Function at 0x489c90
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x517673
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
call fcn.00489430
xor edi, edi
mov dword [esp + 0x2c], 0x5205d8
mov dword [esp + 0x30], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
mov eax, dword [esi + 0x9c]
mov dword [esp + 0x70], edi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jne 0x489cf1
mov dword [esp + 0x38], edi
xor esi, esi
jmp 0x489d10
lea eax, [esi*8]
push eax
call fcn.0050b264
add esp, 4
mov dword [esp + 0x30], eax
push esi
push eax
call fcn.00443aa0
mov dword [esp + 0x38], esi
lea eax, [esi - 1]
mov dword [esp + 0x34], esi
cmp eax, edi
jl 0x489d4e
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x98]
mov edx, dword [edx + 0x20]
mov esi, dword [ecx + eax*8 + 4]
lea ecx, [ecx + eax*8]
shl esi, 8
mov ecx, dword [ecx]
mov esi, dword [esi + edx]
shl ecx, 8
fld qword [esi + 0x20]
mov edx, dword [ecx + edx]
mov ecx, dword [esp + 0x30]
dec eax
fadd qword [edx + 0x20]
fstp qword [ecx + eax*8 + 8]
jns 0x489d1b
mov ebx, dword [esp + 0xc]
lea edx, [esp + 0x2c]
mov ecx, ebx
lea eax, [ebx + 0x94]
push eax
push edx
call fcn.00489770
mov esi, dword [ebp + 8]
lea eax, [esi + esi*4]
lea ecx, [eax*4 + 4]
push ecx
call fcn.0050b264
add esp, 4
mov dword [esp + 0x24], eax
test eax, eax
mov byte [esp + 0x70], 1
je 0x489da6
push fcn.00403de0
push fcn.00407c00
lea edi, [eax + 4]
push esi
push 0x14
push edi
mov dword [eax], esi
call fcn.0050c29d
mov dword [esp + 0x14], edi
jmp 0x489dae
mov dword [esp + 0x14], 0
mov ecx, ebx
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0x412e8480
call fcn.00487ea0
mov ebx, eax
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
dec edx
js 0x489f3b
mov esi, dword [eax + 0x20]
mov ecx, edx
fld qword [esp + 0x24]
mov edi, ebx
shl ecx, 8
shl edi, 8
add ecx, esi
mov esi, dword [ecx]
fadd qword [esi + 0x20]
fld qword [esi + 0x20]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
je 0x489e12
fld qword [esi + 0x20]
fstp qword [esp + 0x1c]
sub edx, ebx
sub ecx, edi
test edx, edx
jge 0x489df8
mov esi, dword [ebp + 8]
fild dword [ebp + 8]
xor ebx, ebx
mov dword [esp + 0x40], 0x5205d8
mov dword [esp + 0x44], ebx
mov dword [esp + 0x50], ebx
fdivr st(1)
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], ebx
fld qword [esp + 0x1c]
fmul qword [0x520168]
faddp st(1)
fstp qword [esp + 0x24]
fstp st(0)
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 2
call fcn.00443920
lea ecx, [esi - 1]
cmp esi, ebx
mov dword [esp + 0x18], ecx
je 0x489e83
xor eax, eax
inc ecx
mov edx, dword [esp + 0x44]
add eax, 8
dec ecx
mov dword [edx + eax - 8], ebx
mov edx, dword [esp + 0x44]
mov dword [edx + eax - 4], ebx
jne 0x489e6d
mov eax, dword [esp + 0x34]
lea edi, [eax - 1]
test edi, edi
jl 0x489f55
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
fld qword [ecx + edi*8]
fadd qword [esi + ebx*8]
fstp qword [esi + ebx*8]
mov ecx, dword [esp + 0x44]
fld qword [ecx + ebx*8]
fcomp qword [esp + 0x24]
fnstsw ax
test ah, 0x41
je 0x489f44
mov edx, dword [esp + 0xc]
lea ecx, [ebx + ebx*4]
mov eax, dword [edx + 0x98]
mov edx, dword [esp + 0x14]
mov eax, dword [eax + edi*8]
lea esi, [edx + ecx*4]
push eax
mov ecx, dword [esi + 8]
push ecx
mov ecx, esi
call fcn.00431490
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x98]
mov eax, dword [ecx + edi*8 + 4]
mov ecx, dword [esi + 8]
push eax
push ecx
mov ecx, esi
call fcn.00431490
mov eax, dword [ebp + 8]
mov esi, dword [esp + 0x44]
mov ecx, 1
xor ebx, ebx
cmp eax, ecx
