Function at 0x4b4800
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x5a4e8f
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x6e50b4]
xor eax, esp
mov dword [esp + 0xdc], eax
push ebp
push esi
push edi
mov eax, dword [0x6e50b4]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x104]
mov esi, dword [esp + 0x10c]
mov ebp, dword [esp + 0x100]
mov edi, dword [esp + 0x110]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
call fcn.0042f0f0
push 0
lea edx, [esp + 0x30]
push edx
push 0xd5
mov ecx, 0x6f42b0
mov dword [esp + 0x104], 0
call fcn.004346c0
test esi, esi
je 0x4b48a4
movzx eax, word [esi + 0x1a]
test ax, ax
jne 0x4b48a6
xor eax, eax
mov esi, dword [esp + 0x14]
add esi, 2
cmp dword [esp + 0x1c], 0
push esi
je 0x4b48d2
lea ecx, [esp + 0x70]
test ax, ax
je 0x4b48ef
movzx eax, ax
push eax
push 0x5bc81c
push ecx
call fcn.00582c5f
add esp, 0x10
jmp 0x4b4909
test ax, ax
je 0x4b48f7
movzx edx, ax
push edx
lea eax, [esp + 0x74]
push 0x5bc80c
push eax
call fcn.00582c5f
add esp, 0x10
jmp 0x4b4909
push 0x5bc804
push ecx
jmp 0x4b4901
push 0x5b40b0
lea edx, [esp + 0x74]
push edx
call fcn.00582c5f
add esp, 0xc
mov eax, esi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b4910
mov ecx, dword [esp + 0x10]
sub eax, edx
test ecx, ecx
je 0x4b4942
cmp dword [ecx + 4], 0
je 0x4b4942
push 2
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00441480
mov esi, dword [esp + 0x14]
jmp 0x4b49a9
mov esi, dword [esp + 0x14]
cmp word [esi + 0xea], 0
je 0x4b4960
push 2
push 0
push 0xff00
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b49a2
cmp byte [esi + eax], 0x2b
je 0x4b4994
cmp byte [esi + eax - 1], 0x2b
je 0x4b4994
mov edx, 0x834
push 2
push 0
cmp word [esi + 0x48], dx
jne 0x4b4988
push 0xe6e826
lea eax, [esp + 0x78]
push eax
jmp 0x4b49a2
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b49a2
push 2
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x70]
push eax
call fcn.00582c5f
add esp, 8
push 2
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
movzx eax, word [esi + 0x48]
mov edx, 0x801
cmp ax, dx
je 0x4b4acd
mov ecx, 0x834
cmp ax, cx
je 0x4b4acd
mov edx, 0x807
cmp ax, dx
jne 0x4b4a4a
push 0x96a
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b4b0d
mov edx, 0x808
cmp ax, dx
jne 0x4b4a5b
push 0x969
jmp 0x4b4a0a
mov edx, 0x809
cmp ax, dx
jne 0x4b4a6c
push 0x96b
jmp 0x4b4a0a
mov edx, 0x80e
cmp ax, dx
jne 0x4b4a7d
push 0x940
jmp 0x4b4a0a
mov edx, 0x80b
cmp ax, dx
jne 0x4b4a91
push 0x950
jmp 0x4b4a0a
mov edx, 0x80d
cmp ax, dx
jne 0x4b4aa5
push 0x951
jmp 0x4b4a0a
mov edx, 0x80a
cmp ax, dx
jne 0x4b4ab9
push 0x952
jmp 0x4b4a0a
mov edx, 0x80c
cmp ax, dx
jne 0x4b4b14
push 0x953
jmp 0x4b4a0a
push 0x93e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push str._s__s
push edx
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00441480
fldz
mov ecx, dword [esp + 0x24]
push esi
fstp dword [esp + 0x24]
push ebp
call fcn.004aa440
movzx eax, word [esi + 0x8a]
dec eax
je 0x4b4b78
dec eax
jne 0x4b4bbf
push 0xed
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s__s
push ecx
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xe61414
lea edx, [esp + 0x78]
push edx
jmp 0x4b4bb8
push 0xec
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__s
push eax
call fcn.00582c5f
add esp, 0x10
push 7
push 0
push 0xe61414
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
cmp word [esi + 0x8c], 0
je 0x4b4c3a
push 0x943
mov ecx, 0x6f63d0
call fcn.004d54d0
movzx edx, word [esi + 0x8c]
push eax
push edx
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00582c5f
mov ecx, dword [0x6f48ac]
mov dx, word [ecx + 0x43c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x8c]
jae 0x4b4c29
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b4c33
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
cmp word [esi + 0x8e], 0
je 0x4b4cb5
push 0xef
mov ecx, 0x6f63d0
call fcn.004d54d0
movzx edx, word [esi + 0x8e]
push eax
push edx
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00582c5f
mov ecx, dword [0x6f48ac]
mov dx, word [ecx + 0x65c]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x8e]
