Function at 0x4b2790
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x5c35ff
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x70a108]
xor eax, esp
mov dword [esp + 0xdc], eax
push ebp
push esi
push edi
mov eax, dword [0x70a108]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x104]
mov esi, dword [esp + 0x10c]
mov ebp, dword [esp + 0x100]
mov edi, dword [esp + 0x110]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
call fcn.00430640
push 0
lea edx, [esp + 0x30]
push edx
push 0xd5
mov ecx, 0x7197e8
mov dword [esp + 0x104], 0
call fcn.00435b40
test esi, esi
je 0x4b2834
movzx eax, word [esi + 0x1a]
test ax, ax
jne 0x4b2836
xor eax, eax
mov esi, dword [esp + 0x14]
add esi, 2
cmp dword [esp + 0x1c], 0
push esi
je 0x4b2862
lea ecx, [esp + 0x70]
test ax, ax
je 0x4b287f
movzx eax, ax
push eax
push 0x5dcb28
push ecx
call fcn.00586b40
add esp, 0x10
jmp 0x4b2899
test ax, ax
je 0x4b2887
movzx edx, ax
push edx
lea eax, [esp + 0x74]
push 0x5dcb18
push eax
call fcn.00586b40
add esp, 0x10
jmp 0x4b2899
push 0x5dcb10
push ecx
jmp 0x4b2891
push 0x5d2df0
lea edx, [esp + 0x74]
push edx
call fcn.00586b40
add esp, 0xc
mov eax, esi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b28a0
mov ecx, dword [esp + 0x10]
sub eax, edx
test ecx, ecx
je 0x4b28d2
cmp dword [ecx + 4], 0
je 0x4b28d2
push 2
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00442790
mov esi, dword [esp + 0x14]
jmp 0x4b2939
mov esi, dword [esp + 0x14]
cmp word [esi + 0xea], 0
je 0x4b28f0
push 2
push 0
push 0xff00
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b2932
cmp byte [esi + eax], 0x2b
je 0x4b2924
cmp byte [esi + eax - 1], 0x2b
je 0x4b2924
mov edx, 0x834
push 2
push 0
cmp word [esi + 0x48], dx
jne 0x4b2918
push 0xe6e826
lea eax, [esp + 0x78]
push eax
jmp 0x4b2932
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b2932
push 2
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x70]
push eax
call fcn.00586b40
add esp, 8
push 2
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
movzx eax, word [esi + 0x48]
mov edx, 0x801
cmp ax, dx
je 0x4b2a5d
mov ecx, 0x834
cmp ax, cx
je 0x4b2a5d
mov edx, 0x807
cmp ax, dx
jne 0x4b29da
push 0x96a
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.00586b40
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b2a9d
mov edx, 0x808
cmp ax, dx
jne 0x4b29eb
push 0x969
jmp 0x4b299a
mov edx, 0x809
cmp ax, dx
jne 0x4b29fc
push 0x96b
jmp 0x4b299a
mov edx, 0x80e
cmp ax, dx
jne 0x4b2a0d
push 0x940
jmp 0x4b299a
mov edx, 0x80b
cmp ax, dx
jne 0x4b2a21
push 0x950
jmp 0x4b299a
mov edx, 0x80d
cmp ax, dx
jne 0x4b2a35
push 0x951
jmp 0x4b299a
mov edx, 0x80a
cmp ax, dx
jne 0x4b2a49
push 0x952
jmp 0x4b299a
mov edx, 0x80c
cmp ax, dx
jne 0x4b2aa4
push 0x953
jmp 0x4b299a
push 0x93e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push str._s__s
push edx
call fcn.00586b40
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00442790
fldz
mov ecx, dword [esp + 0x24]
push esi
fstp dword [esp + 0x24]
push ebp
call fcn.004a87a0
movzx eax, word [esi + 0x8a]
dec eax
je 0x4b2b08
dec eax
jne 0x4b2b4f
push 0xed
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s__s
push ecx
call fcn.00586b40
add esp, 0x10
push 7
push 0
push 0xe61414
lea edx, [esp + 0x78]
push edx
jmp 0x4b2b48
push 0xec
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.00586b40
add esp, 0x10
push 7
push 0
push 0xe61414
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
cmp word [esi + 0x8c], 0
je 0x4b2bca
push 0x943
mov ecx, 0x71c268
call fcn.004d3c70
movzx edx, word [esi + 0x8c]
push eax
push edx
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00586b40
mov ecx, dword [0x71a264]
mov dx, word [ecx + 0x43c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x8c]
jae 0x4b2bb9
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b2bc3
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
cmp word [esi + 0x8e], 0
je 0x4b2c45
push 0xef
mov ecx, 0x71c268
call fcn.004d3c70
movzx edx, word [esi + 0x8e]
push eax
push edx
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00586b40
mov ecx, dword [0x71a264]
mov dx, word [ecx + 0x65c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x8e]
jae 0x4b2c34
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b2c3e
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
cmp word [esi + 0x90], 0
je 0x4b2cc0
push 0xf0
mov ecx, 0x71c268
call fcn.004d3c70
movzx edx, word [esi + 0x90]
push eax
push edx
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00586b40
mov ecx, dword [0x71a264]
