp + 0x38], edi
jb 0x438a4f
mov ecx, dword [esp + 0x24]
push ecx
call fcn.0060445c
add esp, 4
lea ecx, [esp + 0x5c]
call fcn.00465250
cmp dword [esp + 0x58], edi
jb 0x438a6b
mov edx, dword [esp + 0x44]
push edx
call fcn.0060445c
add esp, 4
mov eax, ebp
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.00615b69
add esp, 0xa0
ret 8