Function at 0x41bf10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push ebp
sub esp, 0xf4
lea ebx, [eax + 0x130]
mov edx, dword [eax + 0x48]
cmp dword [eax + 0x10], 1
je 0x41c8a8
xor ecx, ecx
test edx, edx
jle 0x41c417
xor edx, edx
fldz
mov dword [esp + 0x1c], edx
mov dword [esp + 0x84], ecx
mov dword [esp + 0xf0], eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], edi
fstp dword [esp + 0x38]
xor ecx, ecx
mov dword [esp + 0x5c], ecx
xor esi, esi
cmp dword [ebx + 0x12b4], 2
je 0x41c422
mov eax, ecx
mov edx, dword [ebx + 0x1444]
mov edi, dword [ebx + esi*4 + 0x1448]
mov ebp, dword [edx + esi*4]
test ebp, ebp
jle 0x41c0eb
mov dword [esp + 0x20], esi
xor edx, edx
mov dword [esp + 0x70], ebp
mov esi, dword [ebx + ecx*4 + 0x1200]
test esi, esi
mov ebp, edi
jge 0x41bfa2
mov esi, 0
test edi, edi
jle 0x41c0d3
mov dword [esp + 0x64], ebx
mov dword [esp + 0x98], esi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x68], edx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c]
test edx, edx
jne 0x41c073
mov eax, dword [ebx + 0xcba4]
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebx + 0x128], ecx
lea eax, [esi + ebx + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebx + 0x124]
jne 0x41c063
mov ecx, dword [ebx + 0x11c]
add eax, 0x2ef8
push dword [ebx + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x124]
mov edi, dword [ebx + 0xcba4]
inc edi
mov ecx, dword [ebx + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebx + 0x128], ecx
mov dword [ebx + 0x124], esi
mov dword [ebx + 0xcba4], edi
mov eax, dword [ebx + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebx + 0x12c]
cmp edx, ebp
mov esi, edx
mov eax, dword [ebx + 0x128]
jl 0x41c081
mov esi, ebp
sub ebp, esi
sub edx, esi
mov dword [esp + 0x9c], eax
mov ecx, ebp
mov dword [ebx + 0x12c], edx
mov eax, dword [esp + 0x98]
mov edi, dword [ebx + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0x9c]
shl eax, cl
or byte [edx + edi], al
add dword [ebx + 0x124], esi
test ebp, ebp
jg 0x41bfcc
mov edi, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x64]
inc edx
add eax, edi
inc ecx
cmp edx, dword [esp + 0x70]
jl 0x41bf90
lea esi, [esi]
mov esi, dword [esp + 0x20]
inc esi
cmp esi, 4
jl 0x41bf6e
mov dword [esp + 0x5c], eax
mov edx, dword [ebx + 0x12d8]
mov eax, dword [esp + 0xf0]
mov ebp, dword [ebx + 0x12dc]
mov edi, dword [ebx + 0x12a4]
mov esi, dword [eax + edx*4 + 0x5374]
cmp esi, edi
lea ecx, [ebp + edx + 1]
mov edx, dword [eax + ecx*4 + 0x5374]
jl 0x41c12a
mov esi, edi
xor ecx, ecx
cmp edx, edi
jl 0x41c132
mov edx, edi
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], esi
mov edx, dword [ebx + 0x12bc]
mov dword [esp + 0x10], ebx
call fcn.0041d7c0
mov ebp, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c0]
call fcn.0041d7c0
mov esi, eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x14]
mov edx, dword [ebx + 0x12c4]
call fcn.0041d7c0
add ebp, esi
add ebp, eax
mov esi, dword [ebx + 0x12a8]
mov edi, esi
mov eax, dword [ebx + 0x12a4]
sub edi, eax
sar edi, 1
shr edi, 0x1e
sub edi, eax
add edi, esi
mov edx, dword [ebx + 0x12e8]
shl edx, 4
sar edi, 2
mov dword [esp + 0x54], edx
lea edx, [ebx + eax*4]
xor eax, eax
lea ecx, [edx + 0x900]
test edi, edi
jle 0x41c3d8
fld dword [esp + 0x38]
mov esi, dword [esp + 0x54]
mov dword [esp + 0x58], eax
mov dword [esp + 0x18], ebp
mov esi, dword [esi + str.Metal]
mov dword [esp + 0x64], ebx
mov ebx, edx
cmp dword [ecx], 0
je 0x41c1fd
mov ebp, 8
fcom dword [ebx]
fnstsw ax
xor edx, edx
sahf
seta dl
jmp 0x41c201
xor edx, edx
xor ebp, ebp
cmp dword [ecx + 4], 0
je 0x41c223
add ebp, 4
fcom dword [ebx + 4]
fnstsw ax
mov dword [esp + 0x50], ebp
lea ebp, [edx + edx]
sahf