mov dx, word [ecx + 0x65e]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x90]
jae 0x4b2caf
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b2cb9
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
cmp word [esi + 0x92], 0
je 0x4b2d3b
push 0xf1
mov ecx, 0x71c268
call fcn.004d3c70
movzx edx, word [esi + 0x92]
push eax
push edx
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00586b40
mov ecx, dword [0x71a264]
mov dx, word [ecx + 0x660]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x92]
jae 0x4b2d2a
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b2d34
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
cmp word [esi + 0x94], 0
je 0x4b2db6
push 0xf2
mov ecx, 0x71c268
call fcn.004d3c70
movzx edx, word [esi + 0x94]
push eax
push edx
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00586b40
mov ecx, dword [0x71a264]
mov dx, word [ecx + 0x662]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x94]
jae 0x4b2da5
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b2daf
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
push 0x956
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x70]
push edx
call fcn.00586b40
add esp, 8
push 2
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00442790
test edi, edi
je 0x4b317f
cmp dword [edi], 0
je 0x4b317f
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5d0a36
mov ecx, ebp
call fcn.00442790
lea ecx, [esp + 0x4c]
call fcn.00430640
mov eax, dword [edi + 8]
mov byte [esp + 0xf8], 1
cmp eax, 1
jne 0x4b2e5b
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b2eca
push 0
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.004427a0
jmp 0x4b2eca
jbe 0x4b2eca
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004aad20
mov esi, eax
test esi, esi
je 0x4b2eca
movzx eax, word [esi + 0x46]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b2e9b
push 0
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.004427a0
movzx edx, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push edx
call fcn.004aad50
mov esi, eax
test esi, esi
je 0x4b2eca
nop
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.00442790
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b2eb0
mov eax, dword [edi + 0xc]
cmp eax, 1
jne 0x4b2f03
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b2f71
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.004427a0
jmp 0x4b2f71
jbe 0x4b2f71
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.004aad20
mov esi, eax
test esi, esi
je 0x4b2f71
movzx edx, word [esi + 0x46]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b2f43
push 1
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.004427a0
movzx ecx, word [esi + 0x44]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004aad50
mov esi, eax
test esi, esi
je 0x4b2f71
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.00442790
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b2f57
mov eax, dword [edi + 0x10]
cmp eax, 1
jne 0x4b2faa
push 0
lea eax, [esp + 0x50]
push eax
push 0x93
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b301a
push 2
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.004427a0
jmp 0x4b301a
jbe 0x4b301a
mov ecx, dword [esp + 0x24]
movzx edx, ax
push edx
call fcn.004aad20
mov esi, eax
test esi, esi
je 0x4b301a
movzx ecx, word [esi + 0x46]
push 1
lea eax, [esp + 0x50]
push eax
push ecx
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b2fea
push 2
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.004427a0
movzx eax, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push eax
call fcn.004aad50
mov esi, eax
test esi, esi
je 0x4b301a
mov edi, edi
mov ecx, dword [esi]
push 0
push 0
push 0xff00ff
push ecx
mov ecx, ebp
call fcn.00442790
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b3000
mov eax, dword [edi + 0x14]
cmp eax, 1
jne 0x4b3053
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b30c1
push 3
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.004427a0
jmp 0x4b30c1
jbe 0x4b30c1
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004aad20
mov esi, eax
test esi, esi
je 0x4b30c1
movzx eax, word [esi + 0x46]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b3093
push 3
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.004427a0
movzx edx, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push edx
call fcn.004aad50
mov esi, eax
test esi, esi
je 0x4b30c1
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.00442790
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b30a7
mov eax, dword [edi + 0x18]
cmp eax, 1
jne 0x4b30fa
