Function at 0x4d2960
Capabilities:
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x931b6d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8c
push ebx
push esi
push edi
mov esi, ecx
lea ecx, [esp + 0x18]
mov dword [esp + 0xaa0], 0
call fcn.00911f0c
lea ecx, [esp + 0x3c]
mov byte [esp + 0xaa0], 1
call fcn.00911f0c
lea ecx, [esp + 0x38]
mov byte [esp + 0xaa0], 2
call fcn.00911f0c
lea ecx, [esp + 0x40]
mov byte [esp + 0xaa0], 3
call fcn.00911f0c
lea ecx, [esp + 0x44]
mov byte [esp + 0xaa0], 4
call fcn.00911f0c
lea ecx, [esp + 0x24]
mov byte [esp + 0xaa0], 5
call fcn.00911f0c
lea ecx, [esp + 0x34]
mov byte [esp + 0xaa0], 6
call fcn.00911f0c
lea ecx, [esp + 0x2c]
mov byte [esp + 0xaa0], 7
call fcn.00911f0c
lea ecx, [esp + 0x28]
mov byte [esp + 0xaa0], 8
call fcn.00911f0c
lea ecx, [esp + 0x30]
mov byte [esp + 0xaa0], 9
call fcn.00911f0c
lea ecx, [esp + 0x20]
mov byte [esp + 0xaa0], 0xa
call fcn.00911f0c
push 0
lea ecx, [esp + 0x1dc]
mov byte [esp + 0xaa4], 0xb
call fcn.00735050
push fcn.00911ee2
push fcn.00911f0c
push 0x64
lea eax, [esp + 0x54]
push 4
push eax
mov byte [esp + 0xab4], 0xc
call fcn.00912870
push 2
push 0xa
push 0x25
lea ecx, [esp + 0x30]
push 0xa771b0
push ecx
mov byte [esp + 0xab4], 0xd
mov dword [0xa8e738], 2
call fcn.00911f42
push 3
push 0xa
push 0x25
lea edx, [esp + 0x4c]
push 0xa771b0
push edx
call fcn.00911f42
push 2
push 0xa
push 0x25
lea eax, [esp + 0x58]
push 0xa771b0
push eax
call fcn.00911f42
mov edi, dword [ebp + 0x1c]
lea ecx, [esp + 0x84]
add esp, 0x3c
lea ebx, [esp + 0x48]
sub edi, ecx
mov dword [esp + 0x1c], 0x64
lea edx, [edi + ebx]
mov ecx, ebx
push edx
call fcn.00911f3c
mov eax, dword [esp + 0x1c]
add ebx, 4
dec eax
mov dword [esp + 0x1c], eax
jne 0x4d2ae6
lea eax, [esp + 0x58]
lea ecx, [esp + 0x28]
push eax
call fcn.00911f3c
push 0xa907a4
push str.dedw
lea ecx, [esp + 0x30]
call fcn.009121a0
mov ax, word [esi + 0x2fb8]
test ax, ax
je 0x4d3937
cmp ax, 8
je 0x4d3937
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
cmp ecx, eax
jle 0x4d2b96
fild dword [ebp + 0x10]
lea ecx, [esp + 0x18]
fmul qword [0x9cb9b0]
fidiv dword [ebp + 0xc]
fstp qword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
push edx
push eax
push str.mso_height_source:userset_height:_4.2fpt
push ecx
call fcn.00911f42
mov edx, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x78]
push edx
push str.height:14.25pt
call fcn.009121a0
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x7c]
push eax
push str.height:14.25pt
call fcn.009121a0
lea ecx, [esp + 0x78]
push 0xa77bb0
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x25
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea eax, [esi + 0x2fd8]
lea ecx, [esp + 0x7c]
push eax
push str.dexmmc
call fcn.009121a0
lea ecx, [esp + 0x7c]
push 0xa77bb0
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x26
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
cmp word [esi + 0x2fb8], 3
jne 0x4d2c4e
mov eax, dword [esi + 0x2fc4]
mov ecx, dword [esi + 0x2fc0]
push eax
push ecx
lea edx, [esp + 0x20]
push str.__4.0f
push edx
call fcn.00911f42
add esp, 0x10
jmp 0x4d2f05
mov ax, word [esi + 0x2fba]
cmp ax, 0x51
je 0x4d2de0
cmp ax, 0x42
je 0x4d2de0
cmp ax, 0x43
je 0x4d2de0
cmp ax, 0x55
je 0x4d2de0
cmp ax, 0x57
je 0x4d2de0
cmp ax, 0x4d
je 0x4d2de0
cmp ax, 0x52
mov al, byte [esi + 0x3020]
jne 0x4d2cee
cmp al, 1
jne 0x4d2cc1
mov eax, dword [esi + 0x2fc4]
mov ecx, dword [esi + 0x2fc0]
movsx edx, word [esi + 0x2fbc]
push eax
push ecx
push edx
push str._1d___1.0f_H_
jmp 0x4d2d43
mov ecx, dword [esi + 0x2fc4]
mov edx, dword [esi + 0x2fc0]
movsx eax, word [esi + 0x2fbc]
push ecx
push edx
push eax
lea ecx, [esp + 0x24]
push str._1d___4.0f
push ecx
call fcn.00911f42
add esp, 0x14
jmp 0x4d2f05
mov edx, dword [esi + 0x2fc0]
cmp al, 1
mov eax, dword [esi + 0x2fc4]
mov dword [esp + 0xc], edx
mov ecx, eax
mov dword [esp + 0x10], eax
push ecx
push edx
mov ecx, esi
jne 0x4d2d7e
call fcn.0068e470
