Function at 0x451e90
Capabilities:
Check for time delay via queryperformancecounter
Check http status code
Encode data using base64
Parse credit card information
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [0x52382c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x633870]
push ebx
xor ebx, ebx
cmp eax, ebx
je 0x457081
cmp byte [0x524d43], bl
je 0x451f05
cmp dword [0x631f44], ebx
je 0x451f05
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push eax
call edx
cmp eax, 0x88760869
jne 0x451f05
call fcn.0046ebc0
mov ecx, dword [0x5f3d50]
call fcn.0047ec30
cmp eax, 1
jne 0x457081
call fcn.0046ec10
mov dword [0x631f44], ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
call fcn.0043b8f0
call fcn.0044c7e0
mov eax, dword [0x5f483c]
cmp eax, ebx
je 0x457081
push esi
or esi, 0xffffffff
mov dword [eax + 0x11004], esi
mov ecx, dword [0x1a7d8a8]
cmp ecx, ebx
je 0x457080
push edi
call fcn.0049b000
mov eax, dword [0x5256bc]
cmp eax, 7
jne 0x452ca8
cmp dword [0x6a3880], 3
mov eax, dword [0x526908]
jne 0x451ff0
cmp byte [0x6a5bf8], bl
jne 0x451ff0
cmp eax, 0x51
je 0x451ff0
cmp eax, 0x52
je 0x451ff0
mov dword [0x524d44], ebx
call fcn.0043b870
mov ecx, dword [0x5ec230]
add ecx, dword [0x1a3ba10]
push 7
push ecx
call fcn.0040d780
add esp, 8
cmp dword [0x526908], 0x50
jne 0x451fa9
call fcn.004509f0
call fcn.0046fc50
call fcn.0047b5c0
push esi
mov dword [0x5f344c], ebx
call fcn.0040cf70
mov ecx, dword [0x5e9f40]
add esp, 4
call fcn.00489db0
mov dword [0x5256bc], 4
mov dword [0x526908], 0x29
call fcn.0043be30
mov dword [0x524d44], 1
jmp 0x45702a
cmp eax, 0x50
jne 0x4527cf
mov esi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0x1a391a8
call esi
mov eax, 5
cmp dword [0x1a3b3f8], eax
jbe 0x45201b
sub dword [0x1a3b3f8], eax
jmp 0x452021
mov dword [0x1a3b3f8], ebx
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, eax
sub edx, dword [0x640048]
mov dword [0x1a38320], eax
mov dword [ebp - 0x134], edx
fild dword [ebp - 0x134]
jns 0x452048
fadd dword [0x4e4558]
fstp dword [0x6444c0]
mov dword [0x640048], eax
fld dword [0x6444c0]
fld dword [0x1a820f0]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x4520c3
fdivp st(1)
fadd dword [0x5f2fa4]
fstp dword [0x5f2fa4]
fld dword [0x4e4500]
fld dword [0x5f2fa4]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x45209d
fstp st(0)
fld1
fstp dword [0x5f2fa4]
fld dword [0x5f2fa4]
fld st(0)
call fcn.004ccd60
mov dword [0x631f7c], eax
fild dword [0x631f7c]
fstp dword [0x5f2fa0]
fsub dword [0x5f2fa0]
fstp dword [0x5f2fa4]
jmp 0x4520d9
fstp st(1)
mov dword [0x631f7c], 1
fstp st(0)
fld1
fstp dword [0x5f2fa0]
fld qword [0x4e5cf0]
xor edi, edi
cmp dword [0x1a8206c], ebx
je 0x45213a
fld dword [0x526720]
inc dword [0x6a5198]
fdiv qword [0x4e4460]
fstp dword [ebp - 0x138]
fld dword [ebp - 0x138]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x452114
fstp st(0)
jmp 0x45213a
fld qword [0x4e4458]
fmul st(1), st(0)
fsubrp st(1)
call fcn.004ccd60
cmp dword [0x6a5198], eax
jge 0x452134
cmp dword [0x6a5198], 0x3c
jle 0x452157
sub dword [0x6a5198], eax
mov eax, dword [0x5e90dc]
inc eax
mov edi, 1
mov dword [0x5e90dc], eax
cmp eax, 0xb4
jl 0x452157
mov dword [0x5e90dc], ebx
mov eax, dword [0x6424d4]
inc eax
mov dword [0x6424d4], eax
cmp eax, 0x2d0
jl 0x45216f
mov dword [0x6424d4], ebx
fld dword [0x4e4bc0]
fld dword [0x641238]
fcom st(1)
fnstsw ax
fstp st(1)
fldz
test ah, 5
jp 0x4521a3
fld dword [0x4e4898]
fcomp st(2)
fnstsw ax
test ah, 5
jp 0x4521a3
fstp st(1)
fstp st(1)
fstp dword [0x641238]
jmp 0x4521fb
fxch st(1)
fmulp st(2)
fxch st(1)
fstp dword [0x641238]
fld dword [0x1a83a44]
fadd dword [0x641238]
fstp dword [0x1a83a44]
fld dword [0x1a83a44]
fld qword [0x4e4540]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x4521e2
fstp st(2)
fsubrp st(1)
fstp dword [0x1a83a44]
jmp 0x4521fb
fxch st(2)
fcomp st(1)
fnstsw ax
test ah, 0x41
jne 0x4521f7
faddp st(1)
fstp dword [0x1a83a44]
jmp 0x4521fb
fstp st(0)
fstp st(0)
cmp dword [0x5f3d54], ebx
jle 0x452209
dec dword [0x5f3d54]
cmp dword [0x6a5dbc], ebx
jbe 0x45222f
mov eax, dword [0x6a42b0]
inc eax
mov dword [0x6a42b0], eax
cmp eax, 0x258
jbe 0x45222f
mov dword [0x6a5dbc], ebx
mov dword [0x6a42b0], ebx
push 0x6339c0
call esi
mov eax, dword [0x6339c0]
sub eax, dword [0x1a391a8]
mov ecx, dword [0x6339c4]
sbb ecx, dword [0x1a391ac]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov dword [0x6a4ce0], eax
fild dword [0x6a4ce0]
mov dword [0x64445c], eax
fadd dword [0x633450]
fstp dword [0x633450]
call fcn.00420cd0
push 0x6339c0
call esi
mov edx, dword [0x6339c0]
sub edx, dword [0x1a391a8]
mov eax, dword [0x6339c4]
sbb eax, dword [0x1a391ac]
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], eax
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov dword [0x6a4ce0], eax
fild dword [0x6a4ce0]
mov dword [0x64445c], eax
fadd dword [0x633450]
fstp dword [0x633450]
cmp dword [0x6a4164], ebx
jne 0x452301
call fcn.00417600
jmp 0x452306
call fcn.00417be0
push 0x6339c0
call esi
mov ecx, dword [0x6339c0]
sub ecx, dword [0x1a391a8]
mov edx, dword [0x6339c4]
sbb edx, dword [0x1a391ac]
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x14c], edx
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov ecx, eax
sub eax, dword [0x64445c]
mov dword [0x53b138], ecx
mov dword [0x6a4ce4], eax
fild dword [0x6a4ce4]
mov eax, dword [0x41ec37c]
add eax, 0x178
fadd dword [0x633454]
mov dword [0x64445c], ecx
mov ecx, dword [0x631d64]
push eax
fstp dword [0x633454]
call fcn.004a55e0
mov ecx, dword [0x41ec37c]
add ecx, 0x178
push ecx
mov ecx, dword [0x53b1ec]
call fcn.0048b6d0
mov dword [0x641234], ebx
call fcn.0040bef0
call fcn.00411620
call fcn.00406480
call fcn.00406700
call fcn.0041e0c0
push 0x6339c0
call esi
mov edx, dword [0x6339c0]
sub edx, dword [0x1a391a8]
mov eax, dword [0x6339c4]
sbb eax, dword [0x1a391ac]
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], eax
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov ecx, eax
sub eax, dword [0x64445c]
mov dword [0x53b138], ecx
mov dword [0x6a4ce8], eax
fild dword [0x6a4ce8]
mov dword [0x64445c], ecx
mov ecx, dword [0x41ec37c]
fadd dword [0x633458]
add ecx, 0x178
push ecx
mov ecx, dword [0x41ec420]
fstp dword [0x633458]
call fcn.00483c90
cmp edi, 1
jne 0x452475
fld dword [0x53b1fc]
mov ecx, dword [0x41ec420]
push 0x4226a24
fchs
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov edx, dword [0x41ec37c]
mov ecx, dword [0x6a5db8]
add edx, 0x178
push edx
call fcn.00480e30
fld dword [0x53b1fc]
mov ecx, dword [0x6a5db8]
fchs
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.004803e0
call fcn.00431590
push 0x6339c0
call esi
mov eax, dword [0x6339c0]
sub eax, dword [0x1a391a8]
mov ecx, dword [0x6339c4]
sbb ecx, dword [0x1a391ac]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov ecx, eax
sub eax, dword [0x64445c]
mov dword [0x53b138], ecx
mov dword [0x6a4cec], eax
fild dword [0x6a4cec]
mov dword [0x64445c], ecx
fadd dword [0x63345c]
fstp dword [0x63345c]
call fcn.00418250
push 0x6339c0
call esi
mov edx, dword [0x6339c0]
sub edx, dword [0x1a391a8]
mov eax, dword [0x6339c4]
sbb eax, dword [0x1a391ac]
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], eax
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov ecx, eax
sub eax, dword [0x64445c]
mov dword [0x53b138], ecx
mov dword [0x6a4cf0], eax
fild dword [0x6a4cf0]
mov dword [0x64445c], ecx
fadd dword [0x633460]
fstp dword [0x633460]
call fcn.004570c0
push 0x6339c0
call esi
mov ecx, dword [0x6339c0]
sub ecx, dword [0x1a391a8]
mov edx, dword [0x6339c4]
sbb edx, dword [0x1a391ac]
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x14c], edx
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
mov ecx, eax
sub eax, dword [0x64445c]
mov dword [0x53b138], ecx
mov dword [0x6a4cf4], eax
fild dword [0x6a4cf4]
mov dword [0x64445c], ecx
fadd dword [0x633464]
fstp dword [0x633464]
call section..text
push 0x6339c0
call esi
mov eax, dword [0x6339c0]
sub eax, dword [0x1a391a8]
mov ecx, dword [0x6339c4]
sbb ecx, dword [0x1a391ac]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
fild qword [ebp - 0x150]
fmul qword [0x4e6370]
fild qword [0x6a3604]
fdivp st(1)
call fcn.004ccd60
sub eax, dword [0x64445c]
mov ecx, dword [0x5e90dc]
mov dword [0x6a4cf8], eax
fild dword [0x6a4cf8]
add eax, dword [0x6a4cf4]
mov esi, 1
add eax, dword [0x6a4cf0]
fadd dword [0x633468]
mov dword [0x6a4d00], 0x411a
add eax, dword [0x6a4cec]
fstp dword [0x633468]
add eax, dword [0x6a4ce8]
add eax, dword [0x6a4ce4]
add eax, dword [0x6a4ce0]
mov dword [0x6a4cfc], eax
fild dword [0x6a4cfc]
mov eax, 0x88888889
imul ecx
fadd dword [0x63346c]
fstp dword [0x63346c]
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
add edx, edx
add edx, edx
sub ecx, edx
cmp ecx, esi
jne 0x452794
fld dword [0x633450]
fld qword [0x4e4460]
fdiv st(1), st(0)
fxch st(1)
fstp dword [0x1a82078]
fld dword [0x633454]
fdiv st(1)
fstp dword [0x1a8207c]
fld dword [0x633458]
fdiv st(1)
fstp dword [0x1a82080]
fld dword [0x63345c]
fdiv st(1)
fstp dword [0x1a82084]
fld dword [0x633460]
fdiv st(1)
fstp dword [0x1a82088]
fld dword [0x633464]
fdiv st(1)
fstp dword [0x1a8208c]
fld dword [0x633468]
fdiv st(1)
fstp dword [0x1a82090]
fdivr dword [0x63346c]
fstp dword [0x1a82094]
fldz
fst dword [0x633450]
fst dword [0x633454]
fst dword [0x633458]
fst dword [0x63345c]
fst dword [0x633460]
fst dword [0x633464]
fst dword [0x633468]
fstp dword [0x63346c]
cmp dword [0x640074], esi
jne 0x4527a7
call fcn.0044a710
mov dword [0x640074], ebx
cmp dword [0x53b44c], esi
jne 0x45707f
call fcn.0044a750
pop edi
pop esi
mov dword [0x53b44c], ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ccd49
mov esp, ebp
pop ebp
ret
cmp eax, 0x51
jne 0x452843
cmp byte [0x6a58b8], bl
je 0x4527e1
call fcn.00449db0
cmp byte [0x6a5a18], bl
je 0x4527f2
push ebx
call fcn.004498f0
add esp, 4
cmp byte [0x6a5a38], bl
je 0x452803
push ebx
call fcn.004499e0
add esp, 4
cmp byte [0x6a5a58], bl
je 0x452814
push ebx
call fcn.00449d50
add esp, 4
call fcn.004509f0
call fcn.0046fc50
call fcn.0047b5c0
mov ecx, dword [0x6a30b8]
call fcn.00487d20
mov dword [0x5f344c], ebx
mov dword [0x526908], 0x52
jmp 0x45702a
cmp eax, 0x52
jne 0x452a1d
cmp dword [0x1a3b3f8], 0x190
jae 0x4529cd
add dword [0x1a3b3f8], 5
xor esi, esi
cmp dword [0x1a8206c], ebx
je 0x4528c3
fld dword [0x526720]
mov edi, dword [0x6a5198]
fdiv qword [0x4e4460]
inc edi
mov dword [0x6a5198], edi
fstp dword [ebp - 0x138]
fld dword [ebp - 0x138]
fcom qword [0x4e5cf0]
fnstsw ax
test ah, 0x41
jne 0x4528a3
fstp st(0)
jmp 0x4528c3
fld qword [0x4e4458]
fmul st(1), st(0)
fsubrp st(1)
call fcn.004ccd60
cmp edi, eax