jle 0x489f32
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
lea edx, [ecx*8]
fld qword [esi + edx]
fcomp qword [esi + eax]
fnstsw ax
test ah, 1
je 0x489f2a
mov ebx, ecx
mov dword [esp + 0x10], edx
mov eax, dword [ebp + 8]
inc ecx
cmp ecx, eax
jl 0x489f0c
dec edi
jns 0x489e96
jmp 0x489f55
fld qword [esp + 0x24]
jmp 0x489e1d
mov edx, dword [esp + 0x30]
fld qword [ecx + ebx*8]
fsub qword [edx + edi*8]
test edi, edi
fstp qword [ecx + ebx*8]
jge 0x489f72
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x9c]
and ecx, 0x80000001
jns 0x489f6c
dec ecx
or ecx, 0xfffffffe
inc ecx
je 0x48a44b
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x9c]
and edx, 0x80000001
jns 0x489f89
dec edx
or edx, 0xfffffffe
inc edx
je 0x48a101
lea esi, [edi + edi + 3]
test esi, esi
mov dword [esp + 0x1c], esi
jne 0x489fcc
mov ecx, dword [eax + 0x98]
lea esi, [eax + 0x94]
test ecx, ecx
je 0x489fbf
push ecx
call fcn.0050b204
mov eax, dword [esp + 0x10]
add esp, 4
mov dword [esi + 4], 0
xor ecx, ecx
mov dword [esi + 0xc], ecx
mov dword [esi + 8], ecx
jmp 0x48a0e6
mov edx, dword [eax + 0x98]
lea edi, [eax + 0x94]
test edx, edx
jne 0x48a001
lea eax, [esi*4]
push eax
call fcn.0050b264
add esp, 4
mov dword [edi + 4], eax
push esi
push eax
call fcn.00404d30
mov dword [edi + 0xc], esi
mov dword [edi + 8], esi
jmp 0x48a0e2
mov ecx, dword [edi + 0xc]
cmp esi, ecx
jg 0x48a029
mov ecx, dword [edi + 8]
cmp esi, ecx
jle 0x48a021
mov eax, esi
sub eax, ecx
lea ecx, [edx + ecx*4]
push eax
push ecx
call fcn.00404d30
mov eax, dword [esp + 0xc]
mov dword [edi + 8], esi
jmp 0x48a0e6
mov eax, dword [edi + 0x10]
test eax, eax
jne 0x48a054
mov eax, dword [edi + 8]
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x48a048
mov eax, 4
jmp 0x48a054
cmp eax, 0x400
jle 0x48a054
mov eax, 0x400
add eax, ecx
cmp esi, eax
mov dword [esp + 0x10], eax
jl 0x48a062
mov dword [esp + 0x10], esi
mov edx, dword [esp + 0x10]
lea eax, [edx*4]
push eax
call fcn.0050b264
mov ecx, dword [esp + 0x10]
mov edi, eax
add esp, 4
mov dword [esp + 0x24], eax
mov esi, dword [ecx + 0x98]
lea edx, [ecx + 0x94]
mov ecx, dword [ecx + 0x9c]
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x1c]
mov edx, edi
lea esi, [ecx + 0x94]
mov ecx, dword [ecx + 0x9c]
sub edx, ecx
lea eax, [eax + ecx*4]
push edx
push eax
call fcn.00404d30
mov eax, dword [esi + 4]
push eax
call fcn.0050b204
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x14]
add esp, 4
mov dword [esi + 4], ecx
mov dword [esi + 8], edi
mov dword [esi + 0xc], edx
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x9c]
mov edx, dword [eax + 0x98]
mov eax, dword [eax + 0xdc]
mov dword [edx + ecx*4 - 4], eax
jmp 0x48a24e
lea esi, [edi + edi + 2]
test esi, esi
mov dword [esp + 0x24], esi
jne 0x48a13e
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x98]
lea esi, [ecx + 0x94]
test eax, eax
je 0x48a131
push eax
call fcn.0050b204
add esp, 4
mov dword [esi + 4], 0
xor eax, eax
mov dword [esi + 0xc], eax
mov dword [esi + 8], eax
jmp 0x48a24e
mov edx, dword [esp + 0xc]
lea edi, [edx + 0x94]
mov edx, dword [edx + 0x98]
test edx, edx
jne 0x48a177
lea eax, [esi*4]
push eax
call fcn.0050b264
add esp, 4
mov dword [edi + 4], eax
push esi
push eax
call fcn.00404d30
mov dword [edi + 0xc], esi
mov dword [edi + 8], esi
jmp 0x48a24e
mov ecx, dword [edi + 0xc]
cmp esi, ecx
jg 0x48a19b
mov eax, dword [edi + 8]
cmp esi, eax
jle 0x48a193
mov ecx, esi
lea edx, [edx + eax*4]
sub ecx, eax
push ecx
push edx
call fcn.00404d30
mov dword [edi + 8], esi
jmp 0x48a24e