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b316a
push 4
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.004427a0
jmp 0x4b316a
jbe 0x4b316a
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.004aad20
mov esi, eax
test esi, esi
je 0x4b316a
movzx edx, word [esi + 0x46]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x7197e8
call fcn.00435b40
cmp dword [esp + 0x50], 0
je 0x4b313a
push 4
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.004427a0
movzx ecx, word [esi + 0x44]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004aad50
mov esi, eax
test esi, esi
je 0x4b316a
mov edi, edi
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.00442790
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b3150
lea ecx, [esp + 0x4c]
mov byte [esp + 0xf8], 0
call fcn.00430650
mov esi, dword [esp + 0x14]
push 0
lea eax, [esp + 0x30]
push eax
push 0xffffb0
push 0x5d0a36
mov ecx, ebp
call fcn.00442790
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b31ac
movzx eax, word [eax + 8]
test ax, ax
je 0x4b31ac
mov ecx, eax
jmp 0x4b31ae
xor ecx, ecx
movzx eax, word [esi + 0x5a]
mov edi, dword [esp + 0x1c]
test ax, ax
je 0x4b3244
test edi, edi
je 0x4b31f4
movzx edx, word [edi + 8]
test dx, dx
je 0x4b31f4
push edx
add eax, ecx
push eax
push 0x17e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b321a
lea edx, [ecx + eax]
push edx
push 0x17e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push 0x5d740c
push eax
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b32ab
cmp word [eax + 8], 0
je 0x4b32ab
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b32f8
test ecx, ecx
je 0x4b327b
test edi, edi
je 0x4b32b6
movzx eax, word [edi + 8]
test ax, ax
je 0x4b327b
push eax
push ecx
push 0x17e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b32ea
test edi, edi
je 0x4b32b6
movzx eax, word [edi + 8]
test ax, ax
je 0x4b32b6
push eax
push 0x17e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b32f3
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b3310
movzx eax, word [edx + 8]
test ax, ax
je 0x4b32ff
push eax
push 0x17e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b3310
movzx eax, word [edx + 0xa]
test ax, ax
jne 0x4b3312
xor eax, eax
movzx ecx, word [esi + 0x5c]
test cx, cx
je 0x4b33a3
test edi, edi
je 0x4b3354
movzx edx, word [edi + 0xa]
test dx, dx
je 0x4b3354
push edx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00586b40
add esp, 0x14
jmp 0x4b3379
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push 0x5d740c
push edx
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b340a
cmp word [eax + 0xa], 0
je 0x4b340a
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b3453
test eax, eax
je 0x4b33da
test edi, edi
je 0x4b3415
movzx ecx, word [edi + 0xa]
test cx, cx
je 0x4b33da
push ecx
push eax
push 0x17f
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
jmp 0x4b3445
test edi, edi
je 0x4b3415
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4b3415
push eax
push 0x17f
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b344e
test edx, edx
je 0x4b346b
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4b345a
push eax
push 0x17f
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b346b
movzx eax, word [edx + 0xc]
test ax, ax
jne 0x4b346d
xor eax, eax
movzx ecx, word [esi + 0x5e]
test cx, cx
je 0x4b34fe
test edi, edi
je 0x4b34af
movzx edx, word [edi + 0xc]
test dx, dx
je 0x4b34af
push edx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00586b40
add esp, 0x14
jmp 0x4b34d4
add ecx, eax
push ecx
push 0x180
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push 0x5d740c
push edx
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b3565
cmp word [eax + 0xc], 0
je 0x4b3565
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b35ae
test eax, eax
je 0x4b3535
test edi, edi
je 0x4b3570
movzx ecx, word [edi + 0xc]
test cx, cx
je 0x4b3535
push ecx
push eax
push 0x180
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
jmp 0x4b35a0
test edi, edi
je 0x4b3570
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4b3570
push eax
push 0x180
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b35a9
test edx, edx
je 0x4b35c6
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4b35b5
push eax
push 0x180
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b35c6
movzx eax, word [edx + 0xe]
test ax, ax
jne 0x4b35c8
xor eax, eax
movzx ecx, word [esi + 0x60]
test cx, cx
je 0x4b3659
test edi, edi
je 0x4b360a
movzx edx, word [edi + 0xe]
test dx, dx
je 0x4b360a
