Function at 0x4871c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6a07c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2b4
push ebx
mov ebx, ecx
push ebp
push esi
mov ecx, dword [ebx + 0x1b0]
lea edx, [esp + 0x14]
push edi
push edx
mov eax, dword [ecx]
mov dword [esp + 0x24], ebx
call dword [eax + 0x2c4]
mov eax, dword [eax]
push eax
call dword [0x6c7498]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [0x6c74ac]
add eax, 0xfffffff4
add esp, 4
xor edi, edi
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x48722e
dec ecx
cmp ecx, edi
mov dword [eax], ecx
jne 0x48722e
push eax
call esi
add esp, 4
mov ecx, dword [ebx + 0x1bc]
lea eax, [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x2c4]
mov eax, dword [eax]
push eax
call dword [0x6c7474]
fimul dword [esp + 0x80]
mov ecx, dword [esp + 0x14]
add esp, 4
lea eax, [ecx - 0xc]
mov ecx, dword [ecx - 0xc]
cmp ecx, 0xffffffff
fmul qword [0x6cdf90]
fstp dword [esp + 0x18]
je 0x48727a
dec ecx
cmp ecx, edi
mov dword [eax], ecx
jne 0x48727a
push eax
call esi
add esp, 4
mov ecx, dword [ebx + 0x1c0]
lea eax, [esp + 0x10]
push eax
mov edx, dword [ecx]
call dword [edx + 0x2c4]
mov eax, dword [eax]
push eax
call dword [0x6c7474]
mov ecx, dword [esp + 0x14]
add esp, 4
fstp dword [esp + 0x4c]
lea eax, [ecx - 0xc]
mov ecx, dword [ecx - 0xc]
cmp ecx, 0xffffffff
je 0x4872b9
dec ecx
cmp ecx, edi
mov dword [eax], ecx
jne 0x4872b9
push eax
call esi
add esp, 4
mov ecx, dword [ebx + 0x1a0]
mov edx, dword [ecx]
call dword [edx + 0x2c8]
mov ecx, dword [ebx + 0x1ac]
mov byte [esp + 0x39], al
mov eax, dword [ecx]
call dword [eax + 0x2c8]
mov ecx, dword [ebx + 0x1a4]
mov byte [esp + 0x38], al
mov edx, dword [ecx]
call dword [edx + 0x2c8]
mov ecx, dword [ebx + 0x1a8]
mov byte [esp + 0x3b], al
mov eax, dword [ecx]
call dword [eax + 0x2c8]
lea ecx, [esp + 0x40]
mov byte [esp + 0x3a], al
call fcn.00575430
lea ecx, [esp + 0x50]
mov dword [esp + 0x2cc], edi
call fcn.00575430
lea ecx, [esp + 0x98]
mov byte [esp + 0x2cc], 1
call fcn.00575430
mov eax, dword [ebx + 0x1f0]
mov ecx, dword [ebx + 0x1f8]
mov byte [esp + 0x2cc], 2
mov dword [esp + 0x14], edi
lea esi, [eax + eax + 5]
call fcn.004becc0
push edi
mov ecx, ebx
call fcn.00483190
mov ecx, dword [ebx + 0x1cc]
push esi
mov edx, dword [ecx]
call dword [edx + 0x2c4]
mov ecx, dword [ebx + 0x1cc]
push edi
mov eax, dword [ecx]
call dword [eax + 0x2cc]
mov eax, dword [ebx + 0x1f0]
xor esi, esi
cmp eax, edi
jle 0x487398
push 1
push esi
lea ecx, [esp + 0x48]
call fcn.00575520
mov eax, dword [ebx + 0x1f0]
inc esi
cmp esi, eax
jl 0x487381
lea ecx, [esp + 0x24]
call fcn.00575430
mov eax, dword [esp + 0x44]
mov byte [esp + 0x2cc], 3
cmp eax, edi
jle 0x4876e8
mov al, byte [ebx + 0x238]
test al, al
jne 0x4876e8
mov ecx, dword [esp + 0x48]
push 1
mov eax, dword [ecx]
lea ecx, [esp + 0x54]
push eax
call fcn.00575520
push 1
push 0
lea ecx, [esp + 0x48]
call fcn.00575600
mov al, byte [ebx + 0x238]
test al, al
jne 0x487440
mov eax, dword [esp + 0x44]
xor esi, esi
test eax, eax
jle 0x487440
mov al, byte [ebx + 0x238]
test al, al
jne 0x487440
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x18]
push edx
lea edx, [esp + 0x54]
mov ecx, dword [eax + esi*4]
push ecx
push edx
mov ecx, ebx
call fcn.00489170
test al, al
jne 0x487428
mov eax, dword [esp + 0x44]
inc esi
cmp esi, eax
jge 0x487440
jmp 0x4873f6
mov eax, dword [esp + 0x48]
push 1
lea ecx, [esp + 0x54]
mov eax, dword [eax + esi*4]
push eax
call fcn.00575520
push 1
push esi
jmp 0x4873d9
mov eax, dword [esp + 0x54]
test eax, eax
jle 0x4876d3
push 0x2c
call fcn.00658ea0
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
mov byte [esp + 0x2cc], 4
je 0x487478
lea ecx, [ebx + 0x1e8]
push ecx
mov ecx, eax
call fcn.00489f50
mov esi, eax
jmp 0x48747a
xor esi, esi