jge 0x4528bb
cmp edi, 0x3c
jle 0x4528e3
sub edi, eax
mov dword [0x6a5198], edi
mov eax, dword [0x5e90dc]
mov ecx, eax
inc eax
mov esi, 1
mov dword [0x5e90dc], eax
cmp ecx, 0xb4
jl 0x4528e3
mov dword [0x5e90dc], ebx
call fcn.00420cd0
call fcn.00417920
mov edx, dword [0x41ec37c]
mov ecx, dword [0x631d64]
add edx, 0x178
push edx
call fcn.004a55e0
mov eax, dword [0x41ec37c]
mov ecx, dword [0x53b1ec]
add eax, 0x178
push eax
call fcn.0048b6d0
call fcn.0040bef0
call fcn.00411620
call fcn.00406480
call fcn.00406700
call fcn.0041e0c0
cmp esi, 1
jne 0x452961
fld dword [0x53b1fc]
mov ecx, dword [0x41ec420]
push 0x4226a24
fchs
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov ecx, dword [0x41ec37c]
add ecx, 0x178
push ecx
mov ecx, dword [0x41ec420]
call fcn.00483c90
fld dword [0x53b1fc]
mov ecx, dword [0x6a5db8]
fchs
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.004803e0
mov edx, dword [0x41ec37c]
mov ecx, dword [0x6a5db8]
add edx, 0x178
push edx
call fcn.00480e30
call fcn.00431590
call fcn.004570c0
call section..text
jmp 0x45702a
push esi
call fcn.0040cf70
fldz
add esp, 4
fst dword [0x5e90d4]
mov eax, 0xffff
fstp dword [0x64403c]
push 0x7d0
mov dword [0x1a3b3f8], 0x258
mov word [0x6a307c], ax
mov dword [0x5256bc], 4
mov dword [0x526908], 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x45702a
cmp eax, 0x53
jne 0x452a91
cmp byte [0x6a58b8], bl
je 0x452a2f
call fcn.00449db0
cmp byte [0x6a5a18], bl
je 0x452a40
push ebx
call fcn.004498f0
add esp, 4
cmp byte [0x6a5a38], bl
je 0x452a51
push ebx
call fcn.004499e0
add esp, 4
cmp byte [0x6a5a58], bl
je 0x452a62
push ebx
call fcn.00449d50
add esp, 4
call fcn.004509f0
call fcn.0046fc50
call fcn.0047b5c0
mov ecx, dword [0x6a30b8]
call fcn.00487d20
mov dword [0x5f344c], ebx
mov dword [0x526908], 0x54
jmp 0x45702a
cmp eax, 0x54
jne 0x45702a
cmp dword [0x1a3b3f8], 0x190
jae 0x452c4f
add dword [0x1a3b3f8], 5
fld dword [0x526720]
xor esi, esi
cmp dword [0x1a8206c], ebx
je 0x452b13
fld qword [0x4e4460]
mov edi, dword [0x6a5198]
fdivr st(1)
inc edi
mov dword [0x6a5198], edi
fstp dword [ebp - 0x138]
fld dword [ebp - 0x138]
fcom qword [0x4e5cf0]
fnstsw ax
test ah, 0x41
jne 0x452af3
fstp st(0)
jmp 0x452b13
fld qword [0x4e4458]
fmul st(1), st(0)
fsubrp st(1)
call fcn.004ccd60
cmp edi, eax
jge 0x452b0b
cmp edi, 0x3c
jle 0x452b63
sub edi, eax
mov dword [0x6a5198], edi
mov eax, dword [0x5e90dc]
mov ecx, eax
inc eax
mov esi, 1
mov dword [0x5e90dc], eax
cmp ecx, 0xb4
jl 0x452b63
sub esp, 8
fstp qword [esp]
lea edx, [ebp - 0x124]
push str.FPS___2.2f
push edx
mov dword [0x5e90dc], ebx
call fcn.004cce8a
mov ecx, dword [0x5256e8]
add esp, 0x10
lea eax, [ebp - 0x124]
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x452b65
fstp st(0)
call fcn.00420cd0
call fcn.00417920
mov edx, dword [0x41ec37c]
mov ecx, dword [0x631d64]
add edx, 0x178
push edx
call fcn.004a55e0
mov eax, dword [0x41ec37c]
mov ecx, dword [0x53b1ec]
add eax, 0x178
push eax
call fcn.0048b6d0
call fcn.0040bef0
call fcn.00411620
call fcn.00406480
call fcn.00406700
call fcn.0041e0c0
cmp esi, 1
jne 0x452be3
fld dword [0x53b1fc]
mov ecx, dword [0x41ec420]
push 0x4226a24
fchs
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov ecx, dword [0x41ec37c]
add ecx, 0x178
push ecx
mov ecx, dword [0x41ec420]
call fcn.00483c90
fld dword [0x53b1fc]
mov ecx, dword [0x6a5db8]
fchs
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.004803e0
mov edx, dword [0x41ec37c]
mov ecx, dword [0x6a5db8]
add edx, 0x178
push edx
call fcn.00480e30
call fcn.00431590
call fcn.004570c0
call section..text
jmp 0x45702a
push esi
call fcn.0040cf70
fldz
add esp, 4
fst dword [0x5e90d4]
mov eax, 0xffff
fstp dword [0x64403c]
push 0x7d0
mov dword [0x1a3b3f8], 0x258
mov word [0x6a307c], ax
mov dword [0x5256bc], 4
mov dword [0x526908], 0x29
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
call fcn.0040cf70
add esp, 4
jmp 0x45702a
cmp eax, ebx
jne 0x4530c9
mov eax, dword [0x526908]
cmp eax, 0x28
jne 0x452ce5
xor eax, eax
mov dword [0x1a3c120], eax
mov dword [0x1a3c124], eax
mov dword [0x1a3c128], eax
mov dword [0x1a3c12c], eax
mov dword [0x1a3c130], eax
mov byte [0x1a3c134], al
mov dword [0x526908], ebx
jmp 0x45702a
cmp eax, ebx
jne 0x45304a
mov ecx, dword [0x5f483c]
push 3
call fcn.0049dea0
mov ecx, dword [0x5f483c]
push 2
call fcn.0049dea0
mov ecx, dword [0x41ec420]
call fcn.004812b0
mov ecx, dword [0x1a7d8a8]
call fcn.0049ad90
mov ecx, dword [0x6a30b8]
call fcn.00487d20
fld1
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x90]
push ebx
push ecx
fstp dword [esp]
push ebx
push 3
push ebx
push ebx
push eax
call edx
mov ecx, dword [0x526714]
mov eax, dword [0x525378]
push 0x526a00
push eax
shl ecx, 7
add ecx, 0x5257f0
push ecx
lea edx, [ebp - 0x124]
push str.Language_sgrx__d._s
push edx
call fcn.004cce8a
mov ecx, dword [0x5f483c]
add esp, 0x14
push 3
push 0x15
lea eax, [ebp - 0x124]
push eax
call fcn.004a4cf0
mov dword [0x6a4390], eax
cmp dword [0x5eaaa0], ebx
je 0x452da7
mov ecx, dword [0x5f483c]
push 0x31545844
push eax
call fcn.004a4b60
fldz
mov ecx, dword [0x6424cc]
sub esp, 0x18
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x526a68]
fstp dword [esp + 0xc]
fld dword [0x526708]
fstp dword [esp + 8]
fld dword [0x4e44e8]
fst dword [esp + 4]
fstp dword [esp]
call fcn.004880e0
fld dword [0x4e6220]
fstp dword [0x1a83a44]
push 0x4226988
fldz
mov dword [0x1a3b3f8], 0x190
fst dword [ebp - 0x130]
mov dword [0x6423c0], ebx
fst dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
fst dword [ebp - 0x128]
mov edx, dword [ebp - 0x12c]
fst dword [ebp - 0x130]
fld1
mov eax, dword [ebp - 0x128]
mov dword [0x4226a18], ecx
mov ecx, dword [ebp - 0x130]
fst dword [ebp - 0x12c]
fxch st(1)
mov dword [0x4226a1c], edx
mov edx, dword [ebp - 0x12c]
fst dword [ebp - 0x128]
fxch st(1)
mov dword [0x4226a20], eax
mov eax, dword [ebp - 0x128]
fstp dword [ebp - 0x130]
mov dword [0x4226a24], ecx
mov ecx, dword [ebp - 0x130]
mov dword [0x4226a28], edx
fst dword [ebp - 0x12c]
mov edx, dword [ebp - 0x12c]
mov dword [0x4226a2c], eax
fstp dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
mov dword [0x41ed52c], ecx
mov ecx, dword [0x41ec37c]
mov dword [0x41ed530], edx
mov dword [0x41ed534], eax
call fcn.0047f3a0
mov ecx, dword [0x41ec37c]
push 0x4226948
call fcn.0047f3c0
mov ecx, dword [0x41ec37c]
push 0x41ed52c
push 0x4226a24
push 0x4226a18
call fcn.0047f260
mov ecx, dword [0x41ec37c]
push 0x421ce20
push 0x421cde0
call fcn.0047f310
mov ecx, dword [0x41ec37c]
call fcn.0047f440
mov ecx, dword [0x41ec37c]
add ecx, 0x178
push ecx
mov ecx, dword [0x41ec420]
call fcn.00483c90
mov eax, dword [0x633870]
mov edx, dword [eax]
push 2
push 0x11
push ebx
push eax
mov eax, dword [edx + 0xfc]
call eax
mov eax, dword [0x633870]
mov ecx, dword [eax]
push 3
mov edx, dword [ecx + 0xfc]
push 0x10
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x130]
push 0x144
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
mov edi, 1
push edi
push 0x1b
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 6
push 0x14
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 2
push 0x16
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 2
push 7
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 0xc0c0c0
push 0x8b
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xa8]
push 0x1a7d860
push eax
call edx
cmp dword [0x631e20], edi
jne 0x45301a
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push edi
push 0xf
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 8
push 0x18
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 7
push 0x19
push eax
call edx
push 0x6a3604
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push esi
mov dword [0x6a4d74], edi
mov dword [0x1a3c7f4], ebx
call fcn.0040cf70
add esp, 4
call fcn.00450220
mov dword [0x526908], edi
jmp 0x45702a
cmp eax, 1
jne 0x453096
mov edi, 0x14
cmp dword [0x1a3b3f8], edi
jbe 0x453064
sub dword [0x1a3b3f8], edi
jmp 0x45306a
mov dword [0x1a3b3f8], ebx
mov eax, dword [0x6423c0]
inc eax
mov dword [0x6423c0], eax
cmp eax, 0xf0
jle 0x45308c
mov dword [0x1a3b3f8], ebx
mov dword [0x526908], 2
call fcn.00468820
jmp 0x45702a
cmp eax, 2
jne 0x45702a
mov ecx, dword [0x6a30b8]
mov dword [0x5e90dc], ebx
call fcn.00487d20
mov dword [0x5256bc], 1
mov dword [0x526908], 0xc
jmp 0x45702a
cmp eax, 1
jne 0x45320c
mov eax, dword [0x526908]
cmp eax, 0xa
jne 0x4531a9
mov eax, dword [0x525378]
push 0x526a00
push eax
lea ecx, [ebp - 0x124]
push str.TextureDeclaration__d._s
push ecx
call fcn.004cce8a
mov ecx, dword [0x5f483c]
add esp, 0x10
push 3
push 0x19
lea edx, [ebp - 0x124]
push edx
call fcn.004a4cf0
mov dword [0x5f3448], eax
cmp dword [0x5eaaa0], ebx
je 0x453133
mov ecx, dword [0x5f483c]
push 0x31545844
push eax
call fcn.004a4b60
fldz
mov ecx, dword [0x644008]
sub esp, 0x18
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x526a68]
fstp dword [esp + 0xc]
fld dword [0x526708]
fstp dword [esp + 8]
fld dword [0x4e44e8]
fst dword [esp + 4]
fstp dword [esp]
call fcn.004880e0
push esi
mov dword [0x1a3b3f8], 0x190
mov dword [0x6423c0], ebx
mov dword [0x6a4d74], 1
mov dword [0x1a3c7f4], ebx
call fcn.0040cf70
add esp, 4
call fcn.00450220
mov dword [0x526908], 0xb
jmp 0x45702a
cmp eax, 0xb
jne 0x4531cf
mov edi, 0x14
cmp dword [0x1a3b3f8], edi
jbe 0x45350c
sub dword [0x1a3b3f8], edi
call fcn.00468820
jmp 0x45702a
cmp eax, 0xc
jne 0x45702a
mov ecx, dword [0x6a30b8]
mov dword [0x5e90dc], ebx
call fcn.00487d20
mov dword [0x1a3b3f8], 0x104
mov dword [0x5256bc], 2
mov dword [0x526908], 0x14
jmp 0x45702a
cmp eax, 2
jne 0x4532ef
mov eax, dword [0x526908]
cmp eax, 0x14
jne 0x453273
push 1
call fcn.00450f30
push ebx
call fcn.0040cf70
push 1
call fcn.00470af0
push 2
call fcn.00470df0
mov eax, dword [0x526800]
mov ecx, dword [0x5256e8]
add esp, 0x10
shl eax, 0x10
add eax, dword [0x526728]
push eax
push ebx
push 0x200
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
call fcn.00450220
mov dword [0x526908], 0x15
jmp 0x45702a
cmp eax, 0x15
jne 0x45702a
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov eax, 0xa
cmp dword [0x1a3b3f8], eax
jbe 0x4532b8
sub dword [0x1a3b3f8], eax
jmp 0x4532be
mov dword [0x1a3b3f8], ebx
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
call fcn.00468820
jmp 0x45702a
cmp eax, 3
jne 0x45351c
mov eax, dword [0x526908]
cmp eax, 0x1e
jne 0x4534bf
push 0x100000
push ebx
mov dword [0x6334cc], ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
cmp edi, ebx
je 0x45344a
push 0x100000
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x138], eax
cmp eax, ebx
je 0x453434
push 0x100000
push ebx
push edi
call fcn.004cce10