lea edx, [edx + edx + 1]
ja 0x41c21f
mov edx, ebp
mov ebp, dword [esp + 0x50]
cmp dword [ecx + 8], 0
je 0x41c245
add ebp, 2
fcom dword [ebx + 8]
fnstsw ax
mov dword [esp + 0x50], ebp
lea ebp, [edx + edx]
sahf
lea edx, [edx + edx + 1]
ja 0x41c241
mov edx, ebp
mov ebp, dword [esp + 0x50]
cmp dword [ecx + 0xc], 0
je 0x41c265
inc ebp
fcom dword [ebx + 0xc]
fnstsw ax
mov dword [esp + 0x50], ebp
lea ebp, [edx + edx]
sahf
lea edx, [edx + edx + 1]
ja 0x41c261
mov edx, ebp
mov ebp, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
add ecx, 0x10
add ebx, 0x10
mov eax, dword [eax + 0x468e88]
movzx eax, word [eax + ebp*2]
add edx, eax
movzx eax, byte [ebp + esi]
test eax, eax
jle 0x41c3bd
mov dword [esp + 0x50], ebp
mov dword [esp + 0x90], edx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], ebx
mov ebx, eax
mov ebp, dword [esp + 0xf0]
fstp st(0)
mov edx, dword [ebp + 0x12c]
test edx, edx
jne 0x41c34e
mov esi, dword [ebp + 0xcba4]
mov edx, dword [ebp + 0x128]
mov dword [ebp + 0x12c], 8
lea edi, [esi + esi*2]
shl edi, 4
lea ecx, [edx + 1]
mov dword [ebp + 0x128], ecx
lea eax, [edi + ebp + 0x6cb0]
mov esi, dword [eax + 0x2ef0]
cmp esi, dword [ebp + 0x124]
jne 0x41c33e
mov ecx, dword [ebp + 0x11c]
add eax, 0x2ef8
push dword [ebp + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov esi, dword [ebp + 0x18]
mov edx, dword [ebp + 0x124]
mov ecx, dword [ebp + 0x128]
add ecx, esi
mov dword [ebp + 0x128], ecx
lea edi, [edx + esi*8]
mov edx, dword [ebp + 0xcba4]
inc edx
movzx edx, dl
mov dword [ebp + 0x124], edi
mov dword [ebp + 0xcba4], edx
mov edx, dword [ebp + 0x11c]
mov byte [ecx + edx], 0
mov edx, dword [ebp + 0x12c]
cmp edx, ebx
mov esi, edx
mov eax, dword [ebp + 0x128]
jl 0x41c35c
mov esi, ebx
sub ebx, esi
sub edx, esi
mov dword [esp + 0x94], eax
mov ecx, ebx
mov dword [ebp + 0x12c], edx
mov eax, dword [esp + 0x90]
mov edi, dword [ebp + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0x94]
shl eax, cl
or byte [edx + edi], al
add dword [ebp + 0x124], esi
test ebx, ebx
jg 0x41c2aa
fld dword [esp + 0x38]
mov eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
mov esi, dword [eax + str.Metal]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x44]
movzx eax, byte [ebp + esi]
dec edi
add dword [esp + 0x58], eax
test edi, edi
jg 0x41c1e7
mov eax, dword [esp + 0x58]
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x64]
fstp st(0)
mov edx, dword [esp + 0x5c]
add ebx, 0x1484
add edx, dword [esp + 0x84]
add edx, ebp
mov ebp, dword [esp + 0xf0]
mov ecx, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x1c], ecx
add eax, edx
mov dword [esp + 0x84], eax
cmp ecx, dword [ebp + 0x48]
jl 0x41bf57
mov ecx, eax
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
mov eax, ecx
add esp, 0xf4
pop ebp
pop ebx
ret
mov ebp, dword [ebx + 0x1444]
mov eax, 0x55555556
mov edi, dword [ebp + esi*4]
imul edi
sar edi, 0x1f
sub edx, edi
mov ebp, dword [ebx + esi*4 + 0x1448]
test edx, edx
jle 0x41c842
mov dword [esp + 0x34], edx
lea edi, [ebp + ebp*2]
mov dword [esp + 0x30], edi
xor eax, eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x64], ebx
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x64]
lea esi, [ecx*8]
lea esi, [esi + ecx*4]
mov edi, dword [esi + ebx + 0x1200]
test edi, edi
mov ebx, ebp
jge 0x41c481
mov edi, 0
test ebp, ebp
jle 0x41c5ac
mov dword [esp + 0x28], ebp
mov dword [esp + 0x74], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], edx
mov ebp, dword [esp + 0xf0]
mov edx, dword [ebp + 0x12c]
test edx, edx
jne 0x41c54f
mov eax, dword [ebp + 0xcba4]
mov edx, dword [ebp + 0x128]
mov dword [ebp + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebp + 0x128], ecx