lea edx, [esp + 0x50]
mov ecx, esi
push edx
mov byte [esp + 0x2d0], 3
call fcn.0048a070
mov ecx, dword [esp + 0x18]
lea eax, [ebx + 0x238]
push eax
mov eax, dword [esp + 0x50]
push eax
push ecx
mov ecx, esi
call fcn.0048c180
test al, al
je 0x48767c
push 1
push esi
lea ecx, [esp + 0x2c]
call fcn.00575520
mov ecx, esi
xor edi, edi
call fcn.0048c1b0
mov ecx, dword [eax + 4]
test ecx, ecx
jle 0x487504
mov ecx, esi
call fcn.0048c1b0
mov edx, dword [eax + 8]
push 0
lea ecx, [esp + 0x54]
lea eax, [edx + edi*4]
mov eax, dword [edx + edi*4]
push eax
call fcn.00575720
cmp eax, 0xffffffff
je 0x4874f7
push 1
push eax
lea ecx, [esp + 0x58]
call fcn.00575600
mov ecx, esi
inc edi
call fcn.0048c1b0
cmp edi, dword [eax + 4]
jl 0x4874ca
mov ecx, esi
xor edi, edi
call fcn.0048c1c0
mov ecx, dword [eax + 4]
test ecx, ecx
jle 0x48754d
mov ecx, esi
call fcn.0048c1c0
mov eax, dword [eax + 8]
push 0
lea ecx, [esp + 0x54]
lea eax, [eax + edi*4]
mov eax, dword [eax]
push eax
call fcn.00575720
cmp eax, 0xffffffff
je 0x487540
push 1
push eax
lea ecx, [esp + 0x58]
call fcn.00575600
mov ecx, esi
inc edi
call fcn.0048c1c0
cmp edi, dword [eax + 4]
jl 0x487514
mov ebp, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
cmp ebp, eax
jbe 0x487563
push ebp
lea ecx, [esp + 0x44]
call fcn.00575440
xor edi, edi
test ebp, ebp
jbe 0x487581
mov ecx, dword [esp + 0x58]
push 1
mov edx, dword [ecx + edi*4]
lea ecx, [esp + 0x44]
push edx
call fcn.00575520
inc edi
cmp edi, ebp
jb 0x487569
mov ecx, esi
call fcn.0048c1b0
mov edi, dword [eax + 4]
mov ecx, esi
call fcn.0048c1c0
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x14]
add eax, edi
mov ecx, esi
add edx, eax
mov dword [esp + 0x14], edx
call fcn.0048c1f0
test al, al
jne 0x487667
lea ecx, [esp + 0xe4]
call fcn.0046ebb0
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0xe4]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x2d4], 5
call fcn.0048c060
lea edx, [esp + 0xe4]
push 5
push edx
call fcn.0048bc20
mov eax, dword [esp + 0x4c]
add esp, 8
xor edi, edi
test eax, eax
jle 0x487653
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + edi*4]
push ecx
lea ecx, [ebx + 0x1e8]
call fcn.00470000
lea edx, [esp + 0xe4]
push eax
push edx
call fcn.0048bdc0
add esp, 8
test al, al
je 0x48764a
mov eax, dword [esp + 0x48]
mov ecx, esi
mov ebp, dword [eax + edi*4]
call fcn.0048c1c0
push 1
push ebp
mov ecx, eax
call fcn.00575520
push 1
push edi
lea ecx, [esp + 0x48]
call fcn.00575600
mov eax, dword [esp + 0x14]
dec edi
inc eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
inc edi
cmp edi, eax
jl 0x4875f4
lea ecx, [esp + 0xe4]
mov byte [esp + 0x2cc], 3
call fcn.0046ebd0
mov ecx, dword [ebx + 0x1cc]
mov eax, dword [esp + 0x14]
push eax
mov edx, dword [ecx]
call dword [edx + 0x2cc]
jmp 0x4876d3
mov ebp, dword [esp + 0x54]
mov eax, dword [esp + 0x98]
cmp ebp, eax
jbe 0x487698
push ebp
lea ecx, [esp + 0x9c]
call fcn.00575440
xor edi, edi
test ebp, ebp
jbe 0x4876b9
mov ecx, dword [esp + 0x58]
push 1
mov edx, dword [ecx + edi*4]
lea ecx, [esp + 0x9c]
push edx
call fcn.00575520
inc edi
cmp edi, ebp
jb 0x48769e
test esi, esi
je 0x4876c5
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x14]
add eax, ecx
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x50]
call fcn.005758b0
mov eax, dword [esp + 0x44]
test eax, eax
jg 0x4873b5
mov eax, dword [esp + 0x28]
mov ecx, dword [ebx + 0x1cc]
mov ebp, eax
mov edx, dword [ecx]
lea eax, [eax + eax + 5]
push eax
call dword [edx + 0x2c4]
mov ecx, dword [ebx + 0x1cc]
inc ebp
push ebp
mov eax, dword [ecx]
call dword [eax + 0x2cc]
mov al, byte [esp + 0x38]
test al, al
je 0x487826
mov eax, dword [esp + 0x28]
or edi, 0xffffffff
xor esi, esi
mov dword [esp + 0x10], 0
test eax, eax
jle 0x487826
mov al, byte [ebx + 0x238]
test al, al