push edx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00586b40
add esp, 0x14
jmp 0x4b362f
add ecx, eax
push ecx
push 0x181
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push 0x5d740c
push edx
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b36c0
cmp word [eax + 0xe], 0
je 0x4b36c0
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b3709
test eax, eax
je 0x4b3690
test edi, edi
je 0x4b36cb
movzx ecx, word [edi + 0xe]
test cx, cx
je 0x4b3690
push ecx
push eax
push 0x181
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
jmp 0x4b36fb
test edi, edi
je 0x4b36cb
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4b36cb
push eax
push 0x181
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b3704
test edx, edx
je 0x4b371f
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4b3710
push eax
push 0x181
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b371f
mov eax, dword [edx + 0x10]
test eax, eax
jne 0x4b3721
xor eax, eax
mov ecx, dword [esi + 0x64]
test ecx, ecx
je 0x4b37b3
test edi, edi
je 0x4b375f
mov edx, dword [edi + 0x10]
test edx, edx
je 0x4b375f
push edx
add ecx, eax
push ecx
push 0x182
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00586b40
add esp, 0x14
jmp 0x4b3784
add ecx, eax
push ecx
push 0x182
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push 0x5d740c
push eax
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b37a5
cmp dword [eax + 0x10], 0
je 0x4b37a5
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b3877
push 0
push 0
push 0x548fdf
jmp 0x4b3872
test eax, eax
je 0x4b37fd
test edi, edi
je 0x4b383b
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x4b37fd
push ecx
push eax
push 0x182
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b3877
test edi, edi
je 0x4b383b
mov eax, dword [edi + 0x10]
test eax, eax
je 0x4b383b
push eax
push 0x182
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4b3877
test edx, edx
je 0x4b388f
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4b387e
push eax
push 0x182
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b388f
movzx eax, word [edx + 0x14]
test ax, ax
jne 0x4b3891
xor eax, eax
movzx ecx, word [esi + 0x6c]
test cx, cx
je 0x4b3922
test edi, edi
je 0x4b38d3
movzx edx, word [edi + 0x14]
test dx, dx
je 0x4b38d3
push edx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00586b40
add esp, 0x14
jmp 0x4b38f8
add ecx, eax
push ecx
push 0x183
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push 0x5d740c
push edx
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b3989
cmp word [eax + 0x14], 0
je 0x4b3989
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b39d2
test eax, eax
je 0x4b3959
test edi, edi
je 0x4b3994
movzx ecx, word [edi + 0x14]
test cx, cx
je 0x4b3959
push ecx
push eax
push 0x183
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
jmp 0x4b39c4
test edi, edi
je 0x4b3994
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4b3994
push eax
push 0x183
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b39cd
test edx, edx
je 0x4b39e8
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4b39d9
push eax
push 0x183
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b39e8
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4b39ea
xor eax, eax
mov ecx, dword [esi + 0x68]
test ecx, ecx
je 0x4b3a7c
test edi, edi
je 0x4b3a28
mov edx, dword [edi + 0x16]
test edx, edx
je 0x4b3a28
push edx
add ecx, eax
push ecx
push 0x184
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00586b40
add esp, 0x14
jmp 0x4b3a4d
add ecx, eax
push ecx
push 0x184
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push 0x5d740c
push eax
call fcn.00586b40
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b3a6e
cmp dword [eax + 0x16], 0
je 0x4b3a6e
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b3b40
push 0
push 0
push 0x548fdf
jmp 0x4b3b3b
test eax, eax
je 0x4b3ac6
test edi, edi
je 0x4b3b04
mov ecx, dword [edi + 0x16]
test ecx, ecx
je 0x4b3ac6
push ecx
push eax
push 0x184
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b3b40
test edi, edi
je 0x4b3b04
mov eax, dword [edi + 0x16]
test eax, eax
je 0x4b3b04
push eax
push 0x184
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4b3b40
test edx, edx
je 0x4b3b47
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4b3b47
push eax
push 0x184
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
mov edi, dword [esp + 0x1c]
mov esi, 1
fld qword [0x5cf640]
movzx eax, si
test ax, ax
jne 0x4b3b66
fldz
fst dword [esp + 0x28]
jmp 0x4b3b76
mov edx, dword [esp + 0x14]
mov ecx, eax