jae 0x4b4ca4
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b4cae
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
cmp word [esi + 0x90], 0
je 0x4b4d30
push 0xf0
mov ecx, 0x6f63d0
call fcn.004d54d0
movzx edx, word [esi + 0x90]
push eax
push edx
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00582c5f
mov ecx, dword [0x6f48ac]
mov dx, word [ecx + 0x65e]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x90]
jae 0x4b4d1f
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b4d29
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
cmp word [esi + 0x92], 0
je 0x4b4dab
push 0xf1
mov ecx, 0x6f63d0
call fcn.004d54d0
movzx edx, word [esi + 0x92]
push eax
push edx
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00582c5f
mov ecx, dword [0x6f48ac]
mov dx, word [ecx + 0x660]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x92]
jae 0x4b4d9a
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b4da4
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
cmp word [esi + 0x94], 0
je 0x4b4e26
push 0xf2
mov ecx, 0x6f63d0
call fcn.004d54d0
movzx edx, word [esi + 0x94]
push eax
push edx
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d_s
push eax
call fcn.00582c5f
mov ecx, dword [0x6f48ac]
mov dx, word [ecx + 0x662]
add esp, 0x14
push 7
push 0
cmp dx, word [esi + 0x94]
jae 0x4b4e15
push 0xe61414
lea eax, [esp + 0x78]
push eax
jmp 0x4b4e1f
push 0xffffff
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
push 0x956
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x70]
push edx
call fcn.00582c5f
add esp, 8
push 2
push 0
push 0xffffb0
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00441480
test edi, edi
je 0x4b51ef
cmp dword [edi], 0
je 0x4b51ef
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5b1b0b
mov ecx, ebp
call fcn.00441480
lea ecx, [esp + 0x4c]
call fcn.0042f0f0
mov eax, dword [edi + 8]
mov byte [esp + 0xf8], 1
cmp eax, 1
jne 0x4b4ecb
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b4f3a
push 0
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00441490
jmp 0x4b4f3a
jbe 0x4b4f3a
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004ac9c0
mov esi, eax
test esi, esi
je 0x4b4f3a
movzx eax, word [esi + 0x46]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b4f0b
push 0
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.00441490
movzx edx, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push edx
call fcn.004ac9f0
mov esi, eax
test esi, esi
je 0x4b4f3a
nop
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.00441480
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b4f20
mov eax, dword [edi + 0xc]
cmp eax, 1
jne 0x4b4f73
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b4fe1
push 1
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.00441490
jmp 0x4b4fe1
jbe 0x4b4fe1
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.004ac9c0
mov esi, eax
test esi, esi
je 0x4b4fe1
movzx edx, word [esi + 0x46]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b4fb3
push 1
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00441490
movzx ecx, word [esi + 0x44]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004ac9f0
mov esi, eax
test esi, esi
je 0x4b4fe1
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.00441480
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b4fc7
mov eax, dword [edi + 0x10]
cmp eax, 1
jne 0x4b501a
push 0
lea eax, [esp + 0x50]
push eax
push 0x93
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b508a
push 2
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.00441490
jmp 0x4b508a
jbe 0x4b508a
mov ecx, dword [esp + 0x24]
movzx edx, ax
push edx
call fcn.004ac9c0
mov esi, eax
test esi, esi
je 0x4b508a
movzx ecx, word [esi + 0x46]
push 1
lea eax, [esp + 0x50]
push eax
push ecx
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b505a
push 2
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.00441490
movzx eax, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push eax
call fcn.004ac9f0
mov esi, eax
test esi, esi
je 0x4b508a
mov edi, edi
mov ecx, dword [esi]
push 0
push 0
push 0xff00ff
push ecx
mov ecx, ebp
