Function at 0x46bf8c
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x26
push 0
push 0
dec ecx
jne 0x46bf94
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x473b1c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0041e6c8
mov byte [ebp - 1], 0
xor eax, eax
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x9e
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x84]
jle 0x46c004
imul eax, dword [ebp - 0x88], 0x329
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46c032
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46bfbe
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46c086
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x98]
call fcn.00431ed0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x98]
cmp eax, edx
jge 0x46c0b3
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0x94]
call fcn.0042f1f0
imul eax, dword [ebp - 0xa4], 0x1b2
mov dword [ebp - 0x9c], eax
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473b5c
call fcn.004077fc
cmp eax, 0x4d
jge 0x46c0ec
imul eax, dword [ebp - 0x90], 0x3e9
mov dword [ebp - 0x88], eax
xor eax, eax
push ebp
push 0x4738f7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x47e620]
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0xa4]
cmp eax, edx
jle 0x46c149
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
add eax, 0x335
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x90]
call fcn.00404770
mov dword [ebp - 0x88], eax
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 4
jne 0x46c10a
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x46c213
inc dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
add eax, 0x34a
mov dword [ebp - 0x84], eax
imul eax, dword [ebp - 0x90], 0x3ef
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x98]
add eax, 4
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404770
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x94]
jne 0x46c20a
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0x8c], 1
jl 0x46c19d
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x46c286
inc dword [ebp - 0x8c]
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
mov eax, 0x34c
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
imul eax, dword [ebp - 0x90], 0x3f1
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x98]
add eax, 4
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404770
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x8c], 1
jl 0x46c224
mov eax, eax
add edx, 0x3f3
sub edx, ebx
mov eax, eax
jmp 0x46c295
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
lea edx, [ebp - 0xd4]
xor eax, eax
call fcn.00414660
mov edx, dword [ebp - 0xd4]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0xd8]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0xd8]
call fcn.0046be34
mov dword [ebp - 0x44], eax
imul eax, dword [ebp - 0xa4], 0x1db
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x88]
call fcn.0041a99c
xor eax, eax
mov dword [ebp - 0x90], eax
imul eax, dword [ebp - 0x88], 0x369
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x8f
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x98]
jne 0x46c369
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
imul eax, dword [ebp - 0x88], 0x33e
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x84
mov dword [ebp - 0x94], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46c322
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473b80
call fcn.004077fc
cmp eax, 0x4b
jge 0x46c3c2
imul eax, dword [ebp - 0x90], 0x3dd
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46c3f9
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.0042704c
cmp dword [0x48127c], 0
jne 0x46c416
mov edx, 0xde4cf8
mov eax, dword [0x47a5e4]
call fcn.0041abc0
mov dword [0x48127c], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46c443
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xa0]
call fcn.0043b0f0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x8c]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46c495
mov eax, dword [ebp - 0xa4]
sub eax, 0x1a4
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jge 0x46c4ba
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x94
mov dword [ebp - 0x98], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46c457
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
lea edx, [ebp - 0xdc]
mov eax, 1
call fcn.00414660
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0xe0]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0xe0]
call fcn.0046be34
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46c586
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x88]
lea edx, [ebp - 0x84]
lea eax, [ebp - 0xa4]
call fcn.0043fc7c
mov eax, dword [ebp - 0xa0]
sub eax, 0x16d
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
lea edx, [ebp - 0xe4]
mov eax, 2
call fcn.00414660
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0xe8]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0xe8]
call fcn.0046be34
mov dword [ebp - 0x4c], eax
imul eax, dword [ebp - 0xa4], 0x19c
mov dword [ebp - 0x9c], eax
call fcn.00468808
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x46c6ac
inc dword [ebp - 0x8c]
imul eax, dword [ebp - 0x88], 0x30f
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x98]
add eax, 4
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404770
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x94]
jne 0x46c692
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x88]
add eax, 0x324
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x8c], 1
jl 0x46c636