mov edx, dword [ebp - 0x138]
push 0x100000
push ebx
push edx
call fcn.004cce10
add esp, 0x18
push ebx
push 0x4e6320
call dword [sym.imp.KERNEL32.dll__lopen]
cmp eax, esi
je 0x453434
push 0x100000
push edi
push eax
call dword [sym.imp.KERNEL32.dll__lread]
mov esi, eax
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x6334cc], eax
cmp eax, ebx
je 0x453434
mov eax, dword [ebp - 0x138]
push esi
push edi
push eax
call fcn.004cd640
mov ecx, dword [0x6334cc]
push esi
push edi
push ecx
call fcn.004cd640
mov esi, dword [ebp - 0x138]
push 0x4e59c4
push esi
call fcn.004cef6b
add esp, 0x20
test eax, eax
je 0x4533e8
lea esp, [esp]
inc dword [0x53b130]
push 0x4e59c4
push ebx
call fcn.004cef6b
add esp, 8
test eax, eax
jne 0x4533d0
mov eax, dword [0x53b130]
mov dword [0x6a55a0], 0x92
mov dword [0x6a55a4], ebx
cmp eax, 0xf
jle 0x453424
fild dword [0x53b130]
add eax, 0xfffffff1
mov dword [0x6a55a8], eax
fsub qword [0x4e4690]
fdiv qword [0x4e6318]
fstp dword [0x6a55ac]
jmp 0x45343a
fldz
mov dword [0x6a55a8], ebx
fstp dword [0x6a55ac]
jmp 0x45343a
mov esi, dword [ebp - 0x138]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
cmp esi, ebx
je 0x45344a
push esi
call edi
push 1
mov dword [0x1a3b3f8], 0x104
mov dword [0x6a4d74], 1
mov dword [0x1a3c7f4], ebx
mov dword [0x633a78], 0x96
call fcn.00470af0
push 1
call fcn.00470df0
fild dword [0x51d948]
add esp, 8
fmul dword [0x526844]
call fcn.004ccd60
fild dword [0x51d94c]
mov dword [0x6a55b0], eax
fmul dword [0x525374]
call fcn.004ccd60
mov dword [0x6a55b4], eax
call fcn.00450220
mov dword [0x526908], 0x1f
jmp 0x45702a
cmp eax, 0x1f
jne 0x45702a
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov eax, 0xa
cmp dword [0x1a3b3f8], eax
jbe 0x45350c
sub dword [0x1a3b3f8], eax
call fcn.00468820
jmp 0x45702a
mov dword [0x1a3b3f8], ebx
call fcn.00468820
jmp 0x45702a
mov edi, 4
cmp eax, edi
jne 0x453f46
mov eax, dword [0x526908]
cmp eax, 0x28
jne 0x453566
mov dword [0x1a3c120], ebx
mov dword [0x1a3c124], ebx
mov dword [0x1a3c128], ebx
mov dword [0x1a3c12c], ebx
mov dword [0x1a3c130], ebx
mov byte [0x1a3c134], bl
mov dword [0x526908], 0x29
jmp 0x45702a
cmp eax, 0x29
jne 0x45367e
mov esi, 1
push esi
call fcn.00450f30
mov ecx, dword [0x5e9f3c]
add esp, 4
mov dword [0x1a3b3f8], ebx
call fcn.00489db0
mov ecx, dword [0x5e9f3c]
mov edi, 0x14
push edi
call fcn.00489e10
mov ecx, dword [0x5e9f40]
call fcn.00489db0
mov ecx, dword [0x5e9f40]
push edi
call fcn.00489e10
mov eax, 0x41ec318
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4535c0
sub eax, edx
jne 0x45361b
mov dword [0x41ec318], ebx
mov dword [0x41ec31c], ebx
mov dword [0x41ec320], ebx
mov dword [0x41ec324], ebx
mov dword [0x41ec328], ebx
mov byte [0x41ec32c], bl
mov dword [0x1a3c120], ebx
mov dword [0x1a3c124], ebx
mov dword [0x1a3c128], ebx
mov dword [0x1a3c12c], ebx
mov dword [0x1a3c130], ebx
mov byte [0x1a3c134], bl
mov dword [0x526718], ebx
jmp 0x453654
mov ecx, dword [0x5e9f3c]
push 0x41ec318
call fcn.0048a180
mov eax, 0x1a3c120
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x453633
sub eax, edx
je 0x45364e
mov ecx, dword [0x5e9f40]
push 0x1a3c120
call fcn.0048a180
mov dword [0x526718], esi
push esi
mov dword [0x52690c], esi
call fcn.00470af0
push 3
call fcn.00470df0
add esp, 8
call fcn.00450220
mov dword [0x526908], 0x2a
jmp 0x45702a
cmp eax, 0x2a
jne 0x453707
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov eax, 5
cmp dword [0x1a3b3f8], eax
jbe 0x4536cb
sub dword [0x1a3b3f8], eax
call fcn.00468820
jmp 0x45702a
mov edx, dword [0x526800]
mov eax, dword [0x5256e8]
shl edx, 0x10
add edx, dword [0x526728]
mov dword [0x1a3b3f8], ebx
push edx
push ebx
push 0x200
push eax
mov dword [0x526908], 0x2b
call dword [sym.imp.USER32.dll_PostMessageA]
call fcn.00468820
jmp 0x45702a
cmp eax, 0x2b
jne 0x453755
mov dword [0x1a3b3f8], ebx
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
cmp dword [0x633a78], 0x96
jae 0x45374b
inc dword [0x633a78]
call fcn.00468820
jmp 0x45702a
mov edi, 0x2c
cmp eax, edi
jne 0x4537a1
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
cmp dword [0x633a78], 0x96
jae 0x453797
inc dword [0x633a78]
call fcn.00468820
jmp 0x45702a
cmp eax, 0x2d
jne 0x4537e9
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
cmp dword [0x633a78], 0x96
jae 0x4537df
inc dword [0x633a78]
call fcn.00468820
jmp 0x45702a
cmp eax, 0x2f
jne 0x453923
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov ecx, dword [0x5e9f3c]
push 0x41ec318
call fcn.00489e40
mov ecx, dword [0x5e9f40]
push 0x1a3c120
call fcn.00489e40
push 0x15
push 0x41ec318
push str.User
push str.hhcBEOnline
push str.Software
push connect
call fcn.0043bd40
push 3
mov dword [0x6a3880], 3
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
call fcn.0043b9c0
add esp, 0x1c
mov dword [0x1a3c144], eax
call fcn.0047bc90
test eax, eax
jne 0x4538be
mov edx, dword [0x5ec1e8]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 6
call fcn.00470df0
add esp, 0x10
mov dword [0x526908], 0x2e
jmp 0x45702a
mov ecx, dword [0x5ec1f0]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
mov ecx, dword [0x5e9f40]
add esp, 8
call fcn.00489db0
mov dword [0x1a3c120], ebx
mov dword [0x1a3c124], ebx
mov dword [0x1a3c128], ebx
mov dword [0x1a3c12c], ebx
mov dword [0x1a3c130], ebx
mov byte [0x1a3c134], bl
push 1
call fcn.00470af0
push 4
call fcn.00470df0
add esp, 8
mov dword [0x526908], edi
jmp 0x45702a
cmp eax, 0x2e
jne 0x453bae
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov eax, dword [0x6333d4]
cmp eax, 0x63
jne 0x4539a9
mov ecx, dword [0x6a5560]
lea edx, [ecx - 1]
cmp edx, 0x13
ja 0x45399e
mov eax, dword [0x6424b8]
cmp eax, ebx
jl 0x453978
cmp eax, ecx
jl 0x45397e
mov dword [0x6424b8], ebx
push 1
call fcn.00470af0
push 7
call fcn.00470df0
add esp, 8
mov dword [0x526908], 0x30
jmp 0x45702a
mov ecx, dword [0x5ec208]
jmp 0x4538c4
cmp eax, 1
jne 0x4539bf
mov eax, dword [0x5ec20c]
add eax, dword [0x1a3ba10]
push eax
jmp 0x4538cb
cmp eax, 2
jne 0x4539e0
mov edx, dword [0x5ec210]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
jmp 0x453f2a
cmp eax, 3
jne 0x4539f0
mov ecx, dword [0x5ec214]
jmp 0x4538c4
cmp eax, 4
jne 0x453a06
mov eax, dword [0x5ec218]
add eax, dword [0x1a3ba10]
push eax
jmp 0x4538cb
cmp eax, 5
jne 0x453a1d
mov edx, dword [0x5ec21c]
add edx, dword [0x1a3ba10]
push edx
jmp 0x4538cb
cmp eax, 6
jne 0x453a87
mov ecx, dword [0x5ec220]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
mov ecx, dword [0x5e9f40]
add esp, 8
call fcn.00489db0
push 1
mov dword [0x1a3c120], ebx
mov dword [0x1a3c124], ebx
mov dword [0x1a3c128], ebx
mov dword [0x1a3c12c], ebx
mov dword [0x1a3c130], ebx
mov byte [0x1a3c134], bl
call fcn.00470af0
push 4
call fcn.00470df0
add esp, 8
mov dword [0x526908], edi
jmp 0x45702a
cmp eax, 7
jne 0x453a96
mov eax, dword [0x5ec224]
jmp 0x453ef3
cmp eax, 8
jne 0x453ab7
mov edx, dword [0x5ec228]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
jmp 0x453f2a
cmp eax, 9
jne 0x453b21
mov ecx, dword [0x5ec22c]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
mov ecx, dword [0x5e9f40]
add esp, 8
call fcn.00489db0
push 1
mov dword [0x1a3c120], ebx
mov dword [0x1a3c124], ebx
mov dword [0x1a3c128], ebx
mov dword [0x1a3c12c], ebx
mov dword [0x1a3c130], ebx
mov byte [0x1a3c134], bl
call fcn.00470af0
push 4
call fcn.00470df0
add esp, 8
mov dword [0x526908], edi
jmp 0x45702a
cmp dword [0x6a3880], 3
jne 0x453b34
mov eax, dword [0x5ec208]
jmp 0x453ef3
mov eax, dword [0x6423c0]
inc eax
mov dword [0x6423c0], eax
cmp eax, 0x258
jl 0x453512
call fcn.0047b320
mov edx, dword [0x5ec1f0]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 4
call fcn.00470df0
mov dword [0x5256bc], 4
mov dword [0x526908], edi
mov eax, dword [0x526800]
mov ecx, dword [0x5256e8]
add esp, 0x10
shl eax, 0x10
add eax, dword [0x526728]
push eax
push ebx
push 0x200
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x45702a
cmp eax, 0x30
je 0x4532be
cmp eax, 0x31
jne 0x453e5b
mov dword [0x1a3b3f8], ebx
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
mov eax, dword [0x6333d4]
cmp eax, 0x63
jne 0x453c5a
mov eax, dword [0x5ec1f4]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
mov eax, dword [0x1a3927c]
add esp, 8
cmp eax, ebx
jl 0x453c1e
cmp eax, 2
jle 0x453c24
mov dword [0x1a3927c], ebx
push 1
call fcn.00470af0
push 9
call fcn.00470df0
add esp, 8
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
mov dword [0x5256bc], 5
mov dword [0x526908], 0x3c
jmp 0x45702a
cmp dword [0x6a3880], 3
jne 0x453d88
cmp eax, 1
jne 0x453c77
mov edx, dword [0x5ec20c]
jmp 0x453d6f
cmp eax, 2
jne 0x453c9b
mov ecx, dword [0x5ec210]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
cmp eax, 3
jne 0x453cbe
mov eax, dword [0x5ec214]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
cmp eax, 4
jne 0x453cce
mov edx, dword [0x5ec218]
jmp 0x453d6f
cmp eax, 5
jne 0x453cf2
mov ecx, dword [0x5ec21c]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
cmp eax, 6
jne 0x453d15
mov eax, dword [0x5ec220]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
cmp eax, 7
jne 0x453d22
mov edx, dword [0x5ec224]
jmp 0x453d6f
cmp eax, 8
jne 0x453d46
mov ecx, dword [0x5ec228]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
cmp eax, 9
jne 0x453d69
mov eax, dword [0x5ec22c]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
mov edx, dword [0x5ec1f0]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
add esp, 8
jmp 0x453907
mov ecx, dword [0x6423c0]
inc ecx
mov dword [0x6423c0], ecx
cmp ecx, 0xe10
jl 0x453e01
call fcn.0047b5c0
mov ecx, dword [0x5ec1f0]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 4
call fcn.00470df0
mov edx, dword [0x526800]
mov eax, dword [0x5256e8]
add esp, 0x10
shl edx, 0x10
add edx, dword [0x526728]
mov dword [0x5256bc], 4
push edx
push ebx
push 0x200
push eax
mov dword [0x526908], edi
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x45702a
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
shl edx, 4
sub ecx, edx
jne 0x453512
call fcn.0047b5c0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x64
call edi
call fcn.0047be90
push 0x64
call edi
mov edi, 0x53b9e8
add edi, esi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x453e45
mov ax, word [0x4e6314]
mov word [edi], ax
jmp 0x45702a
cmp eax, 0x32
jne 0x453f06
push ebx
call fcn.00450f30
push ebx
mov dword [0x1a3b3f8], 0x104
call fcn.0040cf70
add esp, 8
call fcn.00450220
mov dword [0x6a3880], 3
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
call fcn.0047be90
test eax, eax
jne 0x453eee
mov eax, dword [0x6424b8]
lea ecx, [eax + eax*8]
lea edx, [ecx*8 + 0x1a3c148]
mov ecx, dword [0x5ec1ec]
add ecx, dword [0x1a3ba10]