call fcn.00441480
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b5070
mov eax, dword [edi + 0x14]
cmp eax, 1
jne 0x4b50c3
push 0
lea edx, [esp + 0x50]
push edx
push 0x93
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b5131
push 3
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00441490
jmp 0x4b5131
jbe 0x4b5131
movzx ecx, ax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004ac9c0
mov esi, eax
test esi, esi
je 0x4b5131
movzx eax, word [esi + 0x46]
push 1
lea edx, [esp + 0x50]
push edx
push eax
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b5103
push 3
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebp
call fcn.00441490
movzx edx, word [esi + 0x44]
mov ecx, dword [esp + 0x24]
push edx
call fcn.004ac9f0
mov esi, eax
test esi, esi
je 0x4b5131
mov eax, dword [esi]
push 0
push 0
push 0xff00ff
push eax
mov ecx, ebp
call fcn.00441480
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b5117
mov eax, dword [edi + 0x18]
cmp eax, 1
jne 0x4b516a
push 0
lea ecx, [esp + 0x50]
push ecx
push 0x93
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b51da
push 4
lea edx, [esp + 0x50]
push edx
mov ecx, ebp
call fcn.00441490
jmp 0x4b51da
jbe 0x4b51da
mov ecx, dword [esp + 0x24]
movzx eax, ax
push eax
call fcn.004ac9c0
mov esi, eax
test esi, esi
je 0x4b51da
movzx edx, word [esi + 0x46]
push 1
lea ecx, [esp + 0x50]
push ecx
push edx
mov ecx, 0x6f42b0
call fcn.004346c0
cmp dword [esp + 0x50], 0
je 0x4b51aa
push 4
lea eax, [esp + 0x50]
push eax
mov ecx, ebp
call fcn.00441490
movzx ecx, word [esi + 0x44]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004ac9f0
mov esi, eax
test esi, esi
je 0x4b51da
mov edi, edi
mov edx, dword [esi]
push 0
push 0
push 0xff00ff
push edx
mov ecx, ebp
call fcn.00441480
mov esi, dword [esi + 4]
test esi, esi
jne 0x4b51c0
lea ecx, [esp + 0x4c]
mov byte [esp + 0xf8], 0
call fcn.0042f100
mov esi, dword [esp + 0x14]
push 0
lea eax, [esp + 0x30]
push eax
push 0xffffb0
push 0x5b1b0b
mov ecx, ebp
call fcn.00441480
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b521c
movzx eax, word [eax + 8]
test ax, ax
je 0x4b521c
mov ecx, eax
jmp 0x4b521e
xor ecx, ecx
movzx eax, word [esi + 0x5a]
mov edi, dword [esp + 0x1c]
test ax, ax
je 0x4b52b4
test edi, edi
je 0x4b5264
movzx edx, word [edi + 8]
test dx, dx
je 0x4b5264
push edx
add eax, ecx
push eax
push 0x17e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b528a
lea edx, [ecx + eax]
push edx
push 0x17e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push 0x5b85ec
push eax
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b531b
cmp word [eax + 8], 0
je 0x4b531b
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b5368
test ecx, ecx
je 0x4b52eb
test edi, edi
je 0x4b5326
movzx eax, word [edi + 8]
test ax, ax
je 0x4b52eb
push eax
push ecx
push 0x17e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b535a
test edi, edi
je 0x4b5326
movzx eax, word [edi + 8]
test ax, ax
je 0x4b5326
push eax
push 0x17e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b5363
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b5380
movzx eax, word [edx + 8]
test ax, ax
je 0x4b536f
push eax
push 0x17e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b5380
movzx eax, word [edx + 0xa]
test ax, ax
jne 0x4b5382
xor eax, eax
movzx ecx, word [esi + 0x5c]
test cx, cx
je 0x4b5413
test edi, edi
je 0x4b53c4
movzx edx, word [edi + 0xa]
test dx, dx
je 0x4b53c4
push edx
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b53e9
add ecx, eax
push ecx
push 0x17f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push 0x5b85ec
push edx
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b547a
cmp word [eax + 0xa], 0
je 0x4b547a
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b54c3
test eax, eax
je 0x4b544a
test edi, edi
je 0x4b5485
movzx ecx, word [edi + 0xa]
test cx, cx
je 0x4b544a
push ecx
push eax
push 0x17f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
jmp 0x4b54b5
test edi, edi
je 0x4b5485
movzx eax, word [edi + 0xa]
test ax, ax
je 0x4b5485
push eax
push 0x17f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b54be