imul eax, dword [ebp - 0xa4], 0x1ab
mov dword [ebp - 0x9c], eax
call fcn.00469888
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46c6f6
mov eax, dword [ebp - 0xa0]
sub eax, 0x19c
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473ba4
call fcn.004077fc
cmp eax, 0x4e
jge 0x46c72e
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x88], eax
lea edx, [ebp - 0xec]
mov eax, 3
call fcn.00414660
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0xf0]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0xf0]
call fcn.0046be34
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46c7b5
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xa0]
call fcn.0043b7e8
imul eax, dword [ebp - 0xa4], 0x1b9
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
mov eax, dword [ebp - 0xa4]
sub eax, 0x18e
mov dword [ebp - 0x9c], eax
lea edx, [ebp - 0xf4]
mov eax, 4
call fcn.00414660
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0xf8]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0xf8]
call fcn.0046be34
mov dword [ebp - 0x54], eax
xor eax, eax
mov dword [ebp - 0x90], eax
imul eax, dword [ebp - 0x88], 0x33c
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46c882
mov eax, dword [ebp - 0xa0]
sub eax, 0x167
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x84]
jle 0x46c8a7
mov eax, dword [ebp - 0x88]
add eax, 0x311
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x98]
call fcn.00404770
mov dword [ebp - 0x88], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46c845
mov ecx, 1
mov edx, 0x473bc8
mov eax, 0x473be0
call fcn.004077fc
cmp eax, 0x19
je 0x46c8f6
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46c923
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0x98]
call fcn.004312e4
imul eax, dword [ebp - 0xa4], 0x1be
mov dword [ebp - 0x9c], eax
call fcn.00468808
lea eax, [ebp - 0x80]
call fcn.004068c0
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473c00
call fcn.004077fc
cmp eax, 0x50
jge 0x46c978
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0xfc]
mov eax, 5
call fcn.00414660
mov edx, dword [ebp - 0xfc]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0x100]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x100]
call fcn.0046be34
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46ca1d
imul eax, dword [ebp - 0xa4], 0x1f7
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0x104]
mov eax, 6
call fcn.00414660
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0x108]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x108]
call fcn.0046be34
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
mov eax, dword [ebp - 0xa4]
sub eax, 0x185
mov dword [ebp - 0x9c], eax
lea edx, [ebp - 0x10c]
mov eax, 7
call fcn.00414660
mov edx, dword [ebp - 0x10c]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0x110]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x110]
call fcn.0046be34
mov dword [ebp - 0x60], eax
xor eax, eax
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46cb2b
imul eax, dword [ebp - 0xa4], 0x1bf
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46caee
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46cbb0
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x98]
call fcn.0043319c
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x90]
jle 0x46cbdc
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.0042ee98
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
mov eax, dword [ebp - 0xa0]
sub eax, 0x14f
mov dword [ebp - 0x98], eax
lea edx, [ebp - 0x114]
mov eax, 8
call fcn.00414660
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0x118]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x118]
call fcn.0046be34
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xa4]
sub eax, 0x1a6
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x8c]
call fcn.0041d814
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46ccbc
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.0042cb14
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46ccef
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x8c]
call fcn.0042330c
mov ecx, 1
mov edx, 0x473bc8
mov eax, 0x473c24
call fcn.004077fc
cmp eax, 0x1b
je 0x46cd1a
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812c0]
call fcn.004074dc
lea edx, [ebp - 0x11c]
mov eax, 9
call fcn.00414660
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0x120]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x120]
call fcn.0046be34
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x82
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x98]
jne 0x46cdd1
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x97
mov dword [ebp - 0x98], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46cd89
mov eax, dword [ebp - 0x88]
add eax, 0x31e
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0x90], eax
imul eax, dword [ebp - 0x88], 0x347
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x6c
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404764
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x98]
jne 0x46ce71
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
imul eax, dword [ebp - 0x8c], 0x3c1
mov dword [ebp - 0x88], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46ce1b
mov eax, dword [ebp - 0xa4]
sub eax, 0x1a7
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x8c]
jle 0x46cee4
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x8c]
call fcn.0042036c
lea eax, [ebp - 0x80]
call fcn.004068c0
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46cf18
imul eax, dword [ebp - 0xa4], 0x1c1