lea eax, [esi + ebp + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebp + 0x124]
jne 0x41c53f
mov ecx, dword [ebp + 0x11c]
add eax, 0x2ef8
push dword [ebp + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x124]
mov edi, dword [ebp + 0xcba4]
inc edi
mov ecx, dword [ebp + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebp + 0x128], ecx
mov dword [ebp + 0x124], esi
mov dword [ebp + 0xcba4], edi
mov eax, dword [ebp + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebp + 0x12c]
cmp edx, ebx
mov edi, edx
mov esi, dword [ebp + 0x11c]
jl 0x41c55d
mov edi, ebx
sub ebx, edi
sub edx, edi
mov dword [esp + 0x80], esi
mov ecx, ebx
mov dword [ebp + 0x12c], edx
mov eax, dword [esp + 0x74]
mov esi, dword [ebp + 0x128]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0x80]
shl eax, cl
or byte [esi + edx], al
add dword [ebp + 0x124], edi
test ebx, ebx
jg 0x41c4a8
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x64]
mov edi, dword [esi + ebx + 0x1204]
test edi, edi
mov ebx, ebp
jge 0x41c5c2
mov edi, 0
test ebp, ebp
jle 0x41c6ed
mov dword [esp + 0x28], ebp
mov dword [esp + 0x78], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], edx
mov ebp, dword [esp + 0xf0]
mov edx, dword [ebp + 0x12c]
test edx, edx
jne 0x41c690
mov eax, dword [ebp + 0xcba4]
mov edx, dword [ebp + 0x128]
mov dword [ebp + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebp + 0x128], ecx
lea eax, [esi + ebp + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebp + 0x124]
jne 0x41c680
mov ecx, dword [ebp + 0x11c]
add eax, 0x2ef8
push dword [ebp + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x124]
mov edi, dword [ebp + 0xcba4]
inc edi
mov ecx, dword [ebp + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebp + 0x128], ecx
mov dword [ebp + 0x124], esi
mov dword [ebp + 0xcba4], edi
mov eax, dword [ebp + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebp + 0x12c]
cmp edx, ebx
mov edi, edx
mov esi, dword [ebp + 0x11c]
jl 0x41c69e
mov edi, ebx
sub ebx, edi
sub edx, edi
mov dword [esp + 0x88], esi
mov ecx, ebx
mov dword [ebp + 0x12c], edx
mov eax, dword [esp + 0x78]
mov esi, dword [ebp + 0x128]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0x88]
shl eax, cl
or byte [esi + edx], al
add dword [ebp + 0x124], edi
test ebx, ebx
jg 0x41c5e9
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x64]
mov esi, dword [esi + ebx + 0x1208]
test esi, esi
mov ebx, ebp
jge 0x41c703
mov esi, 0
test ebp, ebp
jle 0x41c826
mov dword [esp + 0x28], ebp
mov dword [esp + 0x7c], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], edx
mov ebp, dword [esp + 0xf0]
mov edx, dword [ebp + 0x12c]
test edx, edx
jne 0x41c7cd
mov eax, dword [ebp + 0xcba4]
mov edx, dword [ebp + 0x128]
mov dword [ebp + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebp + 0x128], ecx
lea eax, [esi + ebp + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebp + 0x124]
jne 0x41c7bd
mov ecx, dword [ebp + 0x11c]
add eax, 0x2ef8
push dword [ebp + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x124]
mov edi, dword [ebp + 0xcba4]
inc edi
mov ecx, dword [ebp + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebp + 0x128], ecx
mov dword [ebp + 0x124], esi
mov dword [ebp + 0xcba4], edi
mov eax, dword [ebp + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebp + 0x12c]
cmp edx, ebx
mov esi, edx
mov eax, dword [ebp + 0x128]
jl 0x41c7db
mov esi, ebx
sub ebx, esi
sub edx, esi
mov dword [esp + 0x8c], eax
mov ecx, ebx
mov dword [ebp + 0x12c], edx
mov eax, dword [esp + 0x7c]
mov edi, dword [ebp + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0x8c]
shl eax, cl
or byte [edx + edi], al
add dword [ebp + 0x124], esi
test ebx, ebx
jg 0x41c726
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