test edx, edx
je 0x4b54db
movzx eax, word [edx + 0xa]
test ax, ax
je 0x4b54ca
push eax
push 0x17f
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b54db
movzx eax, word [edx + 0xc]
test ax, ax
jne 0x4b54dd
xor eax, eax
movzx ecx, word [esi + 0x5e]
test cx, cx
je 0x4b556e
test edi, edi
je 0x4b551f
movzx edx, word [edi + 0xc]
test dx, dx
je 0x4b551f
push edx
add ecx, eax
push ecx
push 0x180
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5544
add ecx, eax
push ecx
push 0x180
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push 0x5b85ec
push edx
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b55d5
cmp word [eax + 0xc], 0
je 0x4b55d5
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b561e
test eax, eax
je 0x4b55a5
test edi, edi
je 0x4b55e0
movzx ecx, word [edi + 0xc]
test cx, cx
je 0x4b55a5
push ecx
push eax
push 0x180
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5610
test edi, edi
je 0x4b55e0
movzx eax, word [edi + 0xc]
test ax, ax
je 0x4b55e0
push eax
push 0x180
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b5619
test edx, edx
je 0x4b5636
movzx eax, word [edx + 0xc]
test ax, ax
je 0x4b5625
push eax
push 0x180
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b5636
movzx eax, word [edx + 0xe]
test ax, ax
jne 0x4b5638
xor eax, eax
movzx ecx, word [esi + 0x60]
test cx, cx
je 0x4b56c9
test edi, edi
je 0x4b567a
movzx edx, word [edi + 0xe]
test dx, dx
je 0x4b567a
push edx
add ecx, eax
push ecx
push 0x181
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b569f
add ecx, eax
push ecx
push 0x181
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push 0x5b85ec
push edx
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b5730
cmp word [eax + 0xe], 0
je 0x4b5730
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b5779
test eax, eax
je 0x4b5700
test edi, edi
je 0x4b573b
movzx ecx, word [edi + 0xe]
test cx, cx
je 0x4b5700
push ecx
push eax
push 0x181
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
jmp 0x4b576b
test edi, edi
je 0x4b573b
movzx eax, word [edi + 0xe]
test ax, ax
je 0x4b573b
push eax
push 0x181
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b5774
test edx, edx
je 0x4b578f
movzx eax, word [edx + 0xe]
test ax, ax
je 0x4b5780
push eax
push 0x181
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b578f
mov eax, dword [edx + 0x10]
test eax, eax
jne 0x4b5791
xor eax, eax
mov ecx, dword [esi + 0x64]
test ecx, ecx
je 0x4b5823
test edi, edi
je 0x4b57cf
mov edx, dword [edi + 0x10]
test edx, edx
je 0x4b57cf
push edx
add ecx, eax
push ecx
push 0x182
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b57f4
add ecx, eax
push ecx
push 0x182
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push 0x5b85ec
push eax
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b5815
cmp dword [eax + 0x10], 0
je 0x4b5815
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b58e7
push 0
push 0
push 0x548fdf
jmp 0x4b58e2
test eax, eax
je 0x4b586d
test edi, edi
je 0x4b58ab
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x4b586d
push ecx
push eax
push 0x182
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b58e7
test edi, edi
je 0x4b58ab
mov eax, dword [edi + 0x10]
test eax, eax
je 0x4b58ab
push eax
push 0x182
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4b58e7
test edx, edx
je 0x4b58ff
mov eax, dword [edx + 0x10]
test eax, eax
je 0x4b58ee
push eax
push 0x182
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b58ff
movzx eax, word [edx + 0x14]
test ax, ax
jne 0x4b5901
xor eax, eax
movzx ecx, word [esi + 0x6c]
test cx, cx
je 0x4b5992
test edi, edi
je 0x4b5943
movzx edx, word [edi + 0x14]
test dx, dx
je 0x4b5943
push edx
add ecx, eax
push ecx
push 0x183
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5968
add ecx, eax
push ecx
push 0x183
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push 0x5b85ec
push edx
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b59f9
cmp word [eax + 0x14], 0
je 0x4b59f9
push 0
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b5a42
test eax, eax
je 0x4b59c9
test edi, edi
je 0x4b5a04
movzx ecx, word [edi + 0x14]