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x48129c]
call fcn.004074dc
lea edx, [ebp - 0x124]
mov eax, 1
call fcn.00414660
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x80]
call fcn.004074dc
lea eax, [ebp - 0x128]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x128]
call fcn.0046be34
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x88]
add eax, 0x323
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x80]
call fcn.004068c0
lea edx, [ebp - 0x12c]
mov eax, dword [0x4812b8]
call fcn.00414078
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x80]
call fcn.004074dc
mov eax, dword [ebp - 0xa4]
sub eax, 0x19b
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x481294]
call fcn.004074dc
mov eax, dword [ebp - 0x88]
add eax, 0x301
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x481298]
call fcn.004074dc
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46d006
imul eax, dword [ebp - 0xa4], 0x1cc
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812e4]
call fcn.004074dc
lea eax, [ebp - 0x80]
mov edx, dword [0x4812a8]
call fcn.004074dc
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0xa4]
cmp eax, edx
jle 0x46d04e
imul eax, dword [ebp - 0xa4], 0x1ce
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812e0]
call fcn.004074dc
lea eax, [ebp - 0x80]
mov edx, dword [0x481294]
call fcn.004074dc
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46d097
mov eax, dword [ebp - 0xa0]
sub eax, 0x190
mov dword [ebp - 0x9c], eax
lea edx, [ebp - 0x130]
mov eax, dword [0x4812f0]
call fcn.00414078
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x80]
call fcn.004074dc
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812b4]
call fcn.004074dc
mov eax, dword [ebp - 0xa0]
sub eax, 0x181
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812a8]
call fcn.004074dc
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x80]
mov edx, dword [0x4812ec]
call fcn.004074dc
lea eax, [ebp - 0x134]
mov edx, dword [ebp - 0x80]
mov ecx, 0
call fcn.00407008
mov eax, dword [ebp - 0x134]
call fcn.0046be34
mov dword [ebp - 0x70], eax
call fcn.0041d86c
mov ecx, 1
mov edx, 0x473bc8
mov eax, 0x473c44
call fcn.004077fc
cmp eax, 0x14
je 0x46d15f
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
call dword [0x48127c]
test eax, eax
je 0x46d176
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4739eb
xor ecx, ecx
mov eax, 0
add ebx, ebx
cmp eax, 1
jb 0x46d185
pop edi
mov eax, dword [ebp - 0x14]
cmp word [eax], 0x5a4d
jne 0x46db64
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46d1c4
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x94]
call fcn.0042f1f0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x8c]
jle 0x46d209
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.004232a8
mov ecx, 1
mov edx, 0x473bc8
mov eax, 0x473c64
call fcn.004077fc
cmp eax, 0x1a
je 0x46d234
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x46d2d0
inc dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
add eax, 0x33d
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46d29e
mov eax, dword [ebp - 0xa4]
sub eax, 0x18c
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jge 0x46d2c3
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x8c], 1
jl 0x46d249
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x3c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x46d354
inc dword [ebp - 0x8c]
mov eax, 0x371
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x94]
call fcn.00404770
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x94]
jne 0x46d33b
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
imul eax, dword [ebp - 0x88], 0x326
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x8c], 2
jl 0x46d2ed
imul eax, dword [ebp - 0xa8], 0x1ed
mov dword [ebp - 0xa0], eax
call fcn.0041d86c
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x46d408
inc dword [ebp - 0x90]
imul eax, dword [ebp - 0x88], 0x320
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x94]
call fcn.00404770
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46d3d6
imul eax, dword [ebp - 0xa4], 0x1af
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x84]
jle 0x46d3fb
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x90], 2
jl 0x46d383
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x8c]
jle 0x46d44d
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.00424240
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473c84
call fcn.004077fc
cmp eax, 0x50
jge 0x46d477
fild dword [ebp - 0x94]
call fcn.00404770
mov dword [ebp - 0x8c], eax
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46d4a9
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x9c]
call fcn.004368c8
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 8]
cmp dword [eax], 0x4550
jne 0x46db64
mov eax, dword [ebp - 8]
cmp word [eax + 4], 0x14c
jne 0x46db64
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46d526
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x9c]
call fcn.00438d0c
xor eax, eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x46d5c0
inc dword [ebp - 0x90]
imul eax, dword [ebp - 0x88], 0x344
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46d57e
mov eax, dword [ebp - 0xa0]
sub eax, 0x16f
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x84]
jle 0x46d5a2
imul eax, dword [ebp - 0x88], 0x339
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x9f
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x90], 2
jl 0x46d53b
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473ca8
call fcn.004077fc
cmp eax, 0x52
jge 0x46d5ea
fild dword [ebp - 0x94]