inc eax
inc ecx
add edx, dword [esp + 0x30]
cmp eax, dword [esp + 0x34]
jl 0x41c461
mov dword [esp + 0x5c], edx
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0x64]
inc esi
cmp esi, 4
jl 0x41c422
mov eax, dword [esp + 0xf0]
xor ecx, ecx
mov ebp, dword [ebx + 0x12a4]
mov edx, dword [ebx + 0x12bc]
mov esi, dword [eax + 0x53d8]
lea esi, [esi + esi*2]
cmp esi, ebp
jl 0x41c870
mov esi, ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0041d7c0
mov ebp, eax
mov edi, dword [ebx + 0x12a4]
mov ecx, esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c0]
call fcn.0041d7c0
add ebp, eax
jmp 0x41c18f
xor ecx, ecx
fldz
xor ebp, ebp
mov dword [esp + 0x84], ecx
xor ebx, ebx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], edi
fstp dword [esp + 0xbc]
test edx, edx
jle 0x41cf91
xor edx, edx
lea esi, [ebx + eax + 0x130]
mov dword [esp + 0x80], edx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0xf0], eax
mov eax, dword [esi + 0x12b0]
xor ebp, ebp
mov ecx, dword [esi + 0x1304]
test ecx, ecx
mov edx, dword [eax*4 + 0x46cbc0]
mov edi, dword [eax*4 + 0x46cc00]
mov eax, ebp
jle 0x41ca85
mov dword [esp + 0x90], edi
mov edi, dword [esi + eax*4 + 0x1200]
cmp edi, 0xffffffff
je 0x41ca75
mov ebx, edx
test edx, edx
jle 0x41ca73
mov dword [esp + 0x98], ebp
mov dword [esp + 0xd8], edi
mov dword [esp + 0x94], eax
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], esi
mov ebp, dword [esp + 0xf0]
mov edx, dword [ebp + 0x12c]
test edx, edx
jne 0x41ca05
mov eax, dword [ebp + 0xcba4]
mov edx, dword [ebp + 0x128]
mov dword [ebp + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebp + 0x128], ecx
lea eax, [esi + ebp + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebp + 0x124]
jne 0x41c9f5
mov ecx, dword [ebp + 0x11c]
add eax, 0x2ef8
push dword [ebp + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x124]
mov edi, dword [ebp + 0xcba4]
inc edi
mov ecx, dword [ebp + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebp + 0x128], ecx
mov dword [ebp + 0x124], esi
mov dword [ebp + 0xcba4], edi
mov eax, dword [ebp + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebp + 0x12c]
cmp edx, ebx
mov esi, edx
mov eax, dword [ebp + 0x128]
jl 0x41ca13
mov esi, ebx
sub ebx, esi
sub edx, esi
mov dword [esp + 0xe0], eax
mov ecx, ebx
mov dword [ebp + 0x12c], edx
mov eax, dword [esp + 0xd8]
mov edi, dword [ebp + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0xe0]
shl eax, cl
or byte [edx + edi], al
add dword [ebp + 0x124], esi
test ebx, ebx
jg 0x41c95e
mov esi, dword [esp + 0x88]
mov ebp, dword [esp + 0x98]
mov eax, dword [esp + 0x94]
mov edx, dword [esp + 0x8c]
mov ecx, dword [esi + 0x1304]
add ebp, edx
inc eax
cmp eax, ecx
jl 0x41c91a
mov edi, dword [esp + 0x90]
mov edx, dword [esi + 0x12fc]
cmp eax, edx
jge 0x41cbf7
mov ecx, dword [esi + eax*4 + 0x1200]
cmp ecx, 0xffffffff
je 0x41cbee
mov ebx, edi
test edi, edi
jle 0x41cbec
mov dword [esp + 0x98], ebp
mov dword [esp + 0xdc], ecx
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], edi
mov dword [esp + 0x88], esi
mov ebp, dword [esp + 0xf0]
mov edx, dword [ebp + 0x12c]
test edx, edx
jne 0x41cb7e
mov eax, dword [ebp + 0xcba4]
mov edx, dword [ebp + 0x128]
mov dword [ebp + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebp + 0x128], ecx
lea eax, [esi + ebp + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebp + 0x124]
jne 0x41cb6e
mov ecx, dword [ebp + 0x11c]
add eax, 0x2ef8
push dword [ebp + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x124]
mov edi, dword [ebp + 0xcba4]
inc edi
mov ecx, dword [ebp + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebp + 0x128], ecx
mov dword [ebp + 0x124], esi
mov dword [ebp + 0xcba4], edi