test cx, cx
je 0x4b59c9
push ecx
push eax
push 0x183
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5a34
test edi, edi
je 0x4b5a04
movzx eax, word [edi + 0x14]
test ax, ax
je 0x4b5a04
push eax
push 0x183
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b5a3d
test edx, edx
je 0x4b5a58
movzx eax, word [edx + 0x14]
test ax, ax
je 0x4b5a49
push eax
push 0x183
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b5a58
mov eax, dword [edx + 0x16]
test eax, eax
jne 0x4b5a5a
xor eax, eax
mov ecx, dword [esi + 0x68]
test ecx, ecx
je 0x4b5aec
test edi, edi
je 0x4b5a98
mov edx, dword [edi + 0x16]
test edx, edx
je 0x4b5a98
push edx
add ecx, eax
push ecx
push 0x184
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x78]
push str._s__d___d_
push edx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5abd
add ecx, eax
push ecx
push 0x184
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push 0x5b85ec
push eax
call fcn.00582c5f
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b5ade
cmp dword [eax + 0x16], 0
je 0x4b5ade
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b5bb0
push 0
push 0
push 0x548fdf
jmp 0x4b5bab
test eax, eax
je 0x4b5b36
test edi, edi
je 0x4b5b74
mov ecx, dword [edi + 0x16]
test ecx, ecx
je 0x4b5b36
push ecx
push eax
push 0x184
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b5bb0
test edi, edi
je 0x4b5b74
mov eax, dword [edi + 0x16]
test eax, eax
je 0x4b5b74
push eax
push 0x184
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4b5bb0
test edx, edx
je 0x4b5bb7
mov eax, dword [edx + 0x16]
test eax, eax
je 0x4b5bb7
push eax
push 0x184
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
mov edi, dword [esp + 0x1c]
mov esi, 1
fld qword [0x5b1638]
movzx eax, si
test ax, ax
jne 0x4b5bd6
fldz
fst dword [esp + 0x28]
jmp 0x4b5be6
mov edx, dword [esp + 0x14]
mov ecx, eax
fld dword [edx + ecx*4 + 0x6c]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fmul st(2)
fstp dword [esp + 0x28]
test edi, edi
je 0x4b5c13
test ax, ax
jne 0x4b5bff
fst dword [esp + 0x20]
jmp 0x4b5c09
mov ecx, eax
fld dword [edi + ecx*4 + 0x16]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4b5c4a
test ax, ax
jne 0x4b5c32
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b5c50
mov edx, eax
fld dword [ecx + edx*4 + 0x1a]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b5c50
fstp st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.00582f70
test eax, eax
je 0x4b5d04
fstp st(1)
fld dword [esp + 0x20]
call fcn.00582f70
fadd dword [esp + 0x18]
test eax, eax
je 0x4b5ca3
push eax
call fcn.00582f70
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5ccd
call fcn.00582f70
push eax
lea edx, [esi + 0x108]
push edx
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.00582c5f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b5cf1
fld dword [esp + 0x18]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b5cf1
push 0
push 0
push 0x55fc55
jmp 0x4b5de7
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4b5dec
fstp st(0)
fld dword [esp + 0x20]
call fcn.00582f70
fld dword [esp + 0x18]
mov ecx, eax
fld st(0)
test ecx, ecx
je 0x4b5d73
fucomp st(2)
push ecx
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b5d53
call fcn.00582f70
push eax
lea eax, [esi + 0x108]
push eax
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b5daa
lea edx, [esi + 0x108]
fstp st(0)
push edx
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4b5da2
fld st(2)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b5dcf
fstp st(1)
call fcn.00582f70
push eax
lea ecx, [esi + 0x108]
push ecx
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.00582c5f
add esp, 0x10
fld dword [esp + 0x18]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b5dd1
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b5dec
fstp st(0)
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b5df3
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
inc esi
cmp esi, 5
jle 0x4b5bc0
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x98]
sub eax, 0
je 0x4b5e1e
dec eax
jne 0x4b5e3e
push eax
push eax
push 0xffffff
push 0x111
jmp 0x4b5e2c