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubr qword [esp + 0xc]
fld dword [esi + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4d2d55
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
movsx edx, word [esi + 0x2fbc]
push eax
push ecx
push edx
push str._2d___1.0f_H_
lea eax, [esp + 0x28]
push eax
call fcn.00911f42
add esp, 0x14
jmp 0x4d2f05
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
movsx eax, word [esi + 0x2fbc]
push ecx
push edx
push eax
lea ecx, [esp + 0x24]
push str._2d___4.3f_H_
push ecx
call fcn.00911f42
add esp, 0x14
jmp 0x4d2f05
call fcn.0068e470
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubr qword [esp + 0xc]
fld dword [esi + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4d2db7
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
movsx edx, word [esi + 0x2fbc]
push eax
push ecx
push edx
push str._2d___7.0f
jmp 0x4d2d43
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
movsx eax, word [esi + 0x2fbc]
push ecx
push edx
push eax
lea ecx, [esp + 0x24]
push str._2d___7.3f
push ecx
call fcn.00911f42
add esp, 0x14
jmp 0x4d2f05
cmp byte [esi + 0x3020], 1
jne 0x4d2e79
mov eax, dword [esi + 0x2fc4]
mov edx, dword [esi + 0x2fc0]
mov ecx, eax
mov dword [esp + 0xc], edx
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.0068e470
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubr qword [esp + 0xc]
fld dword [esi + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4d2e50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
movsx edx, word [esi + 0x2fbe]
push eax
push ecx
movsx eax, word [esi + 0x2fbc]
push edx
push eax
lea ecx, [esp + 0x28]
push str._1d__1d___1.0f_H_
push ecx
jmp 0x4d2efd
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
movsx ecx, word [esi + 0x2fbe]
push edx
push eax
movsx edx, word [esi + 0x2fbc]
push ecx
push edx
lea eax, [esp + 0x28]
push str._1d__1d___4.3f_H_
push eax
jmp 0x4d2efd
mov edx, dword [esi + 0x2fc4]
mov ecx, dword [esi + 0x2fc0]
mov eax, edx
mov dword [esp + 0xc], ecx
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x18], edx
call fcn.0068e470
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
fsubr qword [esp + 0xc]
fld dword [esi + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4d2ed9
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
movsx ecx, word [esi + 0x2fbe]
push edx
push eax
movsx edx, word [esi + 0x2fbc]
push ecx
push edx
lea eax, [esp + 0x28]
push str._1d__1d___4.0f
push eax
jmp 0x4d2efd
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
movsx eax, word [esi + 0x2fbe]
push ecx
push edx
movsx ecx, word [esi + 0x2fbc]
push eax
push ecx
lea edx, [esp + 0x28]
push str._1d__1d___4.0f
push edx
call fcn.00911f42
add esp, 0x18
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x80]
push eax
push str.dexmbh
call fcn.009121a0
lea ecx, [esp + 0x80]
push 0xa77bb0
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x27
call fcn.0091206e
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea eax, [esi + 0x3015]
lea ecx, [esp + 0x20]
push eax
call fcn.00911f06
lea ecx, [esp + 0xc]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov byte [esp + 0xaa0], 0x28
mov edi, 0xa76f28
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d2faf
test cl, cl
je 0x4d2fab
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d2faf
add eax, 2
add edi, 2
test cl, cl
jne 0x4d2f87
xor eax, eax
jmp 0x4d2fb4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4d300e
lea eax, [esp + 0x1c]
push 2
push eax
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov edi, 0xa77194
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d2ff7
test cl, cl
je 0x4d2ff3
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d2ff7
add eax, 2
add edi, 2
test cl, cl
jne 0x4d2fcf
xor eax, eax
jmp 0x4d2ffc
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete bl
call fcn.00911ee2
test bl, bl
je 0x4d3010
mov bl, 1
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