mov eax, dword [ebp + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebp + 0x12c]
cmp edx, ebx
mov esi, edx
mov eax, dword [ebp + 0x128]
jl 0x41cb8c
mov esi, ebx
sub ebx, esi
sub edx, esi
mov dword [esp + 0xe4], eax
mov ecx, ebx
mov dword [ebp + 0x12c], edx
mov eax, dword [esp + 0xdc]
mov edi, dword [ebp + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0xe4]
shl eax, cl
or byte [edx + edi], al
add dword [ebp + 0x124], esi
test ebx, ebx
jg 0x41cad7
mov esi, dword [esp + 0x88]
mov ebp, dword [esp + 0x98]
mov eax, dword [esp + 0x94]
mov edi, dword [esp + 0x90]
mov edx, dword [esi + 0x12fc]
add ebp, edi
inc eax
cmp eax, edx
jl 0x41ca93
cmp dword [esi + 0x12b4], 2
je 0x41cfa5
mov ecx, dword [esi + 0x12d8]
mov eax, dword [esp + 0xf0]
mov edx, dword [esi + 0x12dc]
mov edi, dword [esi + 0x12a4]
mov ebx, dword [eax + ecx*4 + 0x5374]
cmp ebx, edi
lea edx, [edx + ecx + 1]
mov ecx, dword [eax + edx*4 + 0x5374]
jl 0x41cc35
mov ebx, edi
cmp ecx, edi
mov edx, dword [esi + 0x12bc]
jl 0x41cc41
mov ecx, edi
mov dword [esp + 0x7c], ecx
xor ecx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.0041d7c0
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x7c]
mov ecx, ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0xf0]
mov edx, dword [esi + 0x12c0]
call fcn.0041d7c0
mov ebx, eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esi + 0x12c4]
call fcn.0041d7c0
add ebp, dword [esp + 0x78]
add ebp, ebx
mov edx, dword [esi + 0x12a4]
add ebp, eax
mov edi, dword [esi + 0x12a8]
mov ebx, edi
sub ebx, edx
sar ebx, 1
shr ebx, 0x1e
sub ebx, edx
add ebx, edi
mov eax, dword [esi + 0x12e8]
shl eax, 4
sar ebx, 2
mov dword [esp + 0xd0], eax
lea eax, [esi + edx*4]
xor edx, edx
lea ecx, [eax + 0x900]
test ebx, ebx
jle 0x41cf39
fld dword [esp + 0xbc]
mov edi, dword [esp + 0xd0]
mov dword [esp + 0xd4], edx
mov dword [esp + 0x98], ebp
mov ebp, eax
mov edi, dword [edi + str.Metal]
mov dword [esp + 0x88], esi
cmp dword [ecx], 0
je 0x41cd21
mov esi, 8
fcom dword [ebp]
fnstsw ax
xor edx, edx
sahf
seta dl
jmp 0x41cd25
xor edx, edx
xor esi, esi
cmp dword [ecx + 4], 0
je 0x41cd4d
add esi, 4
fcom dword [ebp + 4]
fnstsw ax
mov dword [esp + 0xcc], esi
lea esi, [edx + edx]
sahf
lea edx, [edx + edx + 1]
ja 0x41cd46
mov edx, esi
mov esi, dword [esp + 0xcc]
cmp dword [ecx + 8], 0
je 0x41cd75
add esi, 2
fcom dword [ebp + 8]
fnstsw ax
mov dword [esp + 0xcc], esi
lea esi, [edx + edx]
sahf
lea edx, [edx + edx + 1]
ja 0x41cd6e
mov edx, esi
mov esi, dword [esp + 0xcc]
cmp dword [ecx + 0xc], 0
je 0x41cd9b
inc esi
fcom dword [ebp + 0xc]
fnstsw ax
mov dword [esp + 0xcc], esi
lea esi, [edx + edx]
sahf
lea edx, [edx + edx + 1]
ja 0x41cd94
mov edx, esi
mov esi, dword [esp + 0xcc]
mov eax, dword [esp + 0xd0]
add ecx, 0x10
add ebp, 0x10
mov eax, dword [eax + 0x468e88]
movzx eax, word [eax + esi*2]
add edx, eax
movzx eax, byte [esi + edi]
test eax, eax
jle 0x41cf12
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xcc], esi
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc0], ebp
mov ebp, eax
mov ebx, dword [esp + 0xf0]
fstp st(0)
mov edx, dword [ebx + 0x12c]
test edx, edx
jne 0x41ce92
mov esi, dword [ebx + 0xcba4]
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], 8
lea edi, [esi + esi*2]
shl edi, 4
lea ecx, [edx + 1]
mov dword [ebx + 0x128], ecx
lea eax, [edi + ebx + 0x6cb0]
mov esi, dword [eax + 0x2ef0]
cmp esi, dword [ebx + 0x124]
jne 0x41ce82
mov ecx, dword [ebx + 0x11c]
add eax, 0x2ef8
push dword [ebx + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov esi, dword [ebx + 0x18]
mov edx, dword [ebx + 0x124]
mov ecx, dword [ebx + 0x128]
add ecx, esi
mov dword [ebx + 0x128], ecx
lea edi, [edx + esi*8]
mov edx, dword [ebx + 0xcba4]