call fcn.00404770
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x46d684
inc dword [ebp - 0x8c]
mov eax, 0x308
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x4d
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404764
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x98]
jne 0x46d66a
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
add eax, 0x33d
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x8c], 1
jl 0x46d60d
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x78]
mov dword [ebp - 0x10], edx
mov edx, dword [eax + 0x7c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x84], eax
xor eax, eax
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x8c]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0xa4]
cmp eax, edx
jle 0x46d6e6
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x8c]
call fcn.00404770
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46d72f
imul eax, dword [ebp - 0xa4], 0x1dd
mov dword [ebp - 0x9c], eax
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 4
jne 0x46d6a7
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46d78a
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x98]
call fcn.00430d30
xor eax, eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x88]
add eax, 0x353
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x90]
call fcn.00404770
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46d7e0
imul eax, dword [ebp - 0xa4], 0x1e3
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jge 0x46d805
mov eax, dword [ebp - 0x88]
add eax, 0x32d
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x90]
call fcn.00404770
mov dword [ebp - 0x88], eax
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 3
jne 0x46d792
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x88]
add eax, 0x322
mov dword [ebp - 0x84], eax
mov eax, 0x3a7
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x94]
call fcn.00404764
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46d8a3
mov eax, dword [ebp - 0xa0]
sub eax, 0x175
mov dword [ebp - 0x9c], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46d843
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473ccc
call fcn.004077fc
cmp eax, 0x4d
jge 0x46d8db
imul eax, dword [ebp - 0x90], 0x3ed
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x10], 0
je 0x46da89
xor eax, eax
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x90]
call fcn.00404770
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x94]
jne 0x46d924
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
mov eax, 0x358
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x98]
add eax, 4
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404770
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x94]
jne 0x46d97b
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 4
jne 0x46d8ed
xor eax, eax
mov dword [ebp - 0x90], eax
imul eax, dword [ebp - 0x88], 0x312
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x94]
call fcn.00404770
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46d9e3
imul eax, dword [ebp - 0xa4], 0x1c1
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jge 0x46da07
imul eax, dword [ebp - 0x88], 0x32b
mov dword [ebp - 0x84], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46d996
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46da4f
lea eax, [ebp - 0x98]
call fcn.00431390
mov eax, dword [ebp - 0x14]
add dword [ebp - 0x10], eax
mov ecx, 1
mov edx, 0x473bc8
mov eax, 0x473cf0
call fcn.004077fc
cmp eax, 0x1a
je 0x46db64
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
jmp 0x46db64
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x90], eax
imul eax, dword [ebp - 0x88], 0x312
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x9c]
add eax, 0x78
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404764
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x98]
jne 0x46daec
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
mov eax, 0x388
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x84], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46da96
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x90]
jle 0x46db31
call fcn.0042d230
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46db64
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.0042ad54
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0xa0]
cmp eax, edx
jge 0x46dbac
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x9c]
call fcn.004353c0
mov eax, dword [ebp - 0xa4]
sub eax, 0x18b
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x14], 0
je 0x46dbc9
cmp dword [ebp - 0x10], 0
jne 0x46dbd6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4739eb
mov eax, eax
add edx, 0xc
sub edx, ebx
mov eax, eax
jmp 0x46dbe2
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x90], eax
mov eax, 0x38a
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x90
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x84]
jle 0x46dc37
fild dword [ebp - 0x88]
call fcn.00404764
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46dc64
mov eax, dword [ebp - 0xa4]
sub eax, 0x1a6
mov dword [ebp - 0x9c], eax
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jne 0x46dbf0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x8c]
call fcn.0041e2d8
call fcn.00468f24
mov eax, 0x28
call fcn.004044ac
mov dword [ebp - 0x24], eax
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473d10
call fcn.004077fc
cmp eax, 0x51
jge 0x46dcdf
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x24]
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473d34