jne 0x48776f
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x18]
push edx
mov ecx, dword [ecx + esi*4]
call fcn.0048c1d0
fcom dword [esp + 0x10]
fnstsw ax
test ah, 0x41
jne 0x487764
fstp dword [esp + 0x10]
mov edi, esi
jmp 0x487766
fstp st(0)
mov eax, dword [esp + 0x28]
inc esi
cmp esi, eax
jl 0x487736
test edi, edi
jl 0x487826
mov eax, dword [esp + 0x2c]
mov esi, dword [eax + edi*4]
mov ecx, esi
call fcn.0048c1f0
test al, al
je 0x487826
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x10]
push ecx
lea eax, [esp + 0x40]
push edx
lea ecx, [esp + 0x74]
push eax
push ecx
mov ecx, esi
call fcn.0048c2a0
push 1
push edi
lea ecx, [esp + 0x2c]
call fcn.00575600
test esi, esi
je 0x4877c0
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
mov eax, dword [esp + 0x28]
inc ebp
xor edi, edi
test eax, eax
jle 0x487826
mov al, byte [ebx + 0x238]
test al, al
jne 0x487826
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x64]
lea edx, [esp + 0x60]
push ecx
mov esi, dword [eax + edi*4]
lea eax, [esp + 0x60]
push edx
lea ecx, [esp + 0x54]
push eax
push ecx
mov ecx, esi
call fcn.0048c2a0
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x10]
cmp edx, eax
jle 0x48781d
push 1
push edi
lea ecx, [esp + 0x2c]
call fcn.00575600
test esi, esi
je 0x48781b
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
dec edi
inc ebp
mov eax, dword [esp + 0x28]
inc edi
cmp edi, eax
jl 0x4877cb
mov ecx, dword [ebx + 0x1cc]
inc ebp
push ebp
mov dword [esp + 0x18], ebp
mov edx, dword [ecx]
call dword [edx + 0x2cc]
mov al, byte [esp + 0x39]
test al, al
jne 0x487ab1
lea ecx, [esp + 0xe4]
call fcn.0046ebb0
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2cc], 6
call fcn.0046ebb0
mov eax, dword [esp + 0x28]
xor ebx, ebx
test eax, eax
mov byte [esp + 0x2cc], 7
mov dword [esp + 0x10], ebx
jle 0x487a81
mov eax, dword [esp + 0x20]
mov cl, byte [eax + 0x238]
test cl, cl
jne 0x487a81
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x3c]
lea eax, [esp + 0x5c]
push edx
mov esi, dword [ecx + ebx*4]
lea ecx, [esp + 0x68]
push eax
lea edx, [esp + 0xd8]
push ecx
push edx
mov ecx, esi
call fcn.0048c2a0
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0xe4]
push eax
push ecx
mov ecx, esi
call fcn.0048c060
lea edx, [esp + 0xe4]
push 0xfffffffffffffffb
push edx
call fcn.0048bc20
mov eax, dword [esp + 0x30]
add esp, 8
xor edi, edi
test eax, eax
jle 0x487a70
cmp ebx, edi
je 0x487990
mov eax, dword [esp + 0x20]
mov cl, byte [eax + 0x238]
test cl, cl
jne 0x487a70
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x6c]
lea eax, [esp + 0x94]
push edx
mov ebp, dword [ecx + edi*4]
lea ecx, [esp + 0x64]
push eax
lea edx, [esp + 0x54]
push ecx
push edx
mov ecx, ebp
call fcn.0048c2a0
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0xd0]
cmp eax, ecx
jg 0x487990
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x5c]
cmp ecx, eax
jl 0x487990
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
cmp edx, eax
jg 0x487990
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jl 0x487990
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0xfc]
push ecx
push edx
mov ecx, ebp
call fcn.0048c060
lea eax, [esp + 0xe4]
lea ecx, [esp + 0xfc]
push eax
push ecx
call fcn.0048bdc0
add esp, 8
test al, al
jne 0x4879a2
mov eax, dword [esp + 0x28]
inc edi
cmp edi, eax
jl 0x4878eb
jmp 0x487a70
mov edi, dword [esp + 0x10]
push 1
push edi
lea ecx, [esp + 0x2c]
call fcn.00575600
dec edi
mov ecx, esi
mov dword [esp + 0x10], edi
call fcn.0048c1b0
mov ebx, dword [eax + 4]
mov ecx, ebp
call fcn.0048c1c0
cmp ebx, dword [eax]
jbe 0x4879d4
push ebx
mov ecx, eax
call fcn.00575440
xor edi, edi
test ebx, ebx
jbe 0x487a07
mov ecx, esi
call fcn.0048c1b0
mov edx, dword [eax + 8]
mov ecx, ebp
lea eax, [edx + edi*4]
mov dword [esp + 0x1c], eax