test bl, bl
je 0x4d30a0
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0xc]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x29
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea edx, [esp + 0x18]
push str._sup_2__sup_
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x2a
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov ecx, dword [esp + 0x18]
push ecx
jmp 0x4d31da
lea edx, [esp + 0x1c]
push 2
push edx
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov byte [esp + 0xaa0], 0x2b
mov edi, 0xa76f34
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d30e7
test cl, cl
je 0x4d30e3
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d30e7
add eax, 2
add edi, 2
test cl, cl
jne 0x4d30bf
xor eax, eax
jmp 0x4d30ec
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4d3146
lea eax, [esp + 0xc]
push 2
push eax
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov edi, 0xa77190
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d312f
test cl, cl
je 0x4d312b
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d312f
add eax, 2
add edi, 2
test cl, cl
jne 0x4d3107
xor eax, eax
jmp 0x4d3134
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0xc]
sete bl
call fcn.00911ee2
test bl, bl
je 0x4d3148
mov bl, 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
test bl, bl
je 0x4d31d5
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0xc]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x2c
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea edx, [esp + 0x18]
push str._sup_3__sup_
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x2d
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov ecx, dword [esp + 0x18]
push ecx
jmp 0x4d31da
mov edx, dword [esp + 0x20]
push edx
push str.dedw
lea ecx, [esp + 0x8c]
call fcn.009121a0
lea eax, [esp + 0x84]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x2e
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov edx, dword [esi + 0x3044]
mov eax, dword [esi + 0x3040]
push edx
push eax
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d32ef
mov ebx, 3
lea ecx, [esp + 0x2c]
push ebx
push 0xa
push 0x25
push 0xa771b0
push ecx
call fcn.00911f42
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x3044]
mov ecx, dword [esi + 0x3040]
mov edi, dword [esp + 0x40]
add esp, 0x14
push edx
push eax
push ecx
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x20]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x5c]
push eax
push str.qdgcl
call fcn.009121a0
lea ecx, [esp + 0x5c]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x2f
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
jmp 0x4d332e
lea eax, [esp + 0x28]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x30
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov ebx, 3
fld qword [esi + 0x3078]
fmul qword [esi + 0x3040]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d33e9
cmp word [esi + 0x2fb8], bx
je 0x4d33e9
mov edx, dword [0xa8e738]
mov edi, dword [esp + 0x24]
fld qword [esi + 0x3078]
fmul qword [esi + 0x3040]
push edx
mov ecx, esi
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea eax, [esp + 0x20]
fstp qword [esp]
push edi
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x28]
add esp, 0x10
push ecx
push str.qdrg
lea ecx, [esp + 0x68]
call fcn.009121a0
lea edx, [esp + 0x60]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x31
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d341e
lea ecx, [esp + 0x28]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x32
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
cmp word [esi + 0x2fb8], bx
fld qword [esi + 0x3040]
jne 0x4d351a
fmul qword [esi + 0x3068]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d34e0
mov eax, dword [0xa8e738]
mov edi, dword [esp + 0x24]
fld qword [esi + 0x3040]
fmul qword [esi + 0x3068]
push eax
mov ecx, esi
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea ecx, [esp + 0x20]