fld dword [edx + ecx*4 + 0x6c]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fmul st(2)
fstp dword [esp + 0x28]
test edi, edi
je 0x4b3ba3
test ax, ax
jne 0x4b3b8f
fst dword [esp + 0x20]
jmp 0x4b3b99
mov ecx, eax
fld dword [edi + ecx*4 + 0x16]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4b3bda
test ax, ax
jne 0x4b3bc2
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b3be0
mov edx, eax
fld dword [ecx + edx*4 + 0x1a]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b3be0
fstp st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.00586d50
test eax, eax
je 0x4b3c94
fstp st(1)
fld dword [esp + 0x20]
call fcn.00586d50
fadd dword [esp + 0x18]
test eax, eax
je 0x4b3c33
push eax
call fcn.00586d50
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b3c5d
call fcn.00586d50
push eax
lea edx, [esi + 0x108]
push edx
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.00586b40
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b3c81
fld dword [esp + 0x18]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b3c81
push 0
push 0
push 0x55fc55
jmp 0x4b3d77
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4b3d7c
fstp st(0)
fld dword [esp + 0x20]
call fcn.00586d50
fld dword [esp + 0x18]
mov ecx, eax
fld st(0)
test ecx, ecx
je 0x4b3d03
fucomp st(2)
push ecx
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b3ce3
call fcn.00586d50
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b3d3a
lea edx, [esi + 0x108]
fstp st(0)
push edx
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4b3d32
fld st(2)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b3d5f
fstp st(1)
call fcn.00586d50
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.00586b40
add esp, 0x10
fld dword [esp + 0x18]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b3d61
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b3d7c
fstp st(0)
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b3d83
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
inc esi
cmp esi, 5
jle 0x4b3b50
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x98]
sub eax, 0
je 0x4b3dae
dec eax
jne 0x4b3dce
push eax
push eax
push 0xffffff
push 0x111
jmp 0x4b3dbc
push 0
push 0
push 0xffffff
push pe_nt_image_headers32
mov ecx, 0x71c268
call fcn.004d3c70
push eax
mov ecx, ebp
call fcn.00442790
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b3de3
movzx eax, word [eax + 0x1a]
test ax, ax
je 0x4b3de3
mov esi, eax
jmp 0x4b3de5
xor esi, esi
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xa0]
test ax, ax
jne 0x4b3e02
cmp word [ecx + 0xa2], ax
je 0x4b3ff0
mov edx, 0x80a
cmp word [ecx + 0x48], dx
movzx edx, word [ecx + 0xa2]
je 0x4b3f11
cmp ax, dx
jne 0x4b3e79
test edi, edi
je 0x4b3e4d
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4b3e4d
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push 0x5dcac0
jmp 0x4b3eda
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push 0x5d73f8
push ecx
call fcn.00586b40
add esp, 0x10
jmp 0x4b3ee7
test edi, edi
je 0x4b3ebc
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4b3eba
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.00586b40
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b3ee7
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.00586b40
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b3fdb
cmp word [eax + 0x1a], 0
je 0x4b3fdb
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4b3fe9
cmp ax, dx
jne 0x4b3f72
test edi, edi
je 0x4b3f43
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4b3f43
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d_____d_
jmp 0x4b3eda
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push 0x5d73f0
push ecx
call fcn.00586b40
add esp, 0x10
jmp 0x4b3ee7
test edi, edi
je 0x4b3fb8
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4b3fb6
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.00586b40
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b3ee7
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d_____d__
jmp 0x4b3eda
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00442790
test edi, edi
je 0x4b4057
movzx eax, word [edi + 0x34]
test ax, ax
je 0x4b4057
push eax
push 0x186
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.00586b40
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b4042
mov eax, dword [esp + 0x10]
cmp word [eax + 0x1a], 0
je 0x4b4042
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b4050
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xa4]
test ax, ax
jne 0x4b4074
cmp word [ecx + 0xa6], ax