call fcn.0048c1c0
mov ecx, dword [esp + 0x1c]
push 1
mov edx, dword [ecx]
mov ecx, eax
push edx
call fcn.00575520
inc edi
cmp edi, ebx
jb 0x4879da
mov ecx, esi
call fcn.0048c1c0
mov ebx, dword [eax + 4]
mov ecx, ebp
mov dword [esp + 0x1c], ebx
call fcn.0048c1c0
cmp ebx, dword [eax]
jbe 0x487a28
push ebx
mov ecx, eax
call fcn.00575440
xor edi, edi
test ebx, ebx
jbe 0x487a57
mov ecx, esi
call fcn.0048c1c0
mov eax, dword [eax + 8]
mov ecx, ebp
lea ebx, [eax + edi*4]
call fcn.0048c1c0
mov ecx, dword [ebx]
push 1
push ecx
mov ecx, eax
call fcn.00575520
mov eax, dword [esp + 0x1c]
inc edi
cmp edi, eax
jb 0x487a2e
test esi, esi
je 0x487a63
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
inc ebx
cmp ebx, eax
mov dword [esp + 0x10], ebx
jl 0x487880
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2cc], 6
call fcn.0046ebd0
lea ecx, [esp + 0xe4]
mov byte [esp + 0x2cc], 3
call fcn.0046ebd0
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x14]
mov ecx, dword [ebx + 0x1cc]
inc ebp
push ebp
mov dword [esp + 0x18], ebp
mov eax, dword [ecx]
call dword [eax + 0x2cc]
lea ecx, [esp + 0x120]
call fcn.0046ebb0
lea ecx, [esp + 0x158]
mov byte [esp + 0x2cc], 8
call fcn.0046ebb0
mov eax, dword [esp + 0x28]
mov byte [esp + 0x2cc], 9
test eax, eax
mov dword [esp + 0x10], 0
jle 0x487be1
mov al, byte [ebx + 0x238]
test al, al
jne 0x487be1
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov ebp, dword [ecx + edx*4]
lea ecx, [esp + 0x120]
push eax
push ecx
mov ecx, ebp
call fcn.0048c060
lea edx, [esp + 0x120]
push 5
push edx
call fcn.0048bc20
mov eax, dword [esp + 0xa4]
add esp, 8
xor esi, esi
test eax, eax
jle 0x487bc8
mov al, byte [ebx + 0x238]
test al, al
jne 0x487bc8
mov ecx, dword [esp + 0xa0]
lea eax, [esp + 0x158]
push eax
mov edx, dword [ecx + esi*4]
lea ecx, [ebx + 0x1e8]
push edx
call fcn.0046ffc0
lea eax, [esp + 0x158]
lea ecx, [esp + 0x120]
push eax
push ecx
call fcn.0048bdc0
add esp, 8
test al, al
je 0x487bbc
mov edx, dword [esp + 0xa0]
mov ecx, ebp
mov edi, dword [edx + esi*4]
call fcn.0048c1c0
push 1
push edi
mov ecx, eax
call fcn.00575520
push 1
push esi
lea ecx, [esp + 0xa0]
call fcn.00575600
dec esi
mov eax, dword [esp + 0x9c]
inc esi
cmp esi, eax
jl 0x487b4d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov ebp, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x487b01
mov ecx, dword [ebx + 0x1cc]
inc ebp
push ebp
mov dword [esp + 0x18], ebp
mov eax, dword [ecx]
call dword [eax + 0x2cc]
lea ecx, [esp + 0xb0]
call fcn.004c2ef0
lea ecx, [esp + 0x138]
mov byte [esp + 0x2cc], 0xa
call fcn.004c2ef0
lea ecx, [esp + 0x170]
mov byte [esp + 0x2cc], 0xb
call fcn.004b0f30
mov ecx, dword [0x8b0a50]
mov dword [esp + 0x68], ecx
push 0
lea ecx, [esp + 0xd8]
mov byte [esp + 0x2d0], 0xd
call fcn.00572ec0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x2cc], 0xe
call fcn.00575430
mov byte [esp + 0x2cc], 0xf
call fcn.004c57a0
mov ebp, eax
call fcn.004c5d60
xor esi, esi
mov edi, eax
test ebp, ebp
jle 0x487d05
mov bl, 0x10
push esi
lea edx, [esp + 0x20]
push edi
push edx
call fcn.004c5a60
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x2d0], bl
call fcn.00571160
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x2cc], 0xf
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x487cc6
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x487cc6
push eax
call dword [0x6c74ac]
add esp, 4
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx - 8]
test eax, eax
je 0x487cfc
lea edx, [esp + 0x68]
push 1
push edx
lea ecx, [esp + 0xdc]
call fcn.00573250
push esi
call fcn.004c58a0
add esp, 4
lea ecx, [esp + 0xa4]
push 1
push eax
call fcn.00575520
inc esi
cmp esi, ebp
jl 0x487c7f
mov eax, dword [esp + 0xd8]
mov esi, 1
cmp eax, esi
jge 0x487d77
mov eax, 0x8a02a4
test eax, eax
jne 0x487d23