fstp qword [esp]
push edi
push ecx
call fcn.00911f42
mov edx, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x64]
push edx
push str.qdcl
call fcn.009121a0
lea eax, [esp + 0x64]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x33
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d35f7
lea edx, [esp + 0x28]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x34
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d35f7
fmul qword [esi + 0x3080]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d35c2
mov ecx, dword [0xa8e738]
mov edi, dword [esp + 0x24]
fld qword [esi + 0x3040]
fmul qword [esi + 0x3080]
push ecx
mov ecx, esi
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x20]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x64]
push eax
push str.qdcl
call fcn.009121a0
lea ecx, [esp + 0x64]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x35
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d35f7
lea eax, [esp + 0x28]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x36
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
fld qword [esi + 0x3088]
fmul qword [esi + 0x3040]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d36b7
cmp word [esi + 0x2fb8], bx
je 0x4d36b7
mov edx, dword [0xa8e738]
mov edi, dword [esp + 0x24]
fld qword [esi + 0x3088]
fmul qword [esi + 0x3040]
push edx
mov ecx, esi
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea eax, [esp + 0x20]
fstp qword [esp]
push edi
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x28]
add esp, 0x10
push ecx
push str.qdjx
lea ecx, [esp + 0x70]
call fcn.009121a0
lea edx, [esp + 0x68]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x37
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d36ec
lea ecx, [esp + 0x28]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x38
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
cmp word [esi + 0x2fb8], bx
jne 0x4d3702
fld qword [esi + 0x3068]
jmp 0x4d3714
fld qword [esi + 0x3080]
fadd qword [esi + 0x3088]
fadd qword [esi + 0x3078]
fmul qword [esi + 0x3040]
mov ecx, esi
fstp qword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
push edi
push ebx
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d37fa
cmp word [esi + 0x2fba], 0x52
jne 0x4d3780
cmp word [esi + 0x2fbc], 0xf
jne 0x4d3780
mov ecx, dword [0xa8e738]
mov eax, dword [esp + 0x24]
push ecx
push edi
push ebx
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.004126e0
mov edx, dword [esp + 0xc]
sub esp, 8
lea eax, [esp + 0x20]
fstp qword [esp]
push edx
push eax
jmp 0x4d37a8
mov edx, dword [0xa8e738]
mov ecx, dword [esp + 0x24]
push edx
mov dword [esp + 0x10], ecx
push edi
push ebx
mov ecx, esi
call fcn.004126e0
mov eax, dword [esp + 0xc]
sub esp, 8
lea ecx, [esp + 0x20]
fstp qword [esp]
push eax
push ecx
call fcn.00911f42
mov edx, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x6c]
push edx
push str.qdxj
call fcn.009121a0
lea eax, [esp + 0x6c]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x39
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d382f
lea edx, [esp + 0x28]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x3a
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
mov ecx, dword [esi + 0x30ac]
mov edx, dword [esi + 0x30a8]
push ecx
push edx
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d38fd
mov eax, dword [0xa8e738]
mov ecx, dword [esi + 0x75c]
push eax
push ecx
push 0x25
lea edx, [esp + 0x30]
push 0xa771b0
push edx
call fcn.00911f42
mov eax, dword [0xa8e738]
mov ecx, dword [esi + 0x30ac]
mov edx, dword [esi + 0x30a8]
mov edi, dword [esp + 0x38]
add esp, 0x14
push eax
push ecx
push edx
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea eax, [esp + 0x20]
fstp qword [esp]
push edi
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x28]
add esp, 0x10
push ecx
push str.qdzhdj
lea ecx, [esp + 0x78]
call fcn.009121a0
lea edx, [esp + 0x70]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x3b