push edx
push ecx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 8
call fcn.00470df0
add esp, 0x14
mov dword [0x6333d4], ebx
mov dword [0x526908], 0x31
jmp 0x45702a
mov eax, dword [0x5ec1f0]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
jmp 0x453f2a
cmp eax, 0x33
jne 0x45702a
push ebx
call fcn.0040cf70
push ebx
call fcn.00450f30
mov dword [0x1a3b3f8], 0x104
call fcn.00450220
push 1
call fcn.00470af0
push 4
call fcn.00470df0
add esp, 0x10
mov dword [0x526908], edi
jmp 0x45702a
cmp eax, 5
jne 0x454710
call fcn.004352d0
fldz
mov ecx, dword [0x41ec420]
push 0x4226a24
sub esp, 8
fstp dword [esp + 4]
fld dword [0x1a83a44]
fstp dword [esp]
call fcn.00483d90
cmp dword [0x6a3880], 3
jne 0x453fd6
mov dword [0x5f344c], ebx
cmp dword [0x6424d0], ebx
jne 0x453fb1
mov edx, dword [0x5ec230]
add edx, dword [0x1a3ba10]
mov dword [0x6424d0], 1
push edx
push 0x1a38da8
call fcn.004cce8a
add esp, 8
push 1
call fcn.00470af0
push edi
call fcn.00470df0
add esp, 8
mov dword [0x5256bc], edi
mov dword [0x526908], 0x2c
jmp 0x45702a
mov eax, dword [0x526908]
mov edi, 0x3c
cmp eax, edi
jne 0x454123
mov eax, dword [0x6333d4]
cmp eax, ebx
jne 0x454015
lea eax, [ebp - 0x24]
push 4
push eax
mov dword [ebp - 0x24], 0x21
call fcn.0047b750
add esp, 8
mov dword [0x6333d4], 1
jmp 0x45702a
cmp eax, 1
jne 0x454076
mov eax, dword [0x6423c0]
inc eax
mov dword [0x6423c0], eax
cmp eax, 0x4b0
jl 0x453512
call fcn.0047b5c0
mov edx, dword [0x5ec1f0]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 4
call fcn.00470df0
add esp, 0x10
mov dword [0x5256bc], 4
mov dword [0x526908], 0x2c
jmp 0x45702a
cmp eax, 2
jne 0x45702a
cmp byte [0x641970], bl
jbe 0x4540ac
cmp byte [0x641971], bl
jbe 0x4540ac
movzx eax, byte [0x641978]
push eax
call fcn.004327d0
movzx ecx, byte [0x641976]
push ecx
call fcn.00432c90
add esp, 8
cmp byte [0x641998], bl
jbe 0x4540d9
cmp byte [0x641999], bl
jbe 0x4540d9
movzx edx, byte [0x6419a0]
push edx
call fcn.004327d0
movzx eax, byte [0x64199e]
push eax
call fcn.00432c90
add esp, 8
push 1
call fcn.00470af0
push 0xa
call fcn.00470df0
add esp, 8
mov dword [0x6a2c94], esi
mov dword [0x6a2c98], esi
mov dword [0x6a2c9c], esi
mov dword [0x6a2ca0], esi
mov dword [0x6a2ca4], esi
mov dword [0x41ebcf4], ebx
mov dword [0x6a4154], ebx
mov dword [0x526908], 0x3d
jmp 0x45702a
cmp eax, 0x3d
je 0x454697
cmp eax, 0x3f
jne 0x45435c
mov eax, dword [0x1a3927c]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
add eax, eax
cmp byte [eax + 0x641970], bl
je 0x45422c
lea eax, [eax + 0x641960]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x454158
sub eax, edx
je 0x45422c
push 3
call fcn.0043b9c0
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
cmp eax, 2
jne 0x454183
push 0x7d0
call edi
push 3
call fcn.0043b9c0
add esp, 4
cmp eax, 2
jne 0x454199
push 0x7d0
call edi
mov cl, byte [0x1a3927c]
lea edx, [ebp - 0x24]
push 5
push edx
mov dword [ebp - 0x24], 0x1f
mov byte [ebp - 0x20], cl
call fcn.0047b750
call fcn.0047b7c0
push esi
mov dword [0x6a44b0], ebx
call fcn.0040cf70
mov eax, dword [0x1a3927c]
lea eax, [eax + eax*4]
movzx eax, byte [eax*8 + 0x641973]
add esp, 0xc
mov dword [0x1a2e664], eax
cmp eax, ebx
jl 0x4541e6
cmp eax, 0x40
jl 0x4541ec
mov dword [0x1a2e664], ebx
mov ecx, dword [0x631f6c]
push 1
mov dword [0x6423b0], ecx
mov dword [0x6a4154], ebx
mov dword [0x41ebcf4], ebx
call fcn.00470af0
add esp, 4
call fcn.00450520
mov dword [0x5256bc], 6
mov dword [0x526908], 0x46
jmp 0x45702a
mov ecx, dword [0x5e9f44]
call fcn.00489db0
mov ecx, dword [0x5e9f44]
push 0xa
call fcn.00489e10
mov eax, dword [0x1a3927c]
movzx edx, byte [0x51ca5d]
movzx ecx, byte [0x51ca5e]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
add eax, eax
mov dword [eax + 0x641960], ebx
mov dword [eax + 0x641964], ebx
mov dword [eax + 0x641968], ebx
mov dword [eax + 0x64196c], ebx
mov dword [eax + 0x641970], ebx
mov dword [eax + 0x641974], ebx
mov dword [eax + 0x641978], ebx
mov dword [eax + 0x64197c], ebx
mov dword [eax + 0x641980], ebx
mov dword [eax + 0x641984], ebx
mov byte [eax + 0x641970], 1
mov dword [0x1a83a30], edx
movzx edx, byte [0x51ca5f]
mov byte [eax + 0x641971], 1
mov byte [eax + 0x64196c], cl
movzx ecx, byte [0x51ca61]
mov byte [eax + 0x64196e], dl
movzx edx, byte [0x51ca60]
mov esi, 1
mov byte [eax + 0x64196d], cl
push esi
mov dword [0x52690c], esi
mov dword [0x526718], 2
mov dword [0x5f3374], esi
mov dword [0x1a3bbac], 3
mov dword [0x6a30c4], ebx
mov dword [0x1a83a40], ebx
mov dword [0x5e94b0], ebx
mov byte [eax + 0x64196f], dl
mov dword [0x53b1f8], ebx
mov dword [0x631f68], ebx
mov dword [0x53b9d8], ebx
mov dword [0x526908], 0x3e
call fcn.00470af0
push 0xb
call fcn.00470df0
mov eax, dword [0x1a83a30]
push eax
call fcn.004327d0
mov ecx, dword [0x6a30c4]
push ecx
call fcn.00432c90
add esp, 0x10
jmp 0x45702a
cmp eax, 0x3e
je 0x454697
cmp eax, 0x40
jne 0x45467b
mov eax, dword [0x6333d4]
cmp eax, 0x63
jne 0x4543d0
mov eax, dword [0x6423c0]
inc eax
mov dword [0x6423c0], eax
cmp eax, 0x708
jl 0x454697
call fcn.0047b5c0
mov eax, dword [0x5ec1f0]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 4
call fcn.00470df0
mov dword [0x5256bc], 4
mov dword [0x526908], 0x2c
jmp 0x45448d
cmp eax, ebx
jne 0x454404
mov ecx, dword [0x5ec1f4]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 9
call fcn.00470df0
mov dword [0x526908], edi
jmp 0x45451c
cmp eax, 1
jne 0x454414
mov edx, dword [0x5ec238]
jmp 0x454567
cmp eax, 2
jne 0x4544b8
mov eax, dword [0x5ec23c]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 0xd
call fcn.00470df0
mov eax, dword [0x1a3927c]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x641960]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
mov dword [eax + 0x20], ebx
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
mov dword [0x5256bc], 5
mov dword [0x526908], 0x41
mov dword [eax + 0x24], ebx
mov ecx, dword [0x526800]
mov edx, dword [0x5256e8]
add esp, 0x10
shl ecx, 0x10
add ecx, dword [0x526728]
push ecx
push ebx
push 0x200
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x45702a
cmp eax, 3
jne 0x45455c
mov ecx, dword [0x5ec240]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 0xd
call fcn.00470df0
mov eax, dword [0x1a3927c]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x641960]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
mov dword [eax + 0x20], ebx
mov dword [0x526908], 0x41
mov dword [eax + 0x24], ebx
mov edx, dword [0x526800]
mov eax, dword [0x5256e8]
add esp, 0x10
shl edx, 0x10
add edx, dword [0x526728]
mov dword [0x5256bc], 5
push edx
push ebx
push 0x200
push eax
mov dword [0x6423c0], ebx
mov dword [0x6333d4], ebx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x45702a
cmp eax, 4
jne 0x4545d7
mov edx, dword [0x5ec224]
add edx, dword [0x1a3ba10]
push edx
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 0xd
call fcn.00470df0
mov eax, dword [0x1a3927c]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x641960]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
mov dword [eax + 0x20], ebx
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
mov dword [0x5256bc], 5
mov dword [0x526908], 0x41
mov dword [eax + 0x24], ebx
jmp 0x453b84
cmp eax, 5
jne 0x45702a
mov eax, dword [0x5ec224]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 0xd
call fcn.00470df0
mov eax, dword [0x1a3927c]
mov ecx, dword [0x526800]
mov edx, dword [0x5256e8]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x641960]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
add esp, 0x10
shl ecx, 0x10
add ecx, dword [0x526728]
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
push ecx
mov dword [eax + 0x14], ebx
push ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
push 0x200
mov dword [eax + 0x20], ebx
push edx
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
mov dword [0x5256bc], 5
mov dword [0x526908], 0x41
mov dword [eax + 0x24], ebx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x45702a
cmp eax, 0x41
je 0x454697
cmp eax, 0x42
je 0x454697
cmp eax, 0x43
jne 0x45702a
mov eax, dword [0x6333d4]
cmp eax, ebx
jne 0x4546a6
call fcn.00468820
call fcn.0040cf00
jmp 0x45702a
cmp eax, 1
jne 0x4546bf
call fcn.00450ec0
mov ecx, dword [0x5ec1f4]
add ecx, dword [0x1a3ba10]
push ecx
jmp 0x4546d4
cmp eax, 2
jne 0x45702a
mov eax, dword [0x5ec234]
add eax, dword [0x1a3ba10]
push eax
push 0x1a38da8
call fcn.004cce8a
push 1
call fcn.00470af0
push 9
call fcn.00470df0
add esp, 0x10
mov dword [0x6333d4], ebx
mov dword [0x6423c0], ebx
mov dword [0x5256bc], 5
mov dword [0x526908], edi
jmp 0x45702a
cmp eax, 6
jne 0x456f73
cmp dword [0x6a3880], 3
je 0x456ef3
cmp dword [0x5f3d58], 0xffff
je 0x456ef3
mov eax, dword [0x526908]
cmp eax, 0x46
jne 0x4552ce
mov dword [0x524d44], ebx
call fcn.0043b870
mov ecx, dword [0x53b1ec]
mov dword [0x53b418], esi
call fcn.0048b130
mov ecx, dword [0x41ec420]
call fcn.004812b0
mov ecx, dword [0x6a5db8]
call fcn.0047fba0
mov ecx, dword [0x1a7d8a8]
call fcn.0049ad90
mov ecx, dword [0x5f483c]
push 2
call fcn.0049dea0
mov ecx, dword [0x5f483c]
push 3
call fcn.0049dea0
xor edi, edi
lea ecx, [ecx]
mov eax, dword [edi + 0x568098]
mov dword [edi + 0x5e8970], esi
mov dword [edi + 0x5f3760], esi
cmp eax, ebx
je 0x4547c3
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x568098], ebx
mov eax, dword [edi + 0x6a3c98]
cmp eax, ebx
je 0x4547da
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x6a3c98], ebx
add edi, 4
cmp edi, 0x4b0
jl 0x4547a0
xor edi, edi
jmp 0x4547f0
mov eax, dword [edi + 0x6423c8]
mov dword [edi + 0x6a3790], esi
cmp eax, ebx
je 0x45480d
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x6423c8], ebx
mov eax, dword [edi + 0x641138]
cmp eax, ebx
je 0x454824
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x641138], ebx
add edi, 4
cmp edi, 0xf0
jl 0x4547f0
mov dword [0x644424], esi
mov dword [0x644428], esi
mov dword [0x64442c], esi
mov dword [0x644430], esi
mov dword [0x644434], esi
mov dword [0x644438], esi
mov dword [0x64443c], esi
mov dword [0x644440], esi
mov dword [0x644444], esi
mov dword [0x644448], esi
mov dword [0x64444c], esi
mov dword [0x644450], esi
mov dword [0x644454], esi
mov dword [0x6a2c94], esi
mov dword [0x6a2c98], esi
mov dword [0x6a2c9c], esi
mov dword [0x6a2ca0], esi
mov dword [0x6a2ca4], esi
xor eax, eax
lea ecx, [ecx]
mov dword [eax*4 + 0x539bc8], eax
inc eax
cmp eax, 0x40
jl 0x4548a0
mov eax, esi
mov ecx, 0x39
mov edi, 0x1a2e4c0
rep stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x39
mov edi, 0x1a82f78
push 0x1432e60
rep stosd dword es:[edi], eax
mov ecx, dword [0x56895c]
push ebx
push ecx
call fcn.004cce10
mov edx, dword [0x6a63a0]
push 0x2710