mov eax, 0x8c55f4
mov ecx, dword [0x6e14e0]
push ecx
push 0
push eax
lea ecx, [esp + 0x24]
call fcn.00570720
lea edx, [esp + 0x18]
push esi
push edx
lea ecx, [esp + 0xdc]
mov byte [esp + 0x2d4], 0x11
call fcn.00573250
mov eax, dword [esp + 0x18]
mov byte [esp + 0x2cc], 0xf
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x487d77
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x487d77
push eax
call dword [0x6c74ac]
add esp, 4
cmp dword [esp + 0xa8], esi
jge 0x487d92
push esi
push 0xcf8900
lea ecx, [esp + 0xac]
call fcn.00575520
mov eax, dword [esp + 0x28]
xor esi, esi
test eax, eax
jle 0x488728
mov ecx, dword [esp + 0x20]
mov al, byte [ecx + 0x238]
test al, al
jne 0x488728
mov edx, dword [esp + 0x2c]
mov eax, ecx
add eax, 0x1d4
xor ebx, ebx
mov ebp, dword [edx + esi*4]
push ecx
mov eax, dword [eax]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x20], esp
mov ecx, esp
cmp dword [eax - 8], ebx
jne 0x487dde
mov edx, dword [0x8b0a50]
mov dword [ecx], edx
jmp 0x487dec
mov dword [ecx], eax
mov ecx, dword [eax - 0xc]
cmp ecx, 0xffffffff
je 0x487dec
inc ecx
mov dword [eax - 0xc], ecx
lea ecx, [esp + 0x174]
call fcn.00435710
push ecx
inc esi
mov eax, esp
mov dword [esp + 0x20], esp
push esi
push 0x8a04f0
push eax
mov dword [esp + 0xa4], esi
call fcn.00572aa0
add esp, 0xc
lea ecx, [esp + 0x174]
call fcn.00435770
mov eax, 1
push ebx
lea ecx, [esp + 0xd8]
mov dword [esp + 0x298], eax
mov dword [esp + 0x290], eax
mov dword [esp + 0x294], ebx
call fcn.00416e90
mov eax, dword [eax]
push ecx
mov dword [esp + 0x20], esp
mov ecx, esp
cmp dword [eax - 8], ebx
jne 0x487e61
mov edx, dword [0x8b0a50]
mov dword [ecx], edx
jmp 0x487e6f
mov dword [ecx], eax
mov ecx, dword [eax - 0xc]
cmp ecx, 0xffffffff
je 0x487e6f
inc ecx
mov dword [eax - 0xc], ecx
lea ecx, [esp + 0x174]
call fcn.004357d0
mov eax, dword [esp + 0xac]
mov edx, 0x8a0280
push ecx
mov eax, dword [eax]
mov dword [esp + 0x20], esp
mov dword [esp + 0x184], eax
mov ecx, esp
test edx, edx
mov eax, edx
jne 0x487ea2
mov eax, 0x8c55f4
mov edx, dword [0x6e14e0]
push edx
push ebx
push eax
call fcn.00570720
lea ecx, [esp + 0x174]
call fcn.0047f520
push ebx
push ebx
lea ecx, [esp + 0x178]
call fcn.004b2c10
mov ecx, ebp
call fcn.0048c1b0
cmp dword [eax + 4], ebx
jle 0x488153
mov eax, dword [esp + 0x20]
mov cl, byte [eax + 0x238]
test cl, cl
jne 0x488153
mov ecx, ebp
call fcn.0048c1b0
mov ecx, dword [eax + 8]
mov edx, dword [ecx + ebx*4]
lea eax, [ecx + ebx*4]
mov eax, dword [esp + 0x20]
push edx
lea ecx, [eax + 0x1e8]
call fcn.00470000
mov esi, eax
xor edi, edi
mov eax, dword [esi + 8]
test eax, eax
jle 0x487f7f
fild dword [esp + 0x7c]
fstp dword [esp + 0x18]
lea ecx, [esp + 0x84]
lea edx, [esp + 0x8c]
push ecx
push edx
push edi
mov ecx, esi
call fcn.0046ed50
fild dword [esp + 0x8c]
fdiv dword [esp + 0x18]
fmul dword [0x6cdfac]
fstp dword [esp + 0x30]
fild dword [esp + 0x84]
mov ecx, dword [esp + 0x30]
fdiv dword [esp + 0x18]
fmul dword [0x6cdfac]
fstp dword [esp + 0x34]
mov eax, dword [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0xb8]
call fcn.00471100
mov eax, dword [esi + 8]
inc edi
cmp edi, eax
jl 0x487f1f
lea ecx, [esp + 0xb0]
xor esi, esi
call fcn.00471090
sub eax, 2
test eax, eax
jle 0x4880fa
mov edx, dword [esp + 0x20]
mov al, byte [edx + 0x238]
test al, al
jne 0x4880fa
lea eax, [esp + 0x78]
lea ecx, [esp + 0x90]
push eax
push ecx
push esi
lea ecx, [esp + 0xbc]
call fcn.004710a0
lea edx, [esp + 0x80]
lea eax, [esp + 0x88]
lea edi, [esi + 1]
push edx
push eax
push edi
lea ecx, [esp + 0xbc]
call fcn.004710a0
lea ecx, [esp + 0x74]
lea edx, [esp + 0x70]
push ecx
lea eax, [esi + 2]
push edx
push eax
lea ecx, [esp + 0xbc]
call fcn.004710a0
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x80]
push 0
push 1
push ecx