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d439f
lea ecx, [esp + 0x28]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x3c
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d439f
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
cmp eax, edi
jle 0x4d3980
fild dword [ebp + 0x10]
lea edx, [esp + 0x18]
fmul qword [0x9cb9b0]
fidiv dword [ebp + 0xc]
fstp qword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
push eax
push ecx
push str.mso_height_source:userset_height:_4.2fpt
push edx
call fcn.00911f42
mov eax, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x48]
push eax
push str.height:14.25pt
call fcn.009121a0
lea ecx, [esp + 0x48]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0xe
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
push edi
lea eax, [esp + 0x34]
push str.rowspan_d
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x3c]
add esp, 0xc
push ecx
push str.rowspan5
lea ecx, [esp + 0x54]
call fcn.009121a0
mov edx, dword [ebp + 0x20]
lea ecx, [esp + 0x4c]
push edx
push str.qdxmmc
call fcn.009121a0
lea eax, [esp + 0x4c]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0xf
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
push 0xa77188
push str.dexmmc
lea ecx, [esp + 0x58]
call fcn.009121a0
lea edx, [esp + 0x50]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x10
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
push 0xa907a4
push str.dexmbh
lea ecx, [esp + 0x5c]
call fcn.009121a0
lea ecx, [esp + 0x54]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x11
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea eax, [esi + 0x3015]
lea ecx, [esp + 0x20]
push eax
call fcn.00911f06
lea ecx, [esp + 0x1c]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov byte [esp + 0xaa0], 0x12
mov edi, 0xa76f28
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d3b1d
test cl, cl
je 0x4d3b19
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d3b1d
add eax, 2
add edi, 2
test cl, cl
jne 0x4d3af5
xor eax, eax
jmp 0x4d3b22
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4d3b7c
lea eax, [esp + 0xc]
push 2
push eax
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov edi, 0xa77194
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d3b65
test cl, cl
je 0x4d3b61
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d3b65
add eax, 2
add edi, 2
test cl, cl
jne 0x4d3b3d
xor eax, eax
jmp 0x4d3b6a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0xc]
sete bl
call fcn.00911ee2
test bl, bl
je 0x4d3b7e
mov bl, 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
test bl, bl
je 0x4d3c0e
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0xc]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x13
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea edx, [esp + 0x18]
push str._sup_2__sup_
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x14
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov ecx, dword [esp + 0x18]
push ecx
jmp 0x4d3d48
lea edx, [esp + 0x1c]
push 2
push edx
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov byte [esp + 0xaa0], 0x15
mov edi, 0xa76f34
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d3c55
test cl, cl
je 0x4d3c51
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d3c55
add eax, 2
add edi, 2
test cl, cl
jne 0x4d3c2d
xor eax, eax
jmp 0x4d3c5a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4d3cb4
lea eax, [esp + 0xc]
push 2
push eax
lea ecx, [esp + 0x28]
call fcn.0091218e
mov eax, dword [eax]
mov edi, 0xa77190
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4d3c9d
test cl, cl
je 0x4d3c99
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4d3c9d
add eax, 2
add edi, 2
test cl, cl
jne 0x4d3c75
xor eax, eax
jmp 0x4d3ca2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0xc]
sete bl
call fcn.00911ee2
test bl, bl
je 0x4d3cb6
mov bl, 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
test bl, bl
je 0x4d3d43