push 0
push 0
push 0xffffff
push 0x110
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
mov ecx, ebp
call fcn.00441480
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b5e53
movzx eax, word [eax + 0x1a]
test ax, ax
je 0x4b5e53
mov esi, eax
jmp 0x4b5e55
xor esi, esi
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xa0]
test ax, ax
jne 0x4b5e72
cmp word [ecx + 0xa2], ax
je 0x4b6060
mov edx, 0x80a
cmp word [ecx + 0x48], dx
movzx edx, word [ecx + 0xa2]
je 0x4b5f81
cmp ax, dx
jne 0x4b5ee9
test edi, edi
je 0x4b5ebd
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4b5ebd
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x5bc7b4
jmp 0x4b5f4a
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push 0x5b85d8
push ecx
call fcn.00582c5f
add esp, 0x10
jmp 0x4b5f57
test edi, edi
je 0x4b5f2c
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4b5f2a
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.00582c5f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b5f57
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.00582c5f
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b604b
cmp word [eax + 0x1a], 0
je 0x4b604b
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4b6059
cmp ax, dx
jne 0x4b5fe2
test edi, edi
je 0x4b5fb3
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4b5fb3
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d_____d_
jmp 0x4b5f4a
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push 0x5b85d0
push ecx
call fcn.00582c5f
add esp, 0x10
jmp 0x4b5f57
test edi, edi
je 0x4b6028
mov ecx, edi
movzx edi, word [ecx + 0x32]
test di, di
je 0x4b6026
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.00582c5f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b5f57
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x185
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d_____d__
jmp 0x4b5f4a
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00441480
test edi, edi
je 0x4b60c7
movzx eax, word [edi + 0x34]
test ax, ax
je 0x4b60c7
push eax
push 0x186
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push str._s___d_
push edx
call fcn.00582c5f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b60b2
mov eax, dword [esp + 0x10]
cmp word [eax + 0x1a], 0
je 0x4b60b2
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
jmp 0x4b60c0
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx + 0xa4]
test ax, ax
jne 0x4b60e4
cmp word [ecx + 0xa6], ax
je 0x4b62e2
mov edx, 0x80a
cmp word [ecx + 0x48], dx
je 0x4b61f5
movzx edx, word [ecx + 0xa6]
cmp ax, dx
jne 0x4b615b
test edi, edi
je 0x4b612f
movzx ecx, word [edi + 0x32]
test cx, cx
je 0x4b612f
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push 0x5bc7b4
jmp 0x4b61be
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push 0x5b85d8
push ecx
call fcn.00582c5f
add esp, 0x10
jmp 0x4b61cb
test edi, edi
je 0x4b61a0
mov ecx, dword [esp + 0x1c]
movzx edi, word [ecx + 0x32]
test di, di
je 0x4b619e
movzx ecx, si
push edi
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d___d___d_
push ecx
call fcn.00582c5f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b61cb
mov edi, ecx
movzx ecx, si
add edx, ecx
push edx
add eax, ecx
push eax
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d___d
lea ecx, [esp + 0x7c]
push ecx
call fcn.00582c5f
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b62cd
cmp word [eax + 0x1a], 0
je 0x4b62cd
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4b62db
movzx ecx, word [ecx + 0xa6]
cmp ax, cx
jne 0x4b6262
test edi, edi
je 0x4b6233
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b6233
push eax
mov eax, ecx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d_____d_
lea edx, [esp + 0x7c]
push edx
jmp 0x4b61c3
mov eax, ecx
movzx ecx, si
add eax, ecx
push eax
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea edx, [esp + 0x74]
push 0x5b85d0
push edx
call fcn.00582c5f
add esp, 0x10
jmp 0x4b61cb
test edi, edi
je 0x4b62aa
mov edx, dword [esp + 0x1c]
movzx edi, word [edx + 0x32]
test di, di
je 0x4b62a8
movzx edx, si
push edi
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x7c]