mov ecx, dword [esp + 0x94]
push edx
push eax
push ecx
push eax
mov eax, dword [esp + 0x94]
push ecx
mov ecx, dword [esp + 0xb0]
push eax
push ecx
call fcn.004ae620
fcom dword [0x6c8a88]
add esp, 0x28
fnstsw ax
test ah, 1
je 0x488045
fchs
fcomp dword [0x6ca6d8]
fnstsw ax
test ah, 0x41
jne 0x4880e2
xor ebp, ebp
test edi, edi
jl 0x48808e
lea edx, [esp + 0x34]
lea eax, [esp + 0x30]
push edx
push eax
push ebp
lea ecx, [esp + 0xbc]
call fcn.004710a0
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push ecx
push edx
lea ecx, [esp + 0x140]
call fcn.00471100
inc ebp
cmp ebp, edi
jle 0x48805c
lea eax, [esp + 0x138]
push 1
push eax
lea ecx, [esp + 0x1a0]
call fcn.00470d20
lea ecx, [esp + 0x138]
push 1
push ecx
lea ecx, [esp + 0x1ac]
call fcn.00470d20
lea ecx, [esp + 0x138]
call fcn.00471050
test esi, esi
jl 0x4880db
push 0
lea ecx, [esp + 0xb4]
call fcn.004711c0
dec edi
jne 0x4880ca
mov ebp, dword [esp + 0x10]
or esi, 0xffffffff
lea ecx, [esp + 0xb0]
inc esi
call fcn.00471090
sub eax, 2
cmp esi, eax
jl 0x487f98
lea ecx, [esp + 0xb0]
call fcn.00471090
test eax, eax
jle 0x488136
lea edx, [esp + 0xb0]
push 1
push edx
lea ecx, [esp + 0x1a0]
call fcn.00470d20
lea eax, [esp + 0xb0]
push 1
push eax
lea ecx, [esp + 0x1ac]
call fcn.00470d20
lea ecx, [esp + 0xb0]
call fcn.00471050
mov ecx, ebp
inc ebx
call fcn.0048c1b0
cmp ebx, dword [eax + 4]
jl 0x487eda
mov ecx, dword [esp + 0x19c]
xor edi, edi
dec ecx
test ecx, ecx
jle 0x48828c
mov ebx, 1
mov eax, dword [esp + 0x1a0]
lea edx, [esp + 0x34]
push edx
mov esi, dword [eax + edi*4]
mov ebp, dword [eax + edi*4 + 4]
lea eax, [esp + 0x34]
mov ecx, esi
push eax
call fcn.00471090
sub eax, 2
mov ecx, esi
push eax
call fcn.004710a0
lea ecx, [esp + 0x78]
lea edx, [esp + 0x90]
push ecx
push edx
mov ecx, esi
call fcn.00471090
dec eax
mov ecx, esi
push eax
call fcn.004710a0
lea eax, [esp + 0x80]
lea ecx, [esp + 0x88]
push eax
push ecx
push 0
mov ecx, ebp
call fcn.004710a0
lea edx, [esp + 0x74]
lea eax, [esp + 0x70]
push edx
push eax
push 1
mov ecx, ebp
call fcn.004710a0
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x80]
push 0
push 1
push ecx
mov ecx, dword [esp + 0x94]
push edx
mov edx, dword [esp + 0x88]
push eax
mov eax, dword [esp + 0xa4]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
mov edx, dword [esp + 0x4c]
push eax
push ecx
push edx
call fcn.004ae620
fcom dword [0x6c8a88]
add esp, 0x28
fnstsw ax
test ah, 1
je 0x48822c
fchs
fcomp dword [0x6ca6d8]
fnstsw ax
test ah, 1
je 0x48827a
push 0
mov ecx, ebp
call fcn.004711c0
push ebp
mov ecx, esi
call fcn.00471370
push 1
push ebx
lea ecx, [esp + 0x1a0]
call fcn.00470ca0
mov eax, dword [esp + 0x1ac]
push esi
mov ecx, dword [eax + edi*4]
call fcn.004c3080
push 1
push ebx
lea ecx, [esp + 0x1ac]
call fcn.00470ca0
dec edi
dec ebx
mov ecx, dword [esp + 0x19c]
inc edi
inc ebx
dec ecx
cmp edi, ecx
jl 0x48816a
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x20]
mov edi, dword [0x6c74ac]
xor ebp, ebp
call fcn.0048c1c0
mov ecx, dword [eax + 4]
test ecx, ecx
jle 0x488398
mov al, byte [ebx + 0x238]
test al, al
jne 0x488398
mov ecx, dword [esp + 0x10]
call fcn.0048c1c0
mov edx, dword [eax + 8]
lea ecx, [ebx + 0x1e8]
lea eax, [edx + ebp*4]
mov eax, dword [edx + ebp*4]
push eax
call fcn.00470000
mov esi, eax
xor edi, edi
mov eax, dword [esi + 8]
test eax, eax
jle 0x48834b
fild dword [esp + 0x7c]
fstp dword [esp + 0x18]
lea ecx, [esp + 0x84]
lea edx, [esp + 0x8c]
push ecx
push edx
push edi
mov ecx, esi
call fcn.0046ed50
fild dword [esp + 0x8c]
fdiv dword [esp + 0x18]
fmul dword [0x6cdfac]
fstp dword [esp + 0x30]
fild dword [esp + 0x84]
mov ecx, dword [esp + 0x30]
fdiv dword [esp + 0x18]
fmul dword [0x6cdfac]
fstp dword [esp + 0x34]
mov eax, dword [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0xb8]