mov eax, dword [edi + 0x10]
test eax, eax
jne 0x48a1c6
mov eax, dword [edi + 8]
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x48a1ba
mov eax, 4
jmp 0x48a1c6
cmp eax, 0x400
jle 0x48a1c6
mov eax, 0x400
add eax, ecx
cmp esi, eax
mov dword [esp + 0x10], eax
jl 0x48a1d4
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x10]
lea ecx, [eax*4]
push ecx
call fcn.0050b264
mov edx, dword [esp + 0x10]
mov edi, eax
add edx, 0x94
add esp, 4
mov dword [esp + 0x1c], eax
mov ecx, dword [edx + 8]
mov esi, dword [edx + 4]
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x24]
mov edx, edi
lea esi, [ecx + 0x94]
mov ecx, dword [ecx + 0x9c]
sub edx, ecx
lea eax, [eax + ecx*4]
push edx
push eax
call fcn.00404d30
mov eax, dword [esi + 4]
push eax
call fcn.0050b204
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
add esp, 4
mov dword [esi + 4], ecx
mov dword [esi + 8], edi
mov dword [esi + 0xc], edx
mov eax, dword [esp + 0xc]
mov esi, dword [eax + 0x9c]
test esi, esi
mov dword [esp + 0x24], esi
jne 0x48a284
mov eax, dword [esp + 0x30]
test eax, eax
je 0x48a275
push eax
call fcn.0050b204
add esp, 4
mov dword [esp + 0x30], esi
xor esi, esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x34], esi
jmp 0x48a384
mov edx, dword [esp + 0x30]
test edx, edx
jne 0x48a2b4
lea ecx, [esi*8]
push ecx
call fcn.0050b264
add esp, 4
mov dword [esp + 0x30], eax
push esi
push eax
call fcn.00443aa0
mov dword [esp + 0x38], esi
mov dword [esp + 0x34], esi
jmp 0x48a384
mov ecx, dword [esp + 0x38]
cmp esi, ecx
jg 0x48a2db
mov eax, dword [esp + 0x34]
cmp esi, eax
jle 0x48a2d2
mov ecx, esi
lea edx, [edx + eax*8]
sub ecx, eax
push ecx
push edx
call fcn.00443aa0
mov dword [esp + 0x34], esi
jmp 0x48a384
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x48a308
mov eax, dword [esp + 0x34]
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x48a2fc
mov eax, 4
jmp 0x48a308
cmp eax, 0x400
jle 0x48a308
mov eax, 0x400
add eax, ecx
cmp esi, eax
mov dword [esp + 0x10], eax
jl 0x48a316
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x10]
lea ecx, [eax*8]
push ecx
call fcn.0050b264
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
mov edi, eax
add esp, 4
lea ecx, [edx*8]
mov dword [esp + 0x1c], eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
mov edx, esi
sub edx, ecx
lea eax, [eax + ecx*8]
push edx
push eax
call fcn.00443aa0
mov ecx, dword [esp + 0x30]
push ecx
call fcn.0050b204
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
add esp, 4
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], eax
lea eax, [esi - 1]
test eax, eax
jl 0x48a3ba
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x30]
mov edx, dword [ecx + 0x98]
mov ecx, dword [ecx + 0x20]
mov edx, dword [edx + eax*4]
shl edx, 8
dec eax
mov edx, dword [edx + ecx]
mov ecx, dword [edx + 0x20]
mov dword [esi + eax*8 + 8], ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [edx + 0x24]
mov dword [ecx + eax*8 + 0xc], edx
jns 0x48a38b
mov esi, dword [esp + 0xc]
lea edx, [esp + 0x2c]
mov ecx, esi
lea eax, [esi + 0x94]
push eax
push edx
call fcn.004896f0
mov edi, dword [esi + 0x9c]
dec edi
js 0x48a44b
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc]
fld qword [eax + edi*8]
fadd qword [edx + ebx*8]
fstp qword [edx + ebx*8]
mov edx, dword [ecx + 0x98]
lea ecx, [ebx + ebx*4]
mov eax, dword [edx + edi*4]
mov edx, dword [esp + 0x14]
push eax
lea ecx, [edx + ecx*4]
mov edx, dword [ecx + 8]
push edx
call fcn.00431490
mov eax, dword [ebp + 8]
mov edx, dword [esp + 0x44]
mov ecx, 1
xor ebx, ebx