push ebx
push edx
call fcn.004cce10
mov eax, dword [0x568964]
push 0x19e10
push ebx
push eax
call fcn.004cce10
mov ecx, dword [0x6a3098]
push 0x4e20
push ebx
push ecx
call fcn.004cce10
push 0x9a00
push ebx
push 0x421ce60
call fcn.004cce10
push 0x2f400
push ebx
push 0x41ed5d8
call fcn.004cce10
add esp, 0x48
push 0x458
push ebx
push 0x1a3bbb8
call fcn.004cce10
push 0x200
push ebx
push 0x643e00
call fcn.004cce10
mov edx, 0xffff
mov eax, 0x270f
push 0xa
mov dword [0x631e30], ebx
mov dword [0x539ddc], ebx
mov word [0x6a307c], dx
mov word [0x5f375c], ax
mov dword [0x1a83064], ebx
mov dword [0x6a64bc], ebx
call fcn.0043b9c0
shl eax, 6
add eax, str.desktop01
push eax
lea ecx, [ebp - 0x124]
push 0x4e6304
push ecx
call fcn.004cce8a
lea edx, [ebp - 0x124]
push edx
call fcn.004318d0
mov ecx, dword [0x5f483c]
add esp, 0x2c
push 3
push 0x15
lea eax, [ebp - 0x124]
push eax
call fcn.004a4cf0
mov dword [0x53b418], eax
cmp dword [0x5eaaa0], ebx
je 0x4549e6
mov ecx, dword [0x5f483c]
push 0x31545844
push eax
call fcn.004a4b60
mov ecx, dword [0x5e9f4c]
call fcn.00489db0
mov ecx, dword [0x5e9f4c]
push 0x3e
call fcn.00489e10
mov ecx, dword [0x5e9f50]
call fcn.00489db0
mov ecx, dword [0x5e9f50]
push 9
call fcn.00489e10
mov ecx, dword [0x5e9f48]
call fcn.00489db0
mov ecx, dword [0x5e9f48]
push 0x18
call fcn.00489e10
xor ecx, ecx
mov eax, 0xffff
mov word [0x6a30b0], ax
xor eax, eax
mov word [0x1a82f70], cx
mov word [0x5eaaa4], cx
mov word [0x633da0], cx
movzx ecx, ax
mov word [0x6a44bc], ax
mov eax, ecx
xor edx, edx
shl ecx, 0x10
or eax, ecx
mov edi, 1
mov dword [0x526718], 4
mov dword [0x52690c], edi
mov dword [0x6a42c4], ebx
mov dword [0x5e8e28], ebx
mov dword [0x1a3b9fc], ebx
mov dword [0x5e8e24], ebx
mov dword [0x1a2e65c], ebx
mov dword [0x63ddd4], ebx
mov dword [0x1a3c7f4], ebx
mov dword [0x41ebcfc], 0xffff
mov dword [0x1a38394], esi
mov dword [0x5f3d5c], ebx
mov dword [0x6a5db4], ebx
mov dword [0x64400c], ebx
mov dword [0x6a437c], ebx
mov dword [0x5f4030], ebx
mov dword [0x631f64], 7
mov dword [0x5e896c], ebx
mov dword [0x6a5df4], ebx
mov dword [0x6a44d8], ebx
mov dword [0x1a39234], ebx
mov byte [0x53b0b3], bl
mov dword [0x1a3ba00], esi
mov dword [0x41ec0a0], esi
mov word [0x633c80], dx
mov dword [0x6a4150], ebx
mov dword [0x5e8968], ebx
mov dword [0x6a5da0], ebx
mov dword [0x643dd8], ebx
mov dword [0x41ec348], ebx
mov dword [0x1a38da0], ebx
mov dword [0x633a7c], ebx
mov dword [0x1a3ba14], esi
mov dword [0x6a5de0], esi
mov dword [0x633d00], ebx
mov dword [0x5ea848], ebx
mov word [0x53b0b0], dx
mov dword [0x1a81dc4], ebx
mov dword [0x539dd0], ebx
mov dword [0x1a82f50], ebx
mov dword [0x1a82f54], ebx
mov dword [0x1a82f58], ebx
mov dword [0x53b148], eax
mov dword [0x53b14c], eax
mov dword [0x53b150], eax
mov dword [0x53b154], eax
mov dword [0x53b158], eax
mov dword [0x53b15c], eax
mov dword [0x53b160], eax
mov dword [0x53b164], eax
mov dword [0x53b168], eax
mov dword [0x53b16c], eax
fld dword [0x4e6220]
mov dword [0x53b170], eax
fstp dword [0x1a83a44]
mov dword [0x53b174], eax
fldz
mov dword [0x53b178], eax
fst dword [ebp - 0x130]
mov dword [0x53b17c], eax
mov edx, dword [ebp - 0x130]
fst dword [ebp - 0x12c]
mov eax, esi
fst dword [ebp - 0x128]
mov ecx, dword [ebp - 0x128]
fst dword [ebp - 0x130]
fld1
mov dword [0x41ebcb8], eax
mov dword [0x41ebcbc], eax
mov dword [0x41ebcc0], eax
mov dword [0x41ebcc4], eax
mov dword [0x41ebcc8], eax
mov dword [0x41ebccc], eax
mov dword [0x41ebcd0], eax
mov dword [0x41ebcd4], eax
mov dword [0x41ebcd8], eax
mov dword [0x41ebcdc], eax
mov dword [0x41ebce0], eax
mov dword [0x41ebce4], eax
mov eax, dword [ebp - 0x12c]
fst dword [ebp - 0x12c]
fxch st(1)
mov dword [0x4226a18], edx
mov edx, dword [ebp - 0x130]
fst dword [ebp - 0x128]
mov dword [0x4226a20], ecx
fxch st(1)
mov ecx, dword [ebp - 0x128]
fstp dword [ebp - 0x130]
mov dword [0x4226a1c], eax
mov eax, dword [ebp - 0x12c]
fst dword [ebp - 0x12c]
mov dword [0x4226a2c], ecx
fstp dword [ebp - 0x128]
mov ecx, dword [ebp - 0x128]
push 0x41ed52c
mov dword [0x4226a24], edx
mov edx, dword [ebp - 0x130]
mov dword [0x4226a28], eax
mov eax, dword [ebp - 0x12c]
push 0x4226a24
mov dword [0x41ed534], ecx
mov ecx, dword [0x41ec37c]
push 0x4226a18
mov dword [0x56806c], esi
mov dword [0x568070], esi
mov dword [0x568074], esi
mov dword [0x568078], esi
mov dword [0x56807c], esi
mov dword [0x568080], esi
mov dword [0x568084], esi
mov dword [0x568088], esi
mov dword [0x56808c], esi
mov dword [0x568090], esi
mov dword [0x640074], ebx
mov dword [0x53b44c], ebx
mov dword [0x41ed52c], edx
mov dword [0x41ed530], eax
call fcn.0047f260
mov ecx, dword [0x41ec37c]
push 0x421ce20
push 0x421cde0
call fcn.0047f310
mov eax, dword [0x633870]
mov edx, dword [eax]
push 2
push 7
push eax
mov eax, dword [edx + 0xc8]
call eax
mov eax, dword [0x633870]
mov ecx, dword [eax]
push edi
mov edx, dword [ecx + 0xc8]
push 0x1b
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push edi
push 0x16
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push ebx
push 0xb
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 4
push edi
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 2
push 2
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push ebx
push 3
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 4
push 4
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 2
push 5
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push ebx
push 6
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 0x4226948
push 0x100
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 2
push 0x11
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 3
push 0x10
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x130]
push 0x144
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 5
push 0x13
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 6
push 0x14
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xa8]
push 0x1a7d860
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 0x606060
push 0x8b
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push ebx
push 0x89
push eax
call edx
mov ecx, dword [0x5ec244]
add ecx, dword [0x1a3ba10]
push ecx
push 0x1a3c018
call fcn.004cce8a
fldz
fst dword [0x5e90d4]
add esp, 4
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c530
call fcn.00416f20
fld dword [0x4e47f4]
fst dword [0x5e90d4]
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c530
add esp, 4
call fcn.004192e0
test eax, eax
jne 0x454f41
mov dword [0x5f344c], ebx
call fcn.0047b5c0
mov edx, 0xffff
mov eax, 0x270f
mov word [0x6a307c], dx
mov word [0x5f375c], ax
mov dword [0x5256bc], 0x63
mov dword [0x526908], 0x5a
fld dword [0x4e52c8]
push ecx
fst dword [0x5e90d4]
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c530
call fcn.0040b000
push edi
call fcn.0040b010
fld dword [0x4e4918]
fst dword [0x5e90d4]
add esp, 4
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c530
call fcn.00450220
fldz
push 0x50
fst dword [0x6a30b4]
fst dword [0x6444a4]
push ebx
fst dword [0x1a3c800]
push 0x633970
fstp dword [0x6a4148]
mov dword [0x6a5568], edi
mov dword [0x6a556c], ebx
mov dword [0x6a5570], ebx
mov dword [0x6a5574], ebx
mov dword [0x6a31fc], ebx
mov dword [0x5659b8], ebx
mov dword [0x5ea9dc], ebx
mov dword [0x631d54], ebx
mov dword [0x568958], ebx
mov dword [0x5e9f5c], ebx
mov dword [0x6a44dc], ebx
mov dword [0x6a4158], ebx
mov dword [0x633874], ebx
mov dword [0x1a38da4], ebx
mov dword [0x41ebdf0], ebx
mov dword [0x41ebcf0], ebx
mov dword [0x632100], ebx
mov dword [0x6a5544], ebx
mov dword [0x1a3ba08], ebx
mov dword [0x6a378c], ebx
mov dword [0x6a438c], ebx
mov dword [0x1a38324], ebx
mov dword [0x5e8e20], ebx
mov dword [0x5f0630], ebx
mov dword [0x41ebcf8], ebx
mov dword [0x6a30d0], 0x19
call fcn.004cce10
push 0xf0
push ebx
push 0x53b7e0
mov dword [0x1a39228], ebx
call fcn.004cce10
add esp, 0x1c
mov dword [0x1a81dc4], ebx
mov eax, 0x5ea510
mov dword [eax - 0x70], ebx
mov dword [eax], ebx
mov dword [eax + 0x70], ebx
add eax, 4
cmp eax, 0x5ea580
jl 0x455074
push 0x70
push ebx
push 0x1a391b8
mov dword [0x539dd0], ebx
mov dword [0x1a82f50], ebx
mov dword [0x1a82f54], ebx
mov dword [0x1a82f58], ebx
mov dword [0x5659d0], ebx
mov dword [0x5659d4], ebx
mov dword [0x5659d8], ebx
mov dword [0x5659dc], ebx
mov dword [0x5659e0], ebx
mov dword [0x5659e4], ebx
mov dword [0x5659e8], ebx
mov dword [0x5659ec], ebx
mov dword [0x5659f0], ebx
mov dword [0x5659f4], ebx
mov dword [0x5659f8], ebx
mov dword [0x5659fc], ebx
mov dword [0x565a00], ebx
mov dword [0x565a04], ebx
mov dword [0x565a08], ebx
mov dword [0x565a0c], ebx
mov dword [0x565a10], ebx
mov dword [0x565a14], ebx
mov dword [0x565a18], ebx
mov dword [0x565a1c], ebx
mov dword [0x565a20], ebx
mov dword [0x565a24], ebx
mov dword [0x565a28], ebx
mov dword [0x565a2c], ebx
mov dword [0x565a30], ebx
mov dword [0x565a34], ebx
mov dword [0x565a38], ebx
mov dword [0x565a3c], ebx
call fcn.004cce10
xor ecx, ecx
push 0x190
mov word [0x41ec30c], cx
xor edx, edx
xor eax, eax
push ebx
mov ecx, 0x32
mov edi, 0x41ebdf8
push 0x6a53a0
mov dword [0x640074], ebx
mov dword [0x53b44c], ebx
mov word [0x1a82014], dx
rep stosd dword es:[edi], eax
call fcn.004cce10
push 0x190
xor eax, eax
push ebx
mov ecx, 0x32
mov edi, 0x6a3610
push 0x41ec0b0
rep stosd dword es:[edi], eax
call fcn.004cce10
push 0x190
push ebx
push 0x6334d0
call fcn.004cce10
push 0x190
push ebx
push 0x6a6210
call fcn.004cce10
push 0x190
push ebx
push 0x5f2fa8
call fcn.004cce10
add esp, 0x48
push 0x190
push ebx
push 0x1a3ba18
call fcn.004cce10
mov dword [0x6a5dbc], ebx
call fcn.00404b40
push 0x458
push ebx
push 0x1a3bbb8
call fcn.004cce10
push 0x200
push ebx
push 0x643e00
call fcn.004cce10
fld dword [0x4e4cf4]
mov eax, esi
fst dword [0x5e90d4]
mov ecx, 0x39
fstp dword [0x64403c]
mov edi, 0x1a2e4c0
rep stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x39
mov edi, 0x1a82f78
rep stosd dword es:[edi], eax
mov ecx, dword [0x5ec248]
add ecx, dword [0x1a3ba10]
mov dword [0x631e30], ebx
push ecx
push 0x1a3c018
mov dword [0x539ddc], ebx
mov dword [0x1a7d82c], ebx
mov dword [0x6424d0], ebx
call fcn.004cce8a
add esp, 0x28
fld dword [0x5e90d4]
fstp dword [esp]
call fcn.0046c530
add esp, 4
call fcn.0047c0a0
mov esi, 1
mov dword [0x41ebcf4], ebx
mov dword [0x6a44b0], ebx
mov dword [0x631d48], ebx
mov dword [0x6a5568], esi
call fcn.0043be30
mov dword [0x524d44], esi
mov dword [0x526908], 0x47
mov dword [0x41ec310], esi
jmp 0x45702a
cmp eax, 0x47
jne 0x455d0e
fld dword [0x5e90d4]
fld dword [0x64403c]
fld1
fsub st(1), st(0)
fxch st(1)
fcomp st(2)
fnstsw ax
test ah, 1
jne 0x455302
faddp st(1)
fstp dword [0x5e90d4]
fld dword [0x5e90d4]