call fcn.00471100
mov eax, dword [esi + 8]
inc edi
cmp edi, eax
jl 0x4882eb
lea ecx, [esp + 0xb0]
call fcn.00471090
test eax, eax
jle 0x488371
lea edx, [esp + 0xb0]
push 1
push edx
lea ecx, [esp + 0x1b8]
call fcn.00470d20
lea ecx, [esp + 0xb0]
call fcn.00471050
mov ecx, dword [esp + 0x10]
inc ebp
call fcn.0048c1c0
mov ecx, dword [eax + 4]
mov edi, dword [0x6c74ac]
cmp ebp, ecx
jl 0x4882ac
lea ecx, [esp + 0x170]
call fcn.004b6fc0
lea ecx, [esp + 0x170]
mov dword [esp + 0x190], 0x3f333333
mov dword [esp + 0x194], 0
call fcn.004b7cd0
mov eax, dword [0x8b0a50]
fstp dword [esp + 0x1c]
mov dword [esp + 0xfc], eax
push 0
lea ecx, [esp + 0x104]
mov byte [esp + 0x2d0], 0x12
call fcn.00572ec0
mov eax, dword [0x8b0a50]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], eax
lea eax, [ebx + 0x1d4]
push 0
push eax
lea ecx, [esp + 0x104]
mov byte [esp + 0x2d4], 0x15
call fcn.00586600
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x100]
call fcn.004297a0
mov esi, dword [esp + 0x1c]
push 0x11
push 0
push esi
lea edx, [esp + 0x200]
push 0x3f333333
push edx
push eax
push 0
push 0
mov byte [esp + 0x2ec], 0x17
call fcn.004685b0
mov eax, dword [esp + 0x5c]
add esp, 0x20
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x488473
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x488473
push eax
call edi
add esp, 4
mov ecx, dword [esp + 0x114]
mov byte [esp + 0x2cc], 0x18
lea eax, [ecx - 0xc]
mov ecx, dword [ecx - 0xc]
cmp ecx, 0xffffffff
je 0x48849a
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x48849a
push eax
call edi
add esp, 4
mov edx, dword [esp + 0x110]
mov ecx, dword [edx - 0xc]
lea eax, [edx - 0xc]
cmp ecx, 0xffffffff
je 0x4884b9
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x4884b9
push eax
call edi
add esp, 4
lea ecx, [esp + 0x100]
call fcn.005730c0
mov eax, dword [esp + 0xfc]
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x4884e3
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x4884e3
push eax
call edi
add esp, 4
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x174]
call fcn.00401f50
push 0x11
push 0
push esi
lea edx, [esp + 0x20c]
push 0x3f333333
push edx
push eax
push 0
push 0
mov byte [esp + 0x2ec], 0x19
call fcn.004685b0
mov eax, dword [esp + 0x8c]
add esp, 0x20
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x488539
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x488539
push eax
call edi
add esp, 4
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x174]
call fcn.004297a0
push 0x11
push 0
push esi
lea edx, [esp + 0x218]
push 0x3f333333
push edx
push eax
push 0
push 0
mov byte [esp + 0x2ec], 0x1a
call fcn.004685b0
mov eax, dword [esp + 0x84]
add esp, 0x20
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x48858f
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x48858f
push eax
call edi
add esp, 4
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x174]
call fcn.00401f90
push 0x11
push 0
push esi
lea edx, [esp + 0x224]
push 0x3f333333
push edx
push eax
push 0
push 0
mov byte [esp + 0x2ec], 0x1b
call fcn.004685b0
mov eax, dword [esp + 0x80]
add esp, 0x20
add eax, 0xfffffff4
mov byte [esp + 0x2cc], 0xf
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x4885ed
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x4885ed
push eax
call edi
add esp, 4
fld dword [esp + 0x18c]
fmul dword [0x6c8a7c]
mov ecx, dword [esp + 0x188]
mov edx, dword [esp + 0x18c]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
fcom dword [0x6c8a88]
fnstsw ax
test ah, 1
jne 0x488625
fadd qword [0x6c8a90]
jmp 0x48862b
fsub qword [0x6c8a90]
call fcn.00658ed2
fld dword [esp + 0x188]
fmul dword [0x6c8a7c]
mov ebp, eax
fcom dword [0x6c8a88]
fnstsw ax
test ah, 1
jne 0x488654
fadd qword [0x6c8a90]
jmp 0x48865a
fsub qword [0x6c8a90]
call fcn.00658ed2