inc edx
movzx edx, dl
mov dword [ebx + 0x124], edi
mov dword [ebx + 0xcba4], edx
mov edx, dword [ebx + 0x11c]
mov byte [ecx + edx], 0
mov edx, dword [ebx + 0x12c]
cmp edx, ebp
mov esi, edx
mov eax, dword [ebx + 0x128]
jl 0x41cea0
mov esi, ebp
sub ebp, esi
sub edx, esi
mov dword [esp + 0xec], eax
mov ecx, ebp
mov dword [ebx + 0x12c], edx
mov eax, dword [esp + 0xe8]
mov edi, dword [ebx + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0xec]
shl eax, cl
or byte [edx + edi], al
add dword [ebx + 0x124], esi
test ebp, ebp
jg 0x41cdee
fld dword [esp + 0xbc]
mov edx, dword [esp + 0xd0]
mov esi, dword [esp + 0xcc]
mov ebx, dword [esp + 0xc8]
mov edi, dword [edx + str.Metal]
mov ecx, dword [esp + 0xc4]
mov ebp, dword [esp + 0xc0]
movzx eax, byte [esi + edi]
dec ebx
add dword [esp + 0xd4], eax
test ebx, ebx
jg 0x41cd0a
mov edx, dword [esp + 0xd4]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x88]
fstp st(0)
mov eax, dword [esp + 0x84]
add esi, 0x1484
add eax, ebp
add eax, edx
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0x80]
inc ecx
mov edx, dword [edx + 0x48]
cmp ecx, edx
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ecx
jl 0x41c8ed
mov ebp, dword [esp + 0x14]
inc ebp
mov ebx, dword [esp + 0x18]
add ebx, 0x2908
mov eax, dword [esp + 0xf0]
cmp ebp, 2
jl 0x41c8c6
mov ecx, dword [esp + 0x84]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
jmp 0x41c417
mov eax, dword [esp + 0xf0]
mov edi, dword [esi + 0x12bc]
mov edx, dword [esi + 0x12a4]
mov ecx, dword [eax + 0x53d8]
lea ebx, [ecx + ecx*2]
mov ecx, edi
shl ecx, 4
cmp ebx, edx
jl 0x41cfcc
mov ebx, edx
mov eax, dword [ecx + 0x468c80]
test edi, edi
mov dword [esp + 0x28], eax
je 0x41d3b7
mov dword [esp + 0x58], 0
test ebx, ebx
jle 0x41d3bf
fld dword [esp + 0xbc]
xor edx, edx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x88], esi
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x88]
mov eax, dword [esi + edx*4 + 0x900]
test eax, eax
mov esi, dword [esi + edx*4 + 0x904]
mov dword [esp + 0x74], eax
je 0x41d085
mov ebp, dword [esp + 0x88]
xor ebx, ebx
fcom dword [ebp + edx*4]
fnstsw ax
sahf
seta bl
cmp dword [esp + 0x30], 0xf
jbe 0x41d07c
mov ebp, 0xffffffff
cmp dword [esp + 0x74], 0xf
jb 0x41d078
mov eax, dword [esp + 0x74]
add eax, 0xfffffff1
movzx ecx, ax
add ecx, ecx
mov edi, dword [esp + 0x20]
or ebx, ecx
mov dword [esp + 0x74], 0xf
jmp 0x41d092
xor edi, edi
jmp 0x41d092
xor edi, edi
mov ebp, 0xffffffff
jmp 0x41d0b1
xor ebp, ebp
xor edi, edi
xor ebx, ebx
cmp dword [esp + 0x30], 0xf
jbe 0x41d0b1
cmp esi, 0xf
jb 0x41d0ac
add esi, 0xfffffff1
mov ecx, dword [esp + 0x20]
add edi, ecx
shl ebx, cl
movzx esi, si
or ebx, esi
mov esi, 0xf
mov ecx, 0x10
test esi, esi
je 0x41d0dd
mov dword [esp + 0x28], ecx
lea ecx, [ebx + ebx]
mov dword [esp + 0x34], ecx
lea ebx, [ebx + ebx + 1]
mov ecx, dword [esp + 0x88]
dec ebp
fcom dword [ecx + edx*4 + 4]
fnstsw ax
mov ecx, dword [esp + 0x28]
sahf
ja 0x41d0dd
mov ebx, dword [esp + 0x34]
imul ecx, dword [esp + 0x74]
sub edi, ebp
movzx eax, di
add esi, ecx
mov edi, dword [esp + 0x70]
mov ecx, dword [edi + 0x468c8c]
movzx ecx, byte [esi + ecx]
add ecx, ebp
mov ebp, dword [edi + 0x468c88]
movzx esi, word [ebp + esi*2]
mov ebp, ecx
jle 0x41d241
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], esi
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
fstp dword [esp + 0xbc]
mov ebx, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c]
test edx, edx
jne 0x41d1db
mov eax, dword [ebx + 0xcba4]
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebx + 0x128], ecx
lea eax, [esi + ebx + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebx + 0x124]
jne 0x41d1cb
mov ecx, dword [ebx + 0x11c]