jmp 0x455304
fstp st(0)
push ecx
fstp dword [esp]
call fcn.0046c530
mov edx, 0xffff
add esp, 4
mov eax, 1
cmp word [0x6a307c], dx
jne 0x455325
xor eax, eax
mov esi, dword [0x6a5568]
mov edx, dword [0x6a5570]
mov edi, dword [0x6a556c]
cmp esi, 3
jl 0x455357
cmp edi, 3
jl 0x455357
cmp edx, 3
jl 0x455357
cmp dword [0x6a5574], 3
jl 0x455357
cmp eax, ebx
jne 0x455575
mov ecx, dword [0x631d48]
inc ecx
mov dword [0x631d48], ecx
cmp ecx, 0xe10
jle 0x4553b3
mov dword [0x5f344c], ebx
call fcn.0047b5c0
mov dword [0x5256bc], 4
mov edx, dword [0x631f6c]
mov ecx, 0x270f
mov eax, 0xffff
mov word [0x5f375c], cx
mov word [0x6a307c], ax
mov dword [0x526908], 0x29
mov dword [0x6423b0], edx
jmp 0x45702a
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
cmp esi, 1
jne 0x45540f
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 1
push 5
lea eax, [ebp - 0x24]
push eax
call fcn.0047b750
add esp, 8
call fcn.0047b7c0
mov dword [0x6a44b0], ebx
mov dword [0x6a5568], 2
mov dword [0x6a4154], ebx
mov dword [0x41ebcf4], ebx
jmp 0x45702a
cmp edi, 1
jne 0x455453
lea ecx, [ebp - 0x24]
push 5
push ecx
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 2
call fcn.0047b750
add esp, 8
call fcn.0047b7c0
mov dword [0x6a44b0], ebx
mov dword [0x6a556c], 2
mov dword [0x6a4154], ebx
mov dword [0x41ebcf4], ebx
jmp 0x45702a
cmp edx, 1
jne 0x455497
lea edx, [ebp - 0x24]
push 5
push edx
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 3
call fcn.0047b750
add esp, 8
call fcn.0047b7c0
mov dword [0x6a44b0], ebx
mov dword [0x6a5570], 2
mov dword [0x6a4154], ebx
mov dword [0x41ebcf4], ebx
jmp 0x45702a
cmp dword [0x6a5574], 1
jne 0x4554df
lea eax, [ebp - 0x24]
push 5
push eax
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 4
call fcn.0047b750
add esp, 8
call fcn.0047b7c0
mov dword [0x6a44b0], ebx
mov dword [0x6a5574], 2
mov dword [0x6a4154], ebx
mov dword [0x41ebcf4], ebx
jmp 0x45702a
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
add edx, edx
add edx, edx
sub ecx, edx
jne 0x45702a
mov eax, 2
cmp esi, eax
jne 0x455520
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 1
push 5
jmp 0x456507
cmp edi, eax
jne 0x455539
push 5
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], al
push ecx
jmp 0x45650b
cmp dword [0x6a5570], eax
jne 0x455557
push 5
lea edx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 3
push edx
jmp 0x45650b
cmp dword [0x6a5574], eax
jne 0x45702a
mov dword [ebp - 0x24], 0x2a
mov byte [ebp - 0x20], 4
push 5
jmp 0x456507
lea ecx, [ebp - 0x24]
push 4
mov dword [ebp - 0x24], ebx
push ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x24], 0x2c
call fcn.0047b750
call fcn.0047b7c0
fld dword [0x4e5118]
add esp, 4
fstp dword [esp]
mov dword [0x6a44b0], ebx
call fcn.0046c530
mov ecx, dword [0x6a30b8]
add esp, 4
call fcn.00487bb0
fldz
mov eax, 1
fst dword [0x5e94a4]
mov dword [0x5f344c], eax
fstp dword [0x6a5008]
mov dword [0x52690c], eax
mov eax, 0x63
mov edi, 0xffff
xor edx, edx
mov dword [0x5f3380], eax
mov dword [0x539bc0], eax
mov dword [0x1a2e674], eax
mov dword [0x6a42b8], eax
xor eax, eax
or esi, 0xffffffff
mov word [0x1a3bbb4], dx
xor ecx, ecx
mov edx, edi
mov word [0x6a44b4], ax
mov dword [0x526718], 4
mov dword [0x643dd8], ebx
mov dword [0x633c8c], ebx
mov dword [0x5f3d54], ebx
mov dword [0x6a42c4], ebx
mov dword [0x5e8e28], ebx
mov dword [0x1a3b9fc], ebx
mov dword [0x5e8e24], ebx
mov dword [0x1a2e65c], ebx
mov dword [0x63ddd4], ebx
mov dword [0x1a3c7f4], ebx
mov dword [0x41ebcfc], edi
mov dword [0x6a3894], edi
mov dword [0x632104], ebx
mov dword [0x1a38394], esi
mov dword [0x1a3c140], ebx
mov dword [0x1a83064], ebx
mov dword [0x6a64bc], ebx
mov dword [0x539bbc], ebx
mov dword [0x5e896c], ebx
mov dword [0x1a3c138], ebx
mov dword [0x6a4150], ebx
mov dword [0x5e8968], ebx
mov dword [0x5eaaa8], ebx
mov dword [0x6a5000], ebx
mov dword [0x6a5da0], ebx
mov dword [0x6a500c], ebx
mov dword [0x644240], ebx
mov dword [0x5e94a0], ebx
mov dword [0x631d50], ebx
mov dword [0x6a5dec], ebx
mov dword [0x6a4d5c], ebx
mov dword [0x1a39234], ebx
mov byte [0x539bc4], bl
mov byte [0x539bc6], bl
mov byte [0x539bc5], bl
mov byte [0x53b0b3], bl
mov word [0x53b134], cx
mov word [0x6a30b0], dx
mov eax, edi
push 0xa00
mov word [0x6a64b0], ax
mov ecx, edi
mov word [0x6a64b6], ax
xor eax, eax
push ebx
push 0x6419b0
mov word [0x6a64b2], cx
mov word [0x6a64b4], dx
mov word [0x6a64b8], cx
mov word [0x5ea484], dx
mov word [0x1a3c014], ax
call fcn.004cce10
push 0x800
push ebx
push 0x5f4038
mov dword [0x5eabf8], ebx
mov dword [0x5eabfc], ebx
mov dword [0x5eac00], ebx
mov dword [0x5eac04], ebx
mov dword [0x5eac08], ebx
mov dword [0x5eac0c], ebx
mov dword [0x5eac10], ebx
mov dword [0x5eac14], ebx
mov dword [0x5eac18], ebx
mov dword [0x5eac1c], ebx
call fcn.004cce10
push 0x200
push ebx
push 0x5f2da0
call fcn.004cce10
push 0x800
push ebx
push 0x6a44e0
mov dword [0x633660], ebx
mov dword [0x1a83060], ebx
mov dword [0x631e3c], ebx
mov dword [0x6a3890], edi
mov dword [0x1a82064], ebx
mov dword [0x633cfc], ebx
call fcn.004cce10
push 0x400
push ebx
push 0x6a5df8
mov dword [0x41ec348], ebx
mov dword [0x5e9530], ebx
mov dword [0x6a5530], ebx
mov dword [0x633a7c], ebx
mov dword [0x6a44c0], ebx
call fcn.004cce10
fld1
mov dword [0x1a3ba00], esi
fstp dword [0x5e9534]
mov dword [0x41ec0a0], esi
mov dword [0x644000], esi
mov ecx, 0x11
mov esi, 0x6a5018
mov edi, 0x1a82f08
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
add esp, 0x3c
mov dword [0x5ea8f8], ebx
mov dword [0x6a4378], ebx
mov dword [0x41ec2ec], ebx
mov dword [0x41ec2f0], ebx
mov dword [0x41ec2f4], ebx
mov dword [0x41ec2f8], ebx
mov dword [0x41ec2fc], ebx
mov dword [0x41ec300], ebx
mov dword [0x1a38330], ebx
mov dword [0x1a38334], ebx
mov dword [0x1a38338], ebx
mov dword [0x1a3833c], ebx
mov dword [0x1a38340], ebx
mov dword [0x1a38344], ebx
mov dword [0x5e9f60], ebx
mov dword [0x5e9f64], ebx
mov dword [0x5e9f68], ebx
mov dword [0x6a5df4], ebx
mov dword [0x6a44d8], ebx
mov dword [0x641234], ebx
call esi
mov dword [0x568960], eax
mov dword [0x63ddd0], ebx
mov dword [0x1a3b3f8], ebx
mov dword [0x1a3c808], ebx
call esi
fld1
fstp dword [0x5f2fa0]
mov esi, 1
fldz
mov dword [0x640048], eax
fstp dword [0x5f2fa4]
mov dword [0x1a38320], eax
fld dword [0x4e6300]
mov dword [0x631f7c], esi
fstp dword [0x1a820f0]
call fcn.0046fd40
call fcn.004711a0
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x130]
push 0x152
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 0xc0c0c0
push 0x8b
push eax
call edx
mov ecx, dword [0x5f483c]
push 3
call fcn.0049dea0
mov eax, dword [0x1a2e664]
add eax, dword [0x6a42a8]
push eax
call fcn.0040cf70
add esp, 4
cmp dword [0x6424d0], esi
jne 0x455972
push 0x34
call fcn.00470df0
add esp, 4
movzx edx, word [0x5f375c]
mov eax, dword [0x56895c]
imul edx, edx, 0x108c
fld dword [eax + edx + 0xb8]
fstp dword [ebp - 0x154]
mov ecx, dword [ebp - 0x154]
fld dword [eax + edx + 0xbc]
mov dword [ebp - 0x130], ecx
fstp dword [ebp - 0x150]
mov edx, dword [ebp - 0x150]
fld dword [0x4e4820]
mov dword [ebp - 0x12c], edx
lea ecx, [ebp - 0x13c]
fstp dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
push ecx
mov dword [ebp - 0x128], eax
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x168]
push ecx
mov ecx, dword [0x53b1ec]
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x130]
push eax
call fcn.0048df40
fld dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x168]
sub esp, 8
fstp dword [esp + 4]
fld dword [ebp - 0x164]
fstp dword [esp]
push ecx
mov ecx, dword [0x53b1ec]
push edx
call fcn.00497ef0
movzx ecx, word [0x5f375c]
mov edx, dword [0x56895c]
imul ecx, ecx, 0x108c
mov dword [ecx + edx + 0x214], eax
movzx eax, word [0x5f375c]
fld dword [ebp - 0x138]
fsubr qword [0x4e4c18]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
fstp dword [ebp - 0x134]
fld dword [ebp - 0x134]
fstp dword [eax + ecx + 0xc0]
call fcn.00416a30
xor edi, edi
cmp dword [0x1a38da0], ebx
jle 0x455c3b
fld dword [0x4e4820]
mov esi, 0x5f345a
fstp dword [ebp - 0x158]
jmp 0x455ab0
movzx edx, word [esi - 2]
fld qword [0x4e4528]
fld qword [0x4e4618]
movzx eax, word [esi]
mov ecx, dword [0x53b9dc]
mov dword [ebp - 0x134], edx
sub ecx, eax
fild dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
fld dword [0x41ec2e8]
mov dword [ebp - 0x134], eax
fld st(0)
fmul st(2)
fadd dword [0x568954]
fsub st(4)
fstp dword [edi*4 + 0x53b450]
fild dword [ebp - 0x14c]
jns 0x455b0a
fadd dword [0x4e4558]
fmulp st(1)
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x128], ecx
mov ecx, dword [0x53b1ec]
fadd dword [0x5e94ac]
fsubrp st(3)
fxch st(2)
fstp dword [edi*4 + 0x6a2d20]
fadd st(1), st(0)
fxch st(1)
fstp dword [ebp - 0x160]
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x130], edx
fisubr dword [ebp - 0x134]
lea edx, [ebp - 0x130]
push edx
fstp dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x12c], eax
call fcn.0048d3d0
fstp dword [ebp - 0x138]
fld dword [ebp - 0x138]
movzx eax, word [esi - 2]
fsubr qword [0x4e4838]
movzx ecx, word [esi]
fstp dword [ebp - 0x134]
push 0xe8
fld dword [ebp - 0x134]
mov dword [ebp - 0x134], eax
fst dword [edi*4 + 0x53b8d0]
fild dword [ebp - 0x134]
mov dword [ebp - 0x134], ecx
fstp dword [ebp - 0x148]
mov edx, dword [ebp - 0x148]
fild dword [ebp - 0x134]
mov dword [ebp - 0x130], edx
lea edx, [ebp - 0x130]
push edx
fstp dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x12c], eax
fadd qword [0x4e4528]
fstp dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x128], ecx
call fcn.0041a0c0
add esp, 8
cmp eax, 0xffffffff
jle 0x455c2b
imul eax, eax, 0x5e8
mov ecx, 0x270f
mov edx, ecx
mov word [eax + 0x41ed720], cx
mov word [eax + 0x41ed722], dx
mov word [eax + 0x41ed724], cx
mov word [eax + 0x41ed726], dx
inc edi
add esi, 0xc
cmp edi, dword [0x1a38da0]
jl 0x455ab0
mov ecx, dword [0x526800]
mov edx, dword [0x5256e8]
shl ecx, 0x10
add ecx, dword [0x526728]
xor eax, eax
push ecx
push ebx
push 0x200
push edx
mov word [0x41eb888], ax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x631f6c]
mov dword [0x6423b0], eax
mov dword [0x633a6c], 0x5a
call fcn.0046c940
movzx ecx, word [0x5f375c]
mov edx, dword [0x56895c]
imul ecx, ecx, 0x108c
mov dword [0x5256bc], 7
mov dword [0x526908], 0x50
mov al, byte [ecx + edx + 0xb]
cmp al, 1
jne 0x455ce2
mov ecx, dword [0x5ed36c]
add ecx, dword [0x1a3ba10]
push 5
push ecx
call fcn.0040d780
mov ecx, dword [0x41ec240]
add esp, 8
cmp ecx, ebx
je 0x45702a
push str.ac1_newchar
call fcn.0046d280
jmp 0x45702a
cmp al, 0x1e
jae 0x45702a
push 0x11
call fcn.0043b9c0
mov edx, dword [eax*4 + 0x5ed370]
add edx, dword [0x1a3ba10]
push 5
push edx