call fcn.004077fc
cmp eax, 0x51
jge 0x46dd28
fild dword [ebp - 0x94]
call fcn.00404770
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x20]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46dd75
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x98]
call fcn.00431e60
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46dd96
call fcn.00430e3c
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46ddd0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x90]
call fcn.0042ca90
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46de1d
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x9c]
call fcn.00433898
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x46dea5
inc dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
add eax, 0x31b
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x98]
add eax, 4
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404770
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x94]
jne 0x46de8b
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
add eax, 0x350
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x8c], 1
jl 0x46de2e
xor eax, eax
push ebp
push 0x46e08c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x94], eax
fild dword [ebp - 0x8c]
call fcn.00404770
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46def8
imul eax, dword [ebp - 0xa4], 0x1cc
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jge 0x46df1d
mov eax, 0x356
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x84], eax
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46df5b
mov eax, dword [ebp - 0xa0]
sub eax, 0x185
mov dword [ebp - 0x98], eax
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 4
jne 0x46debb
lea eax, [ebp - 0x84]
call fcn.00469774
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473d58
call fcn.004077fc
cmp eax, 0x4c
jge 0x46dfa3
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x84]
call fcn.00468afc
call fcn.0041aa50
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa4], eax
call fcn.0046bf8c
mov eax, dword [ebp - 0xa4]
sub eax, 0x185
mov dword [ebp - 0x9c], eax
imul eax, dword [ebp - 0xa4], 0x1c3
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x84]
call fcn.004688ac
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46e068
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x9c]
lea eax, [ebp - 0x94]
call fcn.0042f6d8
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x84]
call fcn.00468598
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46e1b0
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
lea eax, [ebp - 0x84]
call fcn.00468598
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x9c]
cmp eax, edx
jge 0x46e20f
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x94]
call fcn.00430d30
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x14]
add eax, 0xc
add eax, eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0xa0]
cmp eax, edx
jle 0x46e244
lea eax, [ebp - 0xa0]
call fcn.0043fc34
mov eax, dword [ebp - 0x84]
imul dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x46e2de
inc dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
add eax, 0x331
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x98]
add eax, 4
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
call fcn.00404770
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x90]
jne 0x46e2c4
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], eax
mov eax, 0x2e6
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x8c], 2
jl 0x46e267
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x14]
add eax, 0xc
shl eax, 2
mov dword [ebp - 0x78], eax
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473d7c
call fcn.004077fc
cmp eax, 0x49
jge 0x46e316
imul eax, dword [ebp - 0x90], 0x3ed
mov dword [ebp - 0x88], eax
imul eax, dword [ebp - 0xa4], 0x1d3
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x18]
add eax, 0xc
push eax
lea eax, [ebp - 0x40]
mov ecx, 1
mov edx, dword [0x474448]
call fcn.00408500
add esp, 4
mov eax, dword [ebp - 0xa4]
sub eax, 0x18a
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x88]
call fcn.0046b924
mov ecx, 1
mov edx, 0x473b3c
mov eax, 0x473da0
call fcn.004077fc
cmp eax, 0x4d
jge 0x46e3ad
fild dword [ebp - 0x90]
call fcn.00404764
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
jle 0x46e3d2
call fcn.0042d230
test ebx, ebx
call 0x46e3d9
pop eax
add eax, 7
push eax
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x473b26
lea eax, [ebp - 0x134]
call fcn.004068e4
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00406920
lea eax, [ebp - 0x128]
call fcn.004068e4
lea eax, [ebp - 0x124]
call fcn.004068c0
lea eax, [ebp - 0x120]
call fcn.004068e4
lea eax, [ebp - 0x11c]
call fcn.004068c0
lea eax, [ebp - 0x118]
call fcn.004068e4
lea eax, [ebp - 0x114]
call fcn.004068c0
lea eax, [ebp - 0x110]
call fcn.004068e4
lea eax, [ebp - 0x10c]
call fcn.004068c0
lea eax, [ebp - 0x108]
call fcn.004068e4
lea eax, [ebp - 0x104]
call fcn.004068c0
lea eax, [ebp - 0x100]
call fcn.004068e4
lea eax, [ebp - 0xfc]
call fcn.004068c0
lea eax, [ebp - 0xf8]
call fcn.004068e4
lea eax, [ebp - 0xf4]
call fcn.004068c0
lea eax, [ebp - 0xf0]
call fcn.004068e4
lea eax, [ebp - 0xec]
call fcn.004068c0
lea eax, [ebp - 0xe8]
call fcn.004068e4
lea eax, [ebp - 0xe4]
call fcn.004068c0
lea eax, [ebp - 0xe0]
call fcn.004068e4
lea eax, [ebp - 0xdc]
call fcn.004068c0
lea eax, [ebp - 0xd8]
call fcn.004068e4
lea eax, [ebp - 0xd4]
call fcn.004068c0
lea eax, [ebp - 0x80]
call fcn.004068c0
lea eax, [ebp - 0x40]
mov edx, dword [0x474448]
call fcn.00408624
ret