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0xc]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00912044
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x16
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
lea edx, [esp + 0x18]
push str._sup_3__sup_
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaa4], 0x17
call fcn.00911f3c
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov ecx, dword [esp + 0x18]
push ecx
jmp 0x4d3d48
mov edx, dword [esp + 0x20]
push edx
push str.dedw
lea ecx, [esp + 0x60]
call fcn.009121a0
lea eax, [esp + 0x58]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x18
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
mov edx, dword [esi + 0x3044]
mov eax, dword [esi + 0x3040]
push edx
push eax
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9dc]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d3e4e
push 3
push 0xa
push 0x25
lea ecx, [esp + 0x38]
push 0xa771b0
push ecx
call fcn.00911f42
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x3044]
mov ecx, dword [esi + 0x3040]
mov edi, dword [esp + 0x40]
add esp, 0x14
push edx
push eax
push ecx
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x20]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x5c]
push eax
push str.qdgcl
call fcn.009121a0
lea ecx, [esp + 0x5c]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x19
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d3e83
lea eax, [esp + 0x28]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x1a
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
mov edx, dword [esi + 0x307c]
mov eax, dword [esi + 0x3078]
push edx
push eax
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d3f50
mov ecx, dword [0xa8e738]
mov edx, dword [esi + 0x748]
push ecx
push edx
push 0x25
lea eax, [esp + 0x30]
push 0xa771b0
push eax
call fcn.00911f42
mov ecx, dword [0xa8e738]
mov edx, dword [esi + 0x307c]
mov eax, dword [esi + 0x3078]
mov edi, dword [esp + 0x38]
add esp, 0x14
push ecx
push edx
push eax
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea ecx, [esp + 0x20]
fstp qword [esp]
push edi
push ecx
call fcn.00911f42
mov edx, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x60]
push edx
push str.qdrg
call fcn.009121a0
lea eax, [esp + 0x60]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x1b
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d3f85
lea edx, [esp + 0x28]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x1c
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
mov ecx, dword [esi + 0x3084]
mov edx, dword [esi + 0x3080]
push ecx
push edx
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d4050
mov eax, dword [0xa8e738]
mov ecx, dword [esi + 0x74c]
push eax
push ecx
push 0x25
lea edx, [esp + 0x30]
push 0xa771b0
push edx
call fcn.00911f42
mov eax, dword [0xa8e738]
mov ecx, dword [esi + 0x3084]
mov edx, dword [esi + 0x3080]
mov edi, dword [esp + 0x38]
add esp, 0x14
push eax
push ecx
push edx
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea eax, [esp + 0x20]
fstp qword [esp]
push edi
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x28]
add esp, 0x10
push ecx
push str.qdcl
lea ecx, [esp + 0x6c]
call fcn.009121a0
lea edx, [esp + 0x64]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x1d
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d4085
lea ecx, [esp + 0x28]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x1e
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
mov eax, dword [esi + 0x308c]
mov ecx, dword [esi + 0x3088]
push eax
push ecx
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d4152
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x750]
push edx
push eax
push 0x25
lea ecx, [esp + 0x30]
push 0xa771b0
push ecx
call fcn.00911f42
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x308c]
mov ecx, dword [esi + 0x3088]
mov edi, dword [esp + 0x38]
add esp, 0x14
push edx
push eax
push ecx