cmp eax, ecx
jle 0x48a448
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
lea esi, [ecx*8]
fld qword [esi + edx]
fcomp qword [eax + edx]
fnstsw ax
test ah, 1
je 0x48a440
mov ebx, ecx
mov dword [esp + 0x10], esi
mov eax, dword [ebp + 8]
inc ecx
cmp ecx, eax
jl 0x48a422
dec edi
jns 0x48a3de
xor esi, esi
mov dword [esp + 0x54], 0x5205a4
mov dword [esp + 0x58], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x5c], esi
mov edi, dword [ebp + 8]
mov byte [esp + 0x70], 3
cmp edi, esi
jne 0x48a47b
mov dword [esp + 0x60], esi
mov dword [esp + 0x5c], esi
jmp 0x48a49e
lea ecx, [edi*4]
push ecx
call fcn.0050b264
add esp, 4
mov dword [esp + 0x58], eax
push edi
push eax
call fcn.00404d30
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], edi
cmp edi, esi
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
jle 0x48a523
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0xc]
push ebx
mov dword [edx + esi*4], esi
mov eax, dword [esp + 0x48]
lea edi, [eax + esi*8]
call fcn.00488ac0
mov ecx, dword [esp + 0xc]
push 0xffffffffffffffff
fstp qword [edi]
mov edx, dword [ecx + 0x9c]
lea edi, [ecx + 0x94]
push edx
mov ecx, ebx
call fcn.004de680
mov eax, dword [edi + 8]
mov edi, dword [edi + 4]
mov ecx, dword [ebx + 4]
mov edx, eax
dec eax
test edx, edx
je 0x48a508
inc eax
mov edx, dword [edi]
add edi, 4
mov dword [ecx], edx
add ecx, 4
dec eax
jne 0x48a4fb
mov eax, dword [esp + 0x44]
inc esi
fld qword [esp + 0x24]
fadd qword [eax + esi*8 - 8]
mov eax, dword [ebp + 8]
add ebx, 0x14
cmp esi, eax
fstp qword [esp + 0x24]
jl 0x48a4b6
mov ecx, dword [ebp + 8]
lea eax, [ecx + ecx]
cmp eax, 0xa
jge 0x48a539
mov ebx, 0xa
mov dword [esp + 0x10], ebx
jmp 0x48a547
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x10], ebx
jle 0x48a5fb
mov esi, dword [esp + 0xc]
lea edx, [esp + 0x54]
lea eax, [esp + 0x40]
push edx
push eax
mov ecx, esi
call fcn.004896f0
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
fld qword [ecx + edi*8]
fcomp qword [esi + 0xc8]
fnstsw ax
test ah, 1
je 0x48a59e
lea ecx, [esp + 0x40]
push ecx
call fcn.0048a8d0
fcom qword [esp + 0x28]
add esp, 4
fnstsw ax
test ah, 1
je 0x48a6da
fsub qword [0x520868]
mov ecx, dword [esp + 0x44]
fstp qword [esp + 0x24]
xor esi, esi
test edi, edi
jle 0x48a5e8
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
jmp 0x48a5b2
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x58]
mov eax, dword [edx + edi*4]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
push eax
mov eax, dword [edx + esi*4]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*4]
lea edx, [ecx + edi*8]
push eax
lea eax, [ecx + esi*8]
mov ecx, dword [esp + 0x14]
push edx
push eax
call fcn.0048b3c0
test al, al
jne 0x48a5e4
inc esi
cmp esi, edi
jl 0x48a5ae
mov ebx, dword [esp + 0x10]
cmp esi, dword [esp + 0x18]
je 0x48a5fb
dec ebx
test ebx, ebx
mov dword [esp + 0x10], ebx
jg 0x48a547
mov eax, dword [ebp + 8]
lea eax, [eax + eax*2]
cmp eax, 0x19
jge 0x48a611
mov edi, 0x19
mov dword [esp + 0x10], edi
jmp 0x48a61f
mov edi, eax
test edi, edi
mov dword [esp + 0x10], edi
jle 0x48a6af
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x54]
lea edx, [esp + 0x40]
push ecx
push edx
mov ecx, esi
call fcn.004896f0
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x18]
fld qword [ecx + eax*8]
fcomp qword [esi + 0xc8]
fnstsw ax
test ah, 1
jne 0x48a6e0
mov eax, dword [esp + 0x18]
xor esi, esi
test eax, eax
jle 0x48a69c
mov ebx, dword [esp + 0x14]
mov edi, eax
jmp 0x48a666
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x58]