add eax, 0x2ef8
push dword [ebx + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x124]
mov edi, dword [ebx + 0xcba4]
inc edi
mov ecx, dword [ebx + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebx + 0x128], ecx
mov dword [ebx + 0x124], esi
mov dword [ebx + 0xcba4], edi
mov eax, dword [ebx + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebx + 0x12c]
cmp edx, ebp
mov esi, edx
mov eax, dword [ebx + 0x128]
jl 0x41d1e9
mov esi, ebp
sub ebp, esi
sub edx, esi
mov dword [esp + 0xac], eax
mov ecx, ebp
mov dword [ebx + 0x12c], edx
mov eax, dword [esp + 0xa8]
mov edi, dword [ebx + 0x11c]
shr eax, cl
mov ecx, edx
mov edx, dword [esp + 0xac]
shl eax, cl
or byte [edx + edi], al
add dword [ebx + 0x124], esi
test ebp, ebp
jg 0x41d134
fld dword [esp + 0xbc]
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0xa4]
mov edx, dword [esp + 0x54]
mov ebp, eax
test eax, eax
jle 0x41d372
mov dword [esp + 0xa4], ebx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
fstp dword [esp + 0xbc]
mov ebx, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c]
test edx, edx
jne 0x41d313
mov eax, dword [ebx + 0xcba4]
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebx + 0x128], ecx
lea eax, [esi + ebx + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebx + 0x124]
jne 0x41d303
mov ecx, dword [ebx + 0x11c]
add eax, 0x2ef8
push dword [ebx + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x124]
mov edi, dword [ebx + 0xcba4]
inc edi
mov ecx, dword [ebx + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebx + 0x128], ecx
mov dword [ebx + 0x124], esi
mov dword [ebx + 0xcba4], edi
mov eax, dword [ebx + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebx + 0x12c]
cmp edx, ebp
mov esi, edx
mov eax, dword [ebx + 0x128]
jl 0x41d321
mov esi, ebp
sub ebp, esi
sub edx, esi
mov dword [esp + 0xb0], eax
mov ecx, ebp
mov dword [ebx + 0x12c], edx
mov eax, dword [esp + 0xa4]
mov edi, dword [ebx + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0xb0]
shl eax, cl
or byte [edx + edi], al
add dword [ebx + 0x124], esi
test ebp, ebp
jg 0x41d26c
fld dword [esp + 0xbc]
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x58]
add edx, 2
add ebx, ecx
add ebx, eax
mov dword [esp + 0x58], ebx
cmp edx, dword [esp + 0x5c]
jge 0x41d396
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x468c80]
jmp 0x41d019
mov esi, dword [esp + 0x88]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x98]
fstp dword [esp + 0xbc]
mov edx, dword [esi + 0x12a4]
jmp 0x41d3bf
mov dword [esp + 0x58], 0
mov eax, dword [esi + 0x12c0]
mov ecx, eax
shl ecx, 4
test eax, eax
mov edi, dword [ecx + 0x468c80]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], edi
je 0x41d7af
xor edi, edi
cmp ebx, edx
jge 0x41d7b1
fld dword [esp + 0xbc]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x60], edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x88], esi
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x88]
mov eax, dword [esi + ebx*4 + 0x900]
test eax, eax
mov esi, dword [esi + ebx*4 + 0x904]
mov dword [esp + 0x6c], eax
je 0x41d47f
mov ebp, dword [esp + 0x88]
xor edx, edx
fcom dword [ebp + ebx*4]
fnstsw ax
sahf
seta dl
cmp dword [esp + 0x2c], 0xf
jbe 0x41d476
mov ebp, 0xffffffff
cmp dword [esp + 0x6c], 0xf
jb 0x41d472
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff1
movzx ecx, ax
add ecx, ecx
mov edi, dword [esp + 0x1c]
or edx, ecx
mov dword [esp + 0x6c], 0xf
jmp 0x41d48c
xor edi, edi
jmp 0x41d48c
xor edi, edi
mov ebp, 0xffffffff
jmp 0x41d4ab
xor ebp, ebp
xor edi, edi
xor edx, edx
cmp dword [esp + 0x2c], 0xf
jbe 0x41d4ab
cmp esi, 0xf
jb 0x41d4a6
add esi, 0xfffffff1
mov ecx, dword [esp + 0x1c]
add edi, ecx
shl edx, cl
movzx esi, si