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x20]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x68]
push eax
push str.qdjx
call fcn.009121a0
lea ecx, [esp + 0x68]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x1f
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d4187
lea eax, [esp + 0x28]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x20
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
fld qword [esi + 0x3088]
fadd qword [esi + 0x3078]
sub esp, 8
mov ecx, esi
fadd qword [esi + 0x3080]
fstp qword [esp]
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d4268
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x754]
push edx
push eax
push 0x25
lea ecx, [esp + 0x30]
push 0xa771b0
push ecx
call fcn.00911f42
fld qword [esi + 0x3088]
fadd qword [esi + 0x3078]
mov edx, dword [0xa8e738]
add esp, 0x14
mov edi, dword [esp + 0x24]
mov ecx, esi
fadd qword [esi + 0x3080]
push edx
sub esp, 8
fstp qword [esp]
call fcn.004126e0
sub esp, 8
lea eax, [esp + 0x20]
fstp qword [esp]
push edi
push eax
call fcn.00911f42
mov ecx, dword [esp + 0x28]
add esp, 0x10
push ecx
push str.qdxj
lea ecx, [esp + 0x74]
call fcn.009121a0
lea edx, [esp + 0x6c]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x21
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d429d
lea ecx, [esp + 0x28]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x22
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
mov eax, dword [esi + 0x30ac]
mov ecx, dword [esi + 0x30a8]
push eax
push ecx
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0x9e4]
fcompp
fnstsw ax
test ah, 0x41
je 0x4d436a
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x75c]
push edx
push eax
push 0x25
lea ecx, [esp + 0x30]
push 0xa771b0
push ecx
call fcn.00911f42
mov edx, dword [0xa8e738]
mov eax, dword [esi + 0x30ac]
mov ecx, dword [esi + 0x30a8]
mov edi, dword [esp + 0x38]
add esp, 0x14
push edx
push eax
push ecx
mov ecx, esi
call fcn.004126e0
sub esp, 8
lea edx, [esp + 0x20]
fstp qword [esp]
push edi
push edx
call fcn.00911f42
mov eax, dword [esp + 0x28]
add esp, 0x10
lea ecx, [esp + 0x70]
push eax
push str.qdzhdj
call fcn.009121a0
lea ecx, [esp + 0x70]
push 0xa77bb0
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x23
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
jmp 0x4d439f
lea eax, [esp + 0x28]
push 0xa77bb0
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x24
call fcn.0091206e
mov byte [esp + 0xaa0], 0xd
lea ecx, [esp + 0xc]
call fcn.00911ee2
lea edx, [esp + 0x74]
push 0xa77bb0
lea eax, [esp + 0x10]
push edx
push eax
call fcn.009121dc
mov eax, dword [eax]
mov ecx, 0xa90298
push eax
mov byte [esp + 0xaa4], 0x3d
call fcn.0091206e
lea ecx, [esp + 0xc]
mov byte [esp + 0xaa0], 0xd
call fcn.00911ee2
push fcn.00911ee2
push 0x64
lea ecx, [esp + 0x50]
push 4
push ecx
mov byte [esp + 0xab0], 0xc
call fcn.009128f2
push fcn.00911ee2
push 0x12d
lea edx, [esp + 0x244]
push 4
push edx
mov byte [esp + 0xab0], 0x3e
call fcn.009128f2
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xaa0], 0xb
call fcn.00911f36
lea ecx, [esp + 0x20]
mov byte [esp + 0xaa0], 0xa
call fcn.00911ee2
lea ecx, [esp + 0x30]
mov byte [esp + 0xaa0], 9
call fcn.00911ee2
lea ecx, [esp + 0x28]
mov byte [esp + 0xaa0], 8
call fcn.00911ee2
lea ecx, [esp + 0x2c]
mov byte [esp + 0xaa0], 7
call fcn.00911ee2
lea ecx, [esp + 0x34]
mov byte [esp + 0xaa0], 6
call fcn.00911ee2
lea ecx, [esp + 0x24]
mov byte [esp + 0xaa0], 5
call fcn.00911ee2
lea ecx, [esp + 0x44]
mov byte [esp + 0xaa0], 4
call fcn.00911ee2
lea ecx, [esp + 0x40]
mov byte [esp + 0xaa0], 3
call fcn.00911ee2
lea ecx, [esp + 0x38]
mov byte [esp + 0xaa0], 2
call fcn.00911ee2
lea ecx, [esp + 0x3c]
mov byte [esp + 0xaa0], 1
call fcn.00911ee2
lea ecx, [esp + 0x18]
mov byte [esp + 0xaa0], 0
call fcn.00911ee2
lea ecx, [ebp + 0x20]
mov dword [esp + 0xaa0], 0xffffffff
call fcn.00911ee2
mov ecx, dword [esp + 0xa98]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x1c