call fcn.0040d780
add esp, 0xc
jmp 0x45702a
cmp eax, 0x48
jne 0x456409
mov dword [0x524d44], ebx
call fcn.0043b870
mov ecx, dword [0x53b1ec]
mov dword [0x53b418], esi
call fcn.0048b130
mov ecx, dword [0x41ec420]
call fcn.004812b0
mov ecx, dword [0x6a5db8]
call fcn.0047fba0
mov ecx, dword [0x1a7d8a8]
call fcn.0049ad90
mov ecx, dword [0x5f483c]
push 2
call fcn.0049dea0
mov ecx, dword [0x5f483c]
push 3
call fcn.0049dea0
xor edi, edi
mov eax, dword [edi + 0x568098]
mov dword [edi + 0x5e8970], esi
mov dword [edi + 0x5f3760], esi
cmp eax, ebx
je 0x455d93
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x568098], ebx
mov eax, dword [edi + 0x6a3c98]
cmp eax, ebx
je 0x455daa
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x6a3c98], ebx
add edi, 4
cmp edi, 0x4b0
jl 0x455d70
xor edi, edi
jmp 0x455dc0
mov eax, dword [edi + 0x6423c8]
mov dword [edi + 0x6a3790], esi
cmp eax, ebx
je 0x455ddd
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x6423c8], ebx
mov eax, dword [edi + 0x641138]
cmp eax, ebx
je 0x455df4
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [edi + 0x641138], ebx
add edi, 4
cmp edi, 0xf0
jl 0x455dc0
mov dword [0x644424], esi
mov dword [0x644428], esi
mov dword [0x64442c], esi
mov dword [0x644430], esi
mov dword [0x644434], esi
mov dword [0x644438], esi
mov dword [0x64443c], esi
mov dword [0x644440], esi
mov dword [0x644444], esi
mov dword [0x644448], esi
mov dword [0x64444c], esi
mov dword [0x644450], esi
mov dword [0x644454], esi
mov dword [0x6a2c94], esi
mov dword [0x6a2c98], esi
mov dword [0x6a2c9c], esi
mov dword [0x6a2ca0], esi
mov dword [0x6a2ca4], esi
xor eax, eax
lea ecx, [ecx]
mov dword [eax*4 + 0x539bc8], eax
inc eax
cmp eax, 0x40
jl 0x455e70
mov eax, esi
mov ecx, 0x39
mov edi, 0x1a2e4c0
rep stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x39
mov edi, 0x1a82f78
push 0x1432e60
rep stosd dword es:[edi], eax
mov eax, dword [0x56895c]
push ebx
push eax
call fcn.004cce10
mov ecx, dword [0x6a63a0]
push 0x2710
push ebx
push ecx
call fcn.004cce10
mov edx, dword [0x568964]
push 0x19e10
push ebx
push edx
call fcn.004cce10
mov eax, dword [0x6a3098]
push 0x4e20
push ebx
push eax
call fcn.004cce10
push 0x9a00
push ebx
push 0x421ce60
call fcn.004cce10
push 0x2f400
push ebx
push 0x41ed5d8
call fcn.004cce10
mov ecx, 0xffff
mov word [0x6a307c], cx
mov ecx, dword [0x5e9f4c]
mov edx, 0x270f
add esp, 0x48
mov word [0x5f375c], dx
mov dword [0x1a83064], ebx
mov dword [0x6a64bc], ebx
call fcn.00489db0
mov ecx, dword [0x5e9f4c]
push 0x39
call fcn.00489e10
mov ecx, dword [0x5e9f50]
call fcn.00489db0
mov ecx, dword [0x5e9f50]
push 9
call fcn.00489e10
mov ecx, dword [0x5e9f48]
call fcn.00489db0
mov ecx, dword [0x5e9f48]
push 0x18
call fcn.00489e10
xor eax, eax
xor edx, edx
mov word [0x6a44bc], dx
movzx edx, ax
mov word [0x5eaaa4], ax
mov word [0x633da0], ax
mov eax, edx
xor ecx, ecx
shl edx, 0x10
or eax, edx
mov dword [0x1a38da0], ebx
mov dword [0x633d00], ebx
mov dword [0x5ea848], ebx
mov word [0x53b0b0], cx
mov dword [0x53b148], eax
mov dword [0x53b14c], eax
mov dword [0x53b150], eax
mov dword [0x53b154], eax
mov dword [0x53b158], eax
mov dword [0x53b15c], eax
mov dword [0x53b160], eax
mov dword [0x53b164], eax
mov dword [0x53b168], eax
mov dword [0x53b16c], eax
mov dword [0x53b170], eax
mov dword [0x53b174], eax
mov dword [0x53b178], eax
mov dword [0x53b17c], eax
mov eax, esi
mov dword [0x41ebcb8], eax
mov dword [0x41ebcbc], eax
mov dword [0x41ebcc0], eax
mov dword [0x41ebcc4], eax
mov dword [0x41ebcc8], eax
mov dword [0x41ebccc], eax
mov dword [0x41ebcd0], eax
mov dword [0x41ebcd4], eax
mov dword [0x41ebcd8], eax
mov dword [0x41ebcdc], eax
mov dword [0x41ebce0], eax
mov dword [0x41ebce4], eax
mov eax, dword [0x633870]
push 2
mov dword [0x56806c], esi
mov dword [0x568070], esi
mov dword [0x568074], esi
mov dword [0x568078], esi
mov dword [0x56807c], esi
mov dword [0x568080], esi
mov dword [0x568084], esi
mov dword [0x568088], esi
mov dword [0x56808c], esi
mov dword [0x568090], esi
mov dword [0x640074], ebx
mov dword [0x53b44c], ebx
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 7
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 1
push 0x1b
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 1
push 0x16
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 2
push 0x11
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 3
push 0x10
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x130]
push 0x144
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 6
push 0x14
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xa8]
push 0x1a7d860
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push 0x606060
push 0x8b
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push ebx
push 0xb
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 2
push 2
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xfc]
push 4
push 1
push ebx
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x94]
push 0x4226948
push 0x100
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xa8]
push 0x1a7d860
push eax
call edx
mov eax, dword [0x633870]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc8]
push ebx
push 0x89
push eax
call edx
push 0x190
push ebx
push 0x6334d0
call fcn.004cce10
push 0x190
push ebx
push 0x6a6210
call fcn.004cce10
push 0x190
push ebx
push 0x5f2fa8
call fcn.004cce10
push 0x190
push ebx
push 0x1a3ba18
call fcn.004cce10
mov dword [0x6a5dbc], ebx
call fcn.00404b40
fldz
fst dword [0x5e90d4]
add esp, 0x2c
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c7d0
call fcn.00416f20
fld dword [0x4e47f4]
fst dword [0x5e90d4]
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c7d0
add esp, 4
call fcn.004192e0
test eax, eax
jne 0x45627c
mov dword [0x5f344c], ebx
call fcn.0047b5c0
mov eax, 0xffff
mov ecx, 0x270f
mov word [0x6a307c], ax
mov word [0x5f375c], cx
mov dword [0x5256bc], 0x63
mov dword [0x526908], 0x5a
fld dword [0x4e52c8]
push ecx
fst dword [0x5e90d4]
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c7d0
call fcn.0040b000
mov esi, 1
push esi
call fcn.0040b010
fld dword [0x4e4918]
fst dword [0x5e90d4]
add esp, 4
fst dword [0x64403c]
fstp dword [esp]
call fcn.0046c7d0
fld dword [0x4e6220]
add esp, 4
fstp dword [0x1a83a44]
push 0x41ed52c
fldz
push 0x4226a24
fst dword [ebp - 0x148]
push 0x4226a18
mov edx, dword [ebp - 0x148]
fst dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
fst dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
fst dword [ebp - 0x148]
fld1
mov dword [0x4226a18], edx
mov edx, dword [ebp - 0x148]
fst dword [ebp - 0x144]
fxch st(1)
mov dword [0x4226a20], ecx
fst dword [ebp - 0x140]
mov dword [0x4226a1c], eax
mov eax, dword [ebp - 0x144]
fxch st(1)
mov ecx, dword [ebp - 0x140]
fstp dword [ebp - 0x148]
mov dword [0x4226a2c], ecx
mov dword [0x4226a24], edx
mov edx, dword [ebp - 0x148]
fst dword [ebp - 0x144]
mov dword [0x4226a28], eax
mov eax, dword [ebp - 0x144]
fstp dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov dword [0x41ed534], ecx
mov ecx, dword [0x41ec37c]
mov dword [0x41ed52c], edx
mov dword [0x41ed530], eax
call fcn.0047f260
mov ecx, dword [0x41ec37c]
push 0x421ce20
push 0x421cde0
call fcn.0047f310
call fcn.00450220
fld dword [0x4e4cf4]
fst dword [0x5e90d4]
push ecx
fst dword [0x64403c]
mov dword [0x6424d0], ebx
fstp dword [esp]
call fcn.0046c7d0
add esp, 4
call fcn.0047c0a0
mov dword [0x41ebcf4], ebx
mov dword [0x6a44b0], ebx
mov dword [0x631d48], ebx
mov dword [0x6a5568], esi
call fcn.0043be30
mov dword [0x524d44], esi
mov dword [0x526908], 0x49
jmp 0x45702a
cmp eax, 0x49
jne 0x45702a
fld dword [0x5e90d4]
fld dword [0x64403c]
fld1
fsub st(1), st(0)
fxch st(1)
fcomp st(2)
fnstsw ax
test ah, 1
jne 0x45643d
faddp st(1)
fstp dword [0x5e90d4]
fld dword [0x5e90d4]
jmp 0x45643f
fstp st(0)
push ecx
fstp dword [esp]
call fcn.0046c7d0
mov edx, 0xffff
add esp, 4
mov eax, 1
cmp word [0x6a307c], dx
jne 0x456460
xor eax, eax
mov esi, dword [0x6a5568]
cmp dword [0x5f344c], ebx
jne 0x456473
cmp esi, 3
jl 0x45647b
cmp eax, ebx
jne 0x456523
mov ecx, dword [0x631d48]
inc ecx
mov dword [0x631d48], ecx
cmp ecx, 0xe10
jle 0x4564a6
mov dword [0x5f344c], ebx
call fcn.0047b5c0
mov dword [0x5256bc], edi
jmp 0x455381
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
cmp esi, 1
jne 0x4564d0
mov dword [ebp - 0x24], 0x2b
push edi
jmp 0x4553dd
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
add edx, edx
add edx, edx
sub ecx, edx
jne 0x45702a
cmp esi, 2
jne 0x45702a
mov dword [ebp - 0x24], 0x2b
push edi
lea eax, [ebp - 0x24]
push eax
call fcn.0047b750
add esp, 8
call fcn.0047b7c0
mov dword [0x6a44b0], ebx
jmp 0x45702a
movzx ecx, word [0x5f375c]
mov eax, dword [0x56895c]
imul ecx, ecx, 0x108c
cmp dword [ecx + eax + 0x50], 0x5f5e0ff
lea eax, [ecx + eax + 0x50]
mov edx, 1
jb 0x45654a
mov dword [eax], ebx
movzx ecx, word [0x5f375c]
mov eax, dword [0x56895c]
imul ecx, ecx, 0x108c
cmp dword [ecx + eax + 0x54], 0x5f5e0ff
lea eax, [ecx + eax + 0x54]
jbe 0x456570
mov dword [eax], 0x5f5e0ff
cmp dword [0x6a31fc], 0x5f5e0ff
jb 0x456582
mov dword [0x6a31fc], ebx
movzx ecx, word [0x5f375c]
mov eax, dword [0x56895c]
imul ecx, ecx, 0x108c
add eax, ecx
cmp byte [eax + 0xb], bl
jne 0x45659d
xor edx, edx
mov ecx, 0xea60
cmp dword [eax + 0x1c8], ecx
jbe 0x4565b0
mov dword [eax + 0x1c8], ecx
movzx eax, word [0x5f375c]
mov esi, dword [0x56895c]
imul eax, eax, 0x108c
cmp dword [eax + esi + 0x1cc], ecx
lea eax, [eax + esi + 0x1cc]
jbe 0x4565d5
mov dword [eax], ecx
movzx ecx, word [0x5f375c]
mov eax, dword [0x56895c]
imul ecx, ecx, 0x108c
lea eax, [ecx + eax + 0x1d0]
mov ecx, 0x270f
cmp word [eax], cx
jbe 0x4565fb
mov word [eax], cx
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
lea eax, [eax + ecx + 0x1d2]
mov ecx, 0x270f
cmp word [eax], cx
jbe 0x456622
mov word [eax], cx
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
lea eax, [eax + ecx + 0x1d4]
mov ecx, 0x270f
cmp word [eax], cx
jbe 0x456649
mov word [eax], cx
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
lea eax, [eax + ecx + 0x1d6]
mov ecx, 0x270f
cmp word [eax], cx
jbe 0x456670
mov word [eax], cx
mov eax, 0xc7
cmp dword [0x5659b8], eax
jle 0x456682
mov dword [0x5659b8], eax
cmp dword [0x631d54], eax
jle 0x45668f
mov dword [0x631d54], eax
cmp dword [0x5ea9dc], eax
jle 0x45669c
mov dword [0x5ea9dc], eax
cmp dword [0x568958], eax
jle 0x4566a9
mov dword [0x568958], eax
mov eax, 0xfa
cmp dword [0x5e9f5c], eax
jle 0x4566bb
mov dword [0x5e9f5c], eax
cmp dword [0x6a4158], eax
jle 0x4566c8
mov dword [0x6a4158], eax
cmp dword [0x6a44dc], eax
jle 0x4566d5
mov dword [0x6a44dc], eax
cmp dword [0x633874], eax
jle 0x4566e2