push str._s__d_____d_____d_
push ecx
call fcn.00582c5f
mov edi, dword [esp + 0x34]
add esp, 0x18
jmp 0x4b61cb
mov edi, edx
movzx edx, si
add ecx, edx
push ecx
add eax, edx
push eax
push 0x187
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d_____d__
jmp 0x4b61be
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
mov ecx, ebp
call fcn.00441480
mov eax, dword [esp + 0x14]
cmp word [eax + 0xa0], 0
jne 0x4b63e2
cmp word [eax + 0xa2], 0
jne 0x4b63e2
cmp word [eax + 0xa4], 0
jne 0x4b63e2
cmp word [eax + 0xa6], 0
jne 0x4b63e2
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4b6362
movzx ecx, word [edx + 0x1a]
test cx, cx
je 0x4b6362
test edi, edi
je 0x4b639d
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b6362
push eax
push ecx
push 0x2a9
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d__d_
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b63cd
test edi, edi
je 0x4b639d
movzx eax, word [edi + 0x32]
test ax, ax
je 0x4b639d
push eax
push 0x2a9
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s___d_
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b63d6
test edx, edx
je 0x4b63e2
movzx eax, word [edx + 0x1a]
test ax, ax
je 0x4b63e2
push eax
push 0x2a9
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push str._s__d
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
mov esi, 1
movzx eax, si
test ax, ax
jne 0x4b63f7
fldz
fst dword [esp + 0x28]
jmp 0x4b640a
mov edx, dword [esp + 0x14]
mov ecx, eax
fld dword [edx + ecx*4 + 0xa8]
fstp dword [esp + 0x28]
fldz
fld dword [esp + 0x28]
fld qword [0x5b1638]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x28]
test edi, edi
je 0x4b6445
test ax, ax
jne 0x4b642d
fxch st(1)
fst dword [esp + 0x20]
jmp 0x4b6439
mov ecx, eax
fld dword [edi + ecx*4 + 0x32]
fstp dword [esp + 0x20]
fxch st(1)
fld dword [esp + 0x20]
fmul st(2)
fstp dword [esp + 0x20]
fxch st(1)
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4b6480
test ax, ax
jne 0x4b6466
fxch st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b6486
mov edx, eax
fld dword [ecx + edx*4 + 0x32]
fstp dword [esp + 0x18]
fxch st(1)
fld dword [esp + 0x18]
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x18]
jmp 0x4b6486
fstp st(0)
fst dword [esp + 0x18]
fld dword [esp + 0x28]
fld st(0)
call fcn.00582f70
test eax, eax
je 0x4b653a
fstp st(1)
fld dword [esp + 0x20]
call fcn.00582f70
fadd dword [esp + 0x18]
test eax, eax
je 0x4b64d9
push eax
call fcn.00582f70
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b6503
call fcn.00582f70
push eax
lea edx, [esi + 0x187]
push edx
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d__
push eax
call fcn.00582c5f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b6527
fld dword [esp + 0x18]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b6527
push 0
push 0
push 0x55fc55
jmp 0x4b661d
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
jmp 0x4b6622
fstp st(0)
fld dword [esp + 0x20]
call fcn.00582f70
fld dword [esp + 0x18]
mov ecx, eax
fld st(0)
test ecx, ecx
je 0x4b65a9
fucomp st(2)
push ecx
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b6589
call fcn.00582f70
push eax
lea eax, [esi + 0x187]
push eax
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d_____d___
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b65e0
lea edx, [esi + 0x187]
fstp st(0)
push edx
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s___d___
lea eax, [esp + 0x78]
push eax
jmp 0x4b65d8
fld st(2)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b6605
fstp st(1)
call fcn.00582f70
push eax
lea ecx, [esi + 0x187]
push ecx
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
push str._s__d__
lea edx, [esp + 0x78]
push edx
call fcn.00582c5f
add esp, 0x10
fld dword [esp + 0x18]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x4b6607
push 0
fstp st(0)
push 0
push 0x55fc55
lea eax, [esp + 0x78]
push eax
jmp 0x4b6622
fstp st(0)
fld dword [esp + 0x20]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4b6629
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
inc esi
cmp esi, 5
jle 0x4b63e7
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b6648