or edx, esi
mov esi, 0xf
mov ecx, 0x10
test esi, esi
je 0x41d4d7
mov dword [esp + 0x24], ecx
lea ecx, [edx + edx]
mov dword [esp + 0x38], ecx
lea edx, [edx + edx + 1]
mov ecx, dword [esp + 0x88]
dec ebp
fcom dword [ecx + ebx*4 + 4]
fnstsw ax
mov ecx, dword [esp + 0x24]
sahf
ja 0x41d4d7
mov edx, dword [esp + 0x38]
imul ecx, dword [esp + 0x6c]
sub edi, ebp
movzx eax, di
add esi, ecx
mov edi, dword [esp + 0x64]
mov ecx, dword [edi + 0x468c8c]
movzx ecx, byte [esi + ecx]
add ecx, ebp
mov ebp, dword [edi + 0x468c88]
movzx esi, word [ebp + esi*2]
mov ebp, ecx
jle 0x41d63b
mov dword [esp + 0x5c], ebx
mov dword [esp + 0xa0], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x9c], edx
fstp dword [esp + 0xbc]
mov ebx, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c]
test edx, edx
jne 0x41d5d5
mov eax, dword [ebx + 0xcba4]
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebx + 0x128], ecx
lea eax, [esi + ebx + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebx + 0x124]
jne 0x41d5c5
mov ecx, dword [ebx + 0x11c]
add eax, 0x2ef8
push dword [ebx + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x124]
mov edi, dword [ebx + 0xcba4]
inc edi
mov ecx, dword [ebx + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebx + 0x128], ecx
mov dword [ebx + 0x124], esi
mov dword [ebx + 0xcba4], edi
mov eax, dword [ebx + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebx + 0x12c]
cmp edx, ebp
mov esi, edx
mov eax, dword [ebx + 0x128]
jl 0x41d5e3
mov esi, ebp
sub ebp, esi
sub edx, esi
mov dword [esp + 0xb4], eax
mov ecx, ebp
mov dword [ebx + 0x12c], edx
mov eax, dword [esp + 0xa0]
mov edi, dword [ebx + 0x11c]
shr eax, cl
mov ecx, edx
mov edx, dword [esp + 0xb4]
shl eax, cl
or byte [edx + edi], al
add dword [ebx + 0x124], esi
test ebp, ebp
jg 0x41d52e
fld dword [esp + 0xbc]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x5c]
mov ebp, eax
test eax, eax
jle 0x41d76c
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x9c], edx
fstp dword [esp + 0xbc]
mov ebx, dword [esp + 0xf0]
mov edx, dword [ebx + 0x12c]
test edx, edx
jne 0x41d70d
mov eax, dword [ebx + 0xcba4]
mov edx, dword [ebx + 0x128]
mov dword [ebx + 0x12c], 8
lea esi, [eax + eax*2]
shl esi, 4
lea ecx, [edx + 1]
mov dword [ebx + 0x128], ecx
lea eax, [esi + ebx + 0x6cb0]
mov edi, dword [eax + 0x2ef0]
cmp edi, dword [ebx + 0x124]
jne 0x41d6fd
mov ecx, dword [ebx + 0x11c]
add eax, 0x2ef8
push dword [ebx + 0x18]
push eax
lea edx, [ecx + edx + 1]
push edx
call fcn.0040c050
add esp, 0xc
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x124]
mov edi, dword [ebx + 0xcba4]
inc edi
mov ecx, dword [ebx + 0x128]
lea esi, [eax + edx*8]
and edi, 0xff
add ecx, edx
mov dword [ebx + 0x128], ecx
mov dword [ebx + 0x124], esi
mov dword [ebx + 0xcba4], edi
mov eax, dword [ebx + 0x11c]
mov byte [ecx + eax], 0
mov edx, dword [ebx + 0x12c]
cmp edx, ebp
mov esi, edx
mov eax, dword [ebx + 0x128]
jl 0x41d71b
mov esi, ebp
sub ebp, esi
sub edx, esi
mov dword [esp + 0xb8], eax
mov ecx, ebp
mov dword [ebx + 0x12c], edx
mov eax, dword [esp + 0x9c]
mov edi, dword [ebx + 0x11c]
sar eax, cl
mov ecx, edx
mov edx, dword [esp + 0xb8]
shl eax, cl
or byte [edx + edi], al
add dword [ebx + 0x124], esi
test ebp, ebp
jg 0x41d666
fld dword [esp + 0xbc]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
add ebx, 2
add edx, ecx
add edx, eax
mov dword [esp + 0x60], edx
cmp ebx, dword [esp + 0x68]
jge 0x41d790
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x468c80]
jmp 0x41d413
mov esi, dword [esp + 0x88]
mov edi, edx
mov ebp, dword [esp + 0x98]
fstp dword [esp + 0xbc]
mov edx, dword [esi + 0x12a4]
jmp 0x41d7b1
xor edi, edi
add ebp, dword [esp + 0x58]
add ebp, edi
jmp 0x41cca6