mov eax, dword [edx + edi*4]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
push eax
mov eax, dword [edx + esi*4]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*4]
lea edx, [ecx + edi*8]
push eax
lea eax, [ecx + esi*8]
mov ecx, dword [esp + 0x14]
push edx
push eax
call fcn.0048b4f0
test al, al
jne 0x48a698
inc esi
cmp esi, edi
jl 0x48a662
mov edi, dword [esp + 0x10]
cmp esi, dword [esp + 0x18]
je 0x48a6af
dec edi
test edi, edi
mov dword [esp + 0x10], edi
jg 0x48a61f
mov edi, dword [ebp + 8]
test edi, edi
jle 0x48a825
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
push esi
push 0x547684
mov ecx, ebx
call fcn.004888e0
add esi, 0x14
dec edi
jne 0x48a6c2
jmp 0x48a829
mov ecx, dword [esp + 0x44]
fstp st(0)
mov eax, dword [ebp + 8]
lea eax, [eax + eax*2]
cmp eax, 0x19
jle 0x48a6f5
mov dword [esp + 0x10], 0x19
jmp 0x48a6fd
test eax, eax
mov dword [esp + 0x10], eax
jle 0x48a76b
mov esi, dword [esp + 0x18]
test esi, esi
jle 0x48a745
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x14]
jmp 0x48a713
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x58]
mov eax, dword [edx + esi*4]
lea eax, [eax + eax*4]
lea eax, [edi + eax*4]
push eax
mov eax, dword [edx]
lea edx, [eax + eax*4]
lea eax, [edi + edx*4]
lea edx, [ecx + esi*8]
push eax
push edx
push ecx
mov ecx, ebx
call fcn.0048b720
test al, al
jne 0x48a73f
dec esi
test esi, esi
jg 0x48a70f
mov ecx, dword [esp + 0x44]
test esi, esi
je 0x48a76b
lea eax, [esp + 0x54]
lea ecx, [esp + 0x40]
push eax
push ecx
mov ecx, dword [esp + 0x14]
call fcn.004896f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x44]
dec eax
test eax, eax
mov dword [esp + 0x10], eax
jg 0x48a6fd
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
test esi, esi
jl 0x48a797
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x58]
mov eax, dword [edx + esi*4]
lea eax, [eax + eax*4]
lea ecx, [edi + eax*4]
push ecx
mov ecx, ebx
call fcn.00487a40
dec esi
jns 0x48a77b
mov ecx, dword [esp + 0x44]
test edi, edi
je 0x48a7a8
mov edx, dword [edi]
push 3
mov ecx, edi
call dword [edx + 4]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x54], 0x5205a4
mov eax, dword [esp + 0x58]
mov byte [esp + 0x70], 7
test eax, eax
je 0x48a7ca
push eax
call fcn.0050b204
mov ecx, dword [esp + 0x48]
add esp, 4
mov esi, 0x520384
mov edi, 0x5205d8
mov dword [esp + 0x54], esi
mov dword [esp + 0x40], edi
test ecx, ecx
mov byte [esp + 0x70], 8
je 0x48a7ee
push ecx
call fcn.0050b204
add esp, 4
mov dword [esp + 0x40], esi
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x30]
mov dword [esp + 0x70], 9
test eax, eax
je 0x48a80f
push eax
call fcn.0050b204
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ebx, dword [esp + 0xc]
lea eax, [esp + 0x40]
mov ecx, ebx
push eax
push 0x547670
call fcn.004889d0
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x48a849
mov edx, dword [ecx]
push 3
call dword [edx + 4]
mov dword [esp + 0x54], 0x5205a4
mov eax, dword [esp + 0x58]
mov byte [esp + 0x70], 4
test eax, eax
je 0x48a867
push eax
call fcn.0050b204
add esp, 4
mov esi, 0x520384
mov edi, 0x5205d8
mov dword [esp + 0x54], esi
mov dword [esp + 0x40], edi
mov eax, dword [esp + 0x44]
mov byte [esp + 0x70], 5
test eax, eax
je 0x48a88f
push eax
call fcn.0050b204
add esp, 4
mov dword [esp + 0x40], esi
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x30]
mov dword [esp + 0x70], 6
test eax, eax
je 0x48a8b0
push eax
call fcn.0050b204
add esp, 4
mov ecx, dword [esp + 0x68]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4