je 0x4b4272
mov edx, 0x80a
cmp word [ecx + 0x48], dx
je 0x4b4185
movzx edx, word [ecx + 0xa6]
cmp ax, dx
jne 0x4b40eb
test edi, edi
je 0x4b40bf
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4b40bf
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push 0x5dcac0
jmp 0x4b414e
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push 0x5d73f8
push ecx
call fcn.00586b40
add esp, 0x10
jmp 0x4b415b
test edi, edi
je 0x4b4130
mov ecx, dword [esp + 0x1c]
movzx edi, word [ecx + 0x32]
test di, di
je 0x4b412e
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.00586b40
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b415b
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.00586b40
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b425d
cmp word [eax + 0x1a], 0
je 0x4b425d
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4b426b
movzx ecx, word [ecx + 0xa6]
cmp ax, cx
jne 0x4b41f2
test edi, edi
je 0x4b41c3
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b41c3
push eax
mov eax, ecx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d_____d_
lea edx, [esp + 0x7c]
push edx
jmp 0x4b4153
mov eax, ecx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea edx, [esp + 0x74]
push 0x5d73f0
push edx
call fcn.00586b40
add esp, 0x10
jmp 0x4b415b
test edi, edi
je 0x4b423a
mov edx, dword [esp + 0x1c]
movzx edi, word [edx + 0x32]
test di, di
je 0x4b4238
movzx edx, si
push edi
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.00586b40
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b415b
mov edi, edx
movzx edx, si
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d_____d__
jmp 0x4b414e
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00442790
mov eax, dword [esp + 0x14]
cmp word [eax + 0xa0], 0
jne 0x4b4372
cmp word [eax + 0xa2], 0
jne 0x4b4372
cmp word [eax + 0xa4], 0
jne 0x4b4372
cmp word [eax + 0xa6], 0
jne 0x4b4372
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b42f2
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4b42f2
test edi, edi
je 0x4b432d
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b42f2
push eax
push ecx
push 0x2a9
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d__d_
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b435d
test edi, edi
je 0x4b432d
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b432d
push eax
push 0x2a9
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b4366
test edx, edx
je 0x4b4372
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4b4372
push eax
push 0x2a9
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b4387
fldz
fst dword [esp + 0x28]
jmp 0x4b439a
mov edx, dword [esp + 0x14]
mov ecx, eax
fld dword [edx + ecx*4 + 0xa8]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fld qword [0x5cf640]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
test edi, edi
je 0x4b43d5
test ax, ax
jne 0x4b43bd
fxch st(1)
fst dword [esp + 0x20]
jmp 0x4b43c9
mov ecx, eax
fld dword [edi + ecx*4 + 0x32]
fstp dword [esp + 0x20]
fxch st(1)
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
fxch st(1)
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4b4410
test ax, ax
jne 0x4b43f6
fxch st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b4416
mov edx, eax
fld dword [ecx + edx*4 + 0x32]
fstp dword [esp + 0x18]
fxch st(1)
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b4416
fstp st(0)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.00586d50
test eax, eax
je 0x4b44ca
fstp st(1)
fld dword [esp + 0x20]
call fcn.00586d50
fadd dword [esp + 0x18]
test eax, eax
je 0x4b4469
push eax
call fcn.00586d50
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b4493
call fcn.00586d50
push eax
lea edx, [esi + 0x187]
push edx
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.00586b40
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b44b7
fld dword [esp + 0x18]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b44b7
push 0
push 0
push 0x55fc55
jmp 0x4b45ad
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4b45b2
fstp st(0)
fld dword [esp + 0x20]
call fcn.00586d50
fld dword [esp + 0x18]
mov ecx, eax
fld st(0)
test ecx, ecx
je 0x4b4539
fucomp st(2)
push ecx
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b4519
call fcn.00586d50
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b4570
lea edx, [esi + 0x187]
fstp st(0)
push edx
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4b4568
fld st(2)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b4595
fstp st(1)
call fcn.00586d50
push eax
lea ecx, [esi + 0x187]
push ecx