mov edi, eax
call fcn.00581aa0
test eax, eax
je 0x48867a
mov edx, dword [eax]
push 0
push 0x8a0270
mov ecx, eax
call dword [edx + 8]
jmp 0x48867f
mov eax, 0x8a0270
push ebp
push edi
push eax
lea eax, [esp + 0x68]
push eax
call fcn.00572aa0
push 0x11
push 0
push esi
lea ecx, [esp + 0x240]
push 0x3f333333
push ecx
push eax
push 0
push 0
mov byte [esp + 0x2fc], 0x1c
call fcn.004685b0
mov edx, dword [esp + 0x8c]
add esp, 0x30
mov byte [esp + 0x2cc], 0xf
mov ecx, dword [edx - 0xc]
lea eax, [edx - 0xc]
cmp ecx, 0xffffffff
je 0x4886de
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x4886de
push eax
call dword [0x6c74ac]
add esp, 4
mov ecx, dword [ebx + 0x1f8]
lea eax, [esp + 0x170]
push eax
call fcn.004bf200
lea ecx, [esp + 0x170]
call fcn.004b14e0
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx + 0x1cc]
inc eax
mov edx, dword [ecx]
push eax
mov dword [esp + 0x18], eax
call dword [edx + 0x2cc]
mov esi, dword [esp + 0x94]
mov eax, dword [esp + 0x28]
cmp esi, eax
jl 0x487da0
lea ecx, [esp + 0xd4]
call fcn.00573090
lea ecx, [esp + 0xa4]
call fcn.005758b0
mov eax, dword [esp + 0x28]
xor esi, esi
test eax, eax
jle 0x488764
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x48875b
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0x28]
inc esi
cmp esi, eax
jl 0x48874a
lea ecx, [esp + 0x24]
call fcn.005758b0
mov al, byte [esp + 0x3b]
mov esi, dword [esp + 0x20]
test al, al
je 0x488780
mov ecx, esi
call fcn.00484620
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x1cc]
inc eax
mov edx, dword [ecx]
push eax
call dword [edx + 0x2cc]
mov al, byte [esp + 0x3a]
test al, al
je 0x4887a3
mov ecx, esi
call fcn.004889d0
mov eax, dword [esi + 0x1f8]
mov edi, dword [eax + 8]
call fcn.00581aa0
test eax, eax
je 0x4887c5
mov edx, dword [eax]
push 0
push 0x8a04e4
mov ecx, eax
call dword [edx + 8]
jmp 0x4887ca
mov eax, 0x8a04e4
push edi
push eax
lea eax, [esp + 0x44]
push eax
call fcn.00572aa0
lea ecx, [esi + 0x1d4]
push eax
lea edx, [esp + 0x2c]
push ecx
push edx
mov byte [esp + 0x2e4], 0x1d
call fcn.00571790
add esp, 0x18
mov ecx, dword [esi + 0x1d0]
push eax
mov byte [esp + 0x2d0], 0x1e
mov edx, dword [ecx]
call dword [edx + 0x3c]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x48882a
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x48882a
mov edi, dword [0x6c74ac]
push eax
call edi
add esp, 4
jmp 0x488830
mov edi, dword [0x6c74ac]
mov ecx, dword [esp + 0x3c]
mov byte [esp + 0x2cc], 0xf
lea eax, [ecx - 0xc]
mov ecx, dword [ecx - 0xc]
cmp ecx, 0xffffffff
je 0x488854
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x488854
push eax
call edi
add esp, 4
mov ecx, dword [esi + 0x1cc]
push 0
mov edx, dword [ecx]
call dword [edx + 0x2cc]
mov ecx, esi
call fcn.00482fd0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x2cc], 0xe
call fcn.005754a0
lea ecx, [esp + 0xd4]
mov byte [esp + 0x2cc], 0xd
call fcn.005730c0
mov eax, dword [esp + 0x68]
add eax, 0xfffffff4
mov ecx, dword [eax]
cmp ecx, 0xffffffff
je 0x4888ae
dec ecx
test ecx, ecx
mov dword [eax], ecx
jne 0x4888ae
push eax
call edi
add esp, 4
lea ecx, [esp + 0x170]
mov byte [esp + 0x2cc], 0xb
call fcn.004b1310
lea ecx, [esp + 0x138]
mov byte [esp + 0x2cc], 0xa
call fcn.004c2f30
lea ecx, [esp + 0xb0]
mov byte [esp + 0x2cc], 9
call fcn.004c2f30
lea ecx, [esp + 0x158]
mov byte [esp + 0x2cc], 8
call fcn.0046ebd0
lea ecx, [esp + 0x120]
mov byte [esp + 0x2cc], 3
call fcn.0046ebd0
lea ecx, [esp + 0x24]
mov byte [esp + 0x2cc], 2
call fcn.005754a0
lea ecx, [esp + 0x98]
mov byte [esp + 0x2cc], 1
call fcn.005754a0
lea ecx, [esp + 0x50]
mov byte [esp + 0x2cc], 0
call fcn.005754a0
lea ecx, [esp + 0x40]
mov dword [esp + 0x2cc], 0xffffffff
call fcn.005754a0
mov ecx, dword [esp + 0x2c4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2c0
ret