mov dword [0x633874], eax
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
cmp dword [eax + ecx + 0x1d8], 0x3e8
lea eax, [eax + ecx + 0x1d8]
jle 0x45670f
mov dword [eax], 0x3e8
mov eax, 0x2710
cmp dword [0x1a38da4], eax
jle 0x456721
mov dword [0x1a38da4], eax
cmp dword [0x41ebdf0], eax
jle 0x45672e
mov dword [0x41ebdf0], eax
cmp dword [0x41ebcf0], eax
jle 0x45673b
mov dword [0x41ebcf0], eax
cmp dword [0x632100], eax
jle 0x456748
mov dword [0x632100], eax
cmp dword [0x6a5544], eax
jle 0x456755
mov dword [0x6a5544], eax
cmp dword [0x1a3ba08], eax
jle 0x456762
mov dword [0x1a3ba08], eax
cmp dword [0x6a378c], eax
jle 0x45676f
mov dword [0x6a378c], eax
cmp dword [0x6a438c], eax
jle 0x45677c
mov dword [0x6a438c], eax
mov eax, 0x1388
cmp dword [0x1a38324], eax
jle 0x45678e
mov dword [0x1a38324], eax
cmp dword [0x5e8e20], eax
jle 0x45679b
mov dword [0x5e8e20], eax
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
cmp byte [eax + ecx + 0xe], 0x40
ja 0x4567b9
cmp edx, ebx
jne 0x456801
mov edx, 0xffff
mov eax, 0x270f
mov word [0x6a307c], dx
mov word [0x5f375c], ax
mov dword [0x6a5568], 1
mov dword [0x6a556c], ebx
mov dword [0x6a5570], ebx
mov dword [0x6a5574], ebx
mov dword [0x5f344c], ebx
mov dword [0x526908], 0x47
jmp 0x45702a
lea ecx, [ebp - 0x24]
push 4
mov dword [ebp - 0x24], ebx
push ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x24], 0x2c
call fcn.0047b750
call fcn.0047b7c0
fld dword [0x4e5118]
add esp, 4
fstp dword [esp]
mov dword [0x6a44b0], ebx
call fcn.0046c7d0
mov ecx, dword [0x6a30b8]
add esp, 4
call fcn.00487bb0
fldz
mov eax, 1
fst dword [0x5e94a4]
mov dword [0x5f344c], eax
fstp dword [0x6a5008]
mov dword [0x52690c], eax
mov eax, 0x63
xor edx, edx
mov dword [0x526718], edi
mov edi, 0xffff
mov dword [0x5f3380], eax
mov dword [0x539bc0], eax
mov dword [0x1a2e674], eax
mov dword [0x6a42b8], eax
xor eax, eax
or esi, 0xffffffff
mov word [0x1a3bbb4], dx
xor ecx, ecx
mov edx, edi
mov word [0x6a44b4], ax
mov dword [0x643dd8], ebx
mov dword [0x633c8c], ebx
mov dword [0x5f3d54], ebx
mov dword [0x6a42c4], ebx
mov dword [0x5e8e28], ebx
mov dword [0x1a3b9fc], ebx
mov dword [0x5e8e24], ebx
mov dword [0x1a2e65c], ebx
mov dword [0x63ddd4], ebx
mov dword [0x1a3c7f4], ebx
mov dword [0x41ebcfc], edi
mov dword [0x6a3894], edi
mov dword [0x632104], ebx
mov dword [0x1a38394], esi
mov dword [0x1a3c140], ebx
mov dword [0x1a83064], ebx
mov dword [0x6a64bc], ebx
mov dword [0x539bbc], ebx
mov dword [0x5e896c], ebx
mov dword [0x1a3c138], ebx
mov dword [0x6a4150], ebx
mov dword [0x5e8968], ebx
mov dword [0x5eaaa8], ebx
mov dword [0x6a5000], ebx
mov dword [0x6a5da0], ebx
mov dword [0x6a500c], ebx
mov dword [0x644240], ebx
mov dword [0x5e94a0], ebx
mov dword [0x631d50], ebx
mov dword [0x6a5dec], ebx
mov dword [0x6a4d5c], ebx
mov dword [0x1a39234], ebx
mov byte [0x539bc4], bl
mov byte [0x539bc6], bl
mov byte [0x539bc5], bl
mov byte [0x53b0b3], bl
mov word [0x53b134], cx
mov word [0x6a30b0], dx
mov eax, edi
push 0xa00
mov word [0x6a64b0], ax
mov ecx, edi
mov word [0x6a64b6], ax
xor eax, eax
push ebx
push 0x6419b0
mov word [0x6a64b2], cx
mov word [0x6a64b4], dx
mov word [0x6a64b8], cx
mov word [0x5ea484], dx
mov word [0x1a3c014], ax
call fcn.004cce10
push 0x800
push ebx
push 0x5f4038
mov dword [0x5eabf8], ebx
mov dword [0x5eabfc], ebx
mov dword [0x5eac00], ebx
mov dword [0x5eac04], ebx
mov dword [0x5eac08], ebx
mov dword [0x5eac0c], ebx
mov dword [0x5eac10], ebx
mov dword [0x5eac14], ebx
mov dword [0x5eac18], ebx
mov dword [0x5eac1c], ebx
call fcn.004cce10
push 0x200
push ebx
push 0x5f2da0
call fcn.004cce10
push 0x800
push ebx
push 0x6a44e0
mov dword [0x633660], ebx
mov dword [0x1a83060], ebx
mov dword [0x631e3c], ebx
mov dword [0x6a3890], edi
mov dword [0x1a82064], ebx
mov dword [0x633cfc], ebx
call fcn.004cce10
push 0x400
push ebx
push 0x6a5df8
mov dword [0x41ec348], ebx
mov dword [0x5e9530], ebx
mov dword [0x6a5530], ebx
mov dword [0x633a7c], ebx
mov dword [0x6a44c0], ebx
call fcn.004cce10
fld1
mov dword [0x1a3ba00], esi
fstp dword [0x5e9534]
mov dword [0x41ec0a0], esi
mov dword [0x644000], esi
mov ecx, 0x11
mov esi, 0x6a5018
mov edi, 0x1a82f08
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
add esp, 0x3c
mov dword [0x5ea8f8], ebx
mov dword [0x6a4378], ebx
mov dword [0x41ec2ec], ebx
mov dword [0x41ec2f0], ebx
mov dword [0x41ec2f4], ebx
mov dword [0x41ec2f8], ebx
mov dword [0x41ec2fc], ebx
mov dword [0x41ec300], ebx
mov dword [0x1a38330], ebx
mov dword [0x1a38334], ebx
mov dword [0x1a38338], ebx
mov dword [0x1a3833c], ebx
mov dword [0x1a38340], ebx
mov dword [0x1a38344], ebx
mov dword [0x5e9f60], ebx
mov dword [0x5e9f64], ebx
mov dword [0x5e9f68], ebx
mov dword [0x6a5df4], ebx
mov dword [0x6a44d8], ebx
mov dword [0x641234], ebx
call esi
mov dword [0x568960], eax
mov dword [0x63ddd0], ebx
mov dword [0x1a3b3f8], ebx
mov dword [0x1a3c808], ebx
call esi
fld1
fstp dword [0x5f2fa0]
mov esi, 1
fldz
mov dword [0x640048], eax
fstp dword [0x5f2fa4]
mov dword [0x1a38320], eax
fld dword [0x4e6300]
mov dword [0x631f7c], esi
fstp dword [0x1a820f0]
call fcn.0046fd40
call fcn.004711a0
mov ecx, dword [0x5f483c]
push 3
call fcn.0049dea0
mov ecx, dword [0x1a2e664]
add ecx, dword [0x6a42a8]
push ecx
call fcn.0040cf70
add esp, 4
cmp dword [0x6424d0], esi
jne 0x456bcc
push 0x34
call fcn.00470df0
add esp, 4
movzx eax, word [0x5f375c]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
fld dword [eax + ecx + 0xb8]
fstp dword [ebp - 0x148]
mov edx, dword [ebp - 0x148]
fld dword [eax + ecx + 0xbc]
mov dword [ebp - 0x130], edx
fstp dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
fld dword [0x4e4820]
mov dword [ebp - 0x12c], eax
lea edx, [ebp - 0x134]
fstp dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
push edx
mov dword [ebp - 0x128], ecx
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x16c]
push ecx
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x130]
push ecx
mov ecx, dword [0x53b1ec]
call fcn.0048df40
fld dword [ebp - 0x134]
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x164]
mov ecx, dword [0x53b1ec]
sub esp, 8
fstp dword [esp + 4]
fld dword [ebp - 0x168]
fstp dword [esp]
push edx
push eax
call fcn.00497ef0
movzx ecx, word [0x5f375c]
mov edx, dword [0x56895c]
imul ecx, ecx, 0x108c
mov dword [ecx + edx + 0x214], eax
movzx eax, word [0x5f375c]
fld dword [ebp - 0x138]
fsubr qword [0x4e4c18]
mov ecx, dword [0x56895c]
imul eax, eax, 0x108c
fstp dword [ebp - 0x13c]
fld dword [ebp - 0x13c]
fstp dword [eax + ecx + 0xc0]
call fcn.00416a30
push 0x2f400
push ebx
push 0x41ed5d8
call fcn.004cce10
add esp, 0xc
xor edi, edi
cmp dword [0x1a38da0], ebx
jle 0x456e9b
fld dword [0x4e4820]
mov esi, 0x5f345a
fstp dword [ebp - 0x140]
movzx edx, word [esi - 2]
fld qword [0x4e4528]
fld qword [0x4e4618]
movzx eax, word [esi]
mov ecx, dword [0x53b9dc]
mov dword [ebp - 0x13c], edx
sub ecx, eax
fild dword [ebp - 0x13c]
mov dword [ebp - 0x14c], ecx
fld dword [0x41ec2e8]
mov dword [ebp - 0x13c], eax
fld st(0)
fmul st(2)
fadd dword [0x568954]
fsub st(4)
fstp dword [edi*4 + 0x53b450]
fild dword [ebp - 0x14c]
jns 0x456d6a
fadd dword [0x4e4558]
fmulp st(1)
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x128], ecx
mov ecx, dword [0x53b1ec]
fadd dword [0x5e94ac]
fsubrp st(3)
fxch st(2)
fstp dword [edi*4 + 0x6a2d20]
fadd st(1), st(0)
fxch st(1)
fstp dword [ebp - 0x148]
mov edx, dword [ebp - 0x148]
mov dword [ebp - 0x130], edx
fisubr dword [ebp - 0x13c]
lea edx, [ebp - 0x130]
push edx
fstp dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x12c], eax
call fcn.0048d3d0
fstp dword [ebp - 0x138]
fld dword [ebp - 0x138]
movzx eax, word [esi - 2]
fsubr qword [0x4e4838]
movzx ecx, word [esi]
fstp dword [ebp - 0x13c]
push 0xe8
fld dword [ebp - 0x13c]
mov dword [ebp - 0x13c], eax
fst dword [edi*4 + 0x53b8d0]
fild dword [ebp - 0x13c]
mov dword [ebp - 0x13c], ecx
fstp dword [ebp - 0x160]
mov edx, dword [ebp - 0x160]
fild dword [ebp - 0x13c]
mov dword [ebp - 0x130], edx
lea edx, [ebp - 0x130]
push edx
fstp dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x12c], eax
fadd qword [0x4e4528]
fstp dword [ebp - 0x158]
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x128], ecx
call fcn.0041a0c0
add esp, 8
cmp eax, 0xffffffff
jle 0x456e8b
imul eax, eax, 0x5e8
mov ecx, 0x270f
mov edx, ecx
mov word [eax + 0x41ed720], cx
mov word [eax + 0x41ed722], dx
mov word [eax + 0x41ed724], cx
mov word [eax + 0x41ed726], dx
inc edi
add esi, 0xc
cmp edi, dword [0x1a38da0]
jl 0x456d10
mov ecx, dword [0x526800]
mov edx, dword [0x5256e8]
shl ecx, 0x10
add ecx, dword [0x526728]
xor eax, eax
push ecx
push ebx
push 0x200
push edx
mov word [0x41eb888], ax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [0x631f6c]
mov dword [0x6423b0], eax
mov dword [0x633a6c], 0x5a
mov dword [0x5256bc], 7
mov dword [0x526908], 0x50
jmp 0x45702a
push esi
mov dword [0x5f344c], ebx
call fcn.0040cf70
mov ecx, dword [0x5e9f40]
add esp, 4
call fcn.00489db0
cmp dword [0x6424d0], ebx
jne 0x456f24
mov edx, dword [0x5ec230]
add edx, dword [0x1a3ba10]
push edx
jmp 0x456f33
mov dword [0x6424d0], 1
push 0x6a3200
push 0x1a38da8
call fcn.004cce8a
add esp, 8
push 1
call fcn.00450f30
mov eax, dword [0x631f6c]
add esp, 4
mov dword [0x1a3b3f8], 0x104
mov dword [0x5256bc], edi
mov dword [0x526908], 0x33
mov dword [0x6423b0], eax
jmp 0x45702a
cmp eax, 0x63
jne 0x45702a
cmp dword [0x526908], 0x5a
jne 0x45702a
mov ecx, dword [0x5f0638]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [0x5e8e2c]
push ebx
push ebx
push 0x40a
push edx
call dword [sym.imp.USER32.dll_PostThreadMessageA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x5f4cb0]
push 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x456fdb
mov ecx, dword [0x5f4cb0]
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edx, dword [0x5f0638]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
mov dword [0x5f0638], ebx
call fcn.0040cf70
mov ecx, dword [0x5e9f7c]
add esp, 4
cmp ecx, ebx
je 0x457006
call fcn.0046d510
call fcn.0047bae0
call fcn.00450270
mov eax, dword [0x5256e8]
push ebx
push ebx
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [0x526908], 0x5b
mov ecx, dword [0x526838]
mov eax, dword [0x526728]
lea edx, [eax + ecx]
mov ecx, dword [0x526800]
mov dword [ebp - 0x134], edx
fild dword [ebp - 0x134]
fld qword [0x4e4620]
mov edx, dword [0x526918]
add edx, ecx
fmul st(1), st(0)
mov dword [ebp - 0x134], edx
fxch st(1)
mov dword [0x526838], eax
mov dword [0x526918], ecx
fstp dword [0x6a4388]
fimul dword [ebp - 0x134]
fstp dword [0x5f4840]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.004ccd49
mov esp, ebp
pop ebp
ret