mov ecx, 0x71c268
call fcn.004d3c70
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.00586b40
add esp, 0x10
fld dword [esp + 0x18]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b4597
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b45b2
fstp st(0)
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b45b9
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
inc esi
cmp esi, 5
jle 0x4b4377
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b45d8
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4b45d8
mov esi, eax
jmp 0x4b45da
xor esi, esi
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc4]
test ax, ax
je 0x4b4684
test edi, edi
je 0x4b4628
movzx ecx, word [edi + 0x4e]
test cx, cx
je 0x4b4628
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x18d
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.00586b40
add esp, 0x14
jmp 0x4b4652
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x18d
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x74]
push 0x5d740c
push ecx
call fcn.00586b40
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b4671
test si, si
je 0x4b4671
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4b4733
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4b4733
test si, si
je 0x4b46bf
test edi, edi
je 0x4b46fa
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4b46bf
movzx edx, si
push eax
push edx
push 0x18d
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00586b40
add esp, 0x14
jmp 0x4b4725
test edi, edi
je 0x4b46fa
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4b46fa
push eax
push 0x18d
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b472e
test si, si
je 0x4b473a
movzx edx, si
push edx
push 0x18d
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc8]
test ax, ax
je 0x4b4783
push eax
mov eax, edx
add eax, 2
push eax
push 0x18e
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea ecx, [esp + 0x78]
push ecx
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00442790
mov eax, dword [esp + 0x14]
cmp word [eax + 0xcc], 0
je 0x4b49b4
movzx ecx, word [eax + 0xca]
test cx, cx
je 0x4b49b4
xor eax, eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov word [esp + 0x69], ax
mov byte [esp + 0x6b], al
lea eax, [ecx - 1]
mov byte [esp + 0x4c], 0
cmp eax, 0xa
ja case.default.0x4b47dd
jmp dword [eax*4 + 0x4b4a74]
push 0x196
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4800
jmp case.default.0x4b47dd
push 0x197
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4824
jmp case.default.0x4b47dd
push 0x198
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4848
jmp case.default.0x4b47dd
push 0x199
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4870
jmp case.default.0x4b47dd
push 0x19a
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4894
jmp case.default.0x4b47dd
push 0x19b
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b48b8
jmp case.default.0x4b47dd
push 0x19c
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b48e0
jmp case.default.0x4b47dd
push 0x19d
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4904
jmp case.default.0x4b47dd
push 0x19e
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4925
jmp case.default.0x4b47dd
push 0x19f
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4946
jmp case.default.0x4b47dd
push 0x1a0
mov ecx, 0x71c268
call fcn.004d3c70
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b4967
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0xcc]
push ecx
lea edx, [esp + 0x50]
push edx
push 0x1a1
mov ecx, 0x71c268
call fcn.004d3c70
push eax
lea eax, [esp + 0x78]
push eax
call fcn.00586b40
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00442790
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x24]
mov edx, 0x100
test word [eax + 0x48], dx
je 0x4b49d2
mov ecx, eax
push ecx
push ebp
mov ecx, esi
call fcn.004ab390
mov edx, dword [esp + 0x14]
cmp word [edx + 0xea], 0
je 0x4b49eb
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.004b2040
mov edx, dword [esp + 0x14]
mov ecx, 0x834
cmp word [edx + 0x48], cx
jne 0x4b4a05
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.004a9f90
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5d0a36
mov ecx, ebp
call fcn.00442790
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x44]
push 1
push 0xc8d7aa
push eax
push ebp
mov ecx, esi
call fcn.004aa7a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.00430650
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0xdc]
xor ecx, esp
call fcn.00586d40
add esp, 0xec
ret 0x14