movzx eax, word [eax + 0x1c]
test ax, ax
je 0x4b6648
mov esi, eax
jmp 0x4b664a
xor esi, esi
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc4]
test ax, ax
je 0x4b66f4
test edi, edi
je 0x4b6698
movzx ecx, word [edi + 0x4e]
test cx, cx
je 0x4b6698
mov edx, eax
movzx eax, si
push ecx
add edx, eax
push edx
push 0x18d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push str._s__d___d_
push ecx
call fcn.00582c5f
add esp, 0x14
jmp 0x4b66c2
mov edx, eax
movzx eax, si
add edx, eax
push edx
push 0x18d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x74]
push 0x5b85ec
push ecx
call fcn.00582c5f
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x4b66e1
test si, si
je 0x4b66e1
push 0
push 0
push 0x55fc55
lea edx, [esp + 0x78]
push edx
jmp 0x4b67a3
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x78]
push eax
jmp 0x4b67a3
test si, si
je 0x4b672f
test edi, edi
je 0x4b676a
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4b672f
movzx edx, si
push eax
push edx
push 0x18d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push str._s__d___d_
push eax
call fcn.00582c5f
add esp, 0x14
jmp 0x4b6795
test edi, edi
je 0x4b676a
movzx eax, word [edi + 0x4e]
test ax, ax
je 0x4b676a
push eax
push 0x18d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s___d_
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
jmp 0x4b679e
test si, si
je 0x4b67aa
movzx edx, si
push edx
push 0x18d
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x74]
push str._s__d
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x55fc55
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0xc8]
test ax, ax
je 0x4b67f3
push eax
mov eax, edx
add eax, 2
push eax
push 0x18e
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea ecx, [esp + 0x78]
push ecx
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x78]
push edx
mov ecx, ebp
call fcn.00441480
mov eax, dword [esp + 0x14]
cmp word [eax + 0xcc], 0
je 0x4b6a24
movzx ecx, word [eax + 0xca]
test cx, cx
je 0x4b6a24
xor eax, eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov word [esp + 0x69], ax
mov byte [esp + 0x6b], al
lea eax, [ecx - 1]
mov byte [esp + 0x4c], 0
cmp eax, 0xa
ja case.default.0x4b684d
jmp dword [eax*4 + 0x4b6ae4]
push 0x196
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6870
jmp case.default.0x4b684d
push 0x197
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6894
jmp case.default.0x4b684d
push 0x198
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b68b8
jmp case.default.0x4b684d
push 0x199
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b68e0
jmp case.default.0x4b684d
push 0x19a
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6904
jmp case.default.0x4b684d
push 0x19b
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6928
jmp case.default.0x4b684d
push 0x19c
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6950
jmp case.default.0x4b684d
push 0x19d
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6974
jmp case.default.0x4b684d
push 0x19e
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b6995
jmp case.default.0x4b684d
push 0x19f
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b69b6
jmp case.default.0x4b684d
push 0x1a0
mov ecx, 0x6f63d0
call fcn.004d54d0
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4b69d7
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0xcc]
push ecx
lea edx, [esp + 0x50]
push edx
push 0x1a1
mov ecx, 0x6f63d0
call fcn.004d54d0
push eax
lea eax, [esp + 0x78]
push eax
call fcn.00582c5f
add esp, 0x10
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00441480
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x24]
mov edx, 0x100
test word [eax + 0x48], dx
je 0x4b6a42
mov ecx, eax
push ecx
push ebp
mov ecx, esi
call fcn.004ad0d0
mov edx, dword [esp + 0x14]
cmp word [edx + 0xea], 0
je 0x4b6a5b
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.004b4020
mov edx, dword [esp + 0x14]
mov ecx, 0x834
cmp word [edx + 0x48], cx
jne 0x4b6a75
mov eax, edx
push eax
push ebp
mov ecx, esi
call fcn.004abc30
push 0
lea ecx, [esp + 0x30]
push ecx
push 0xffffb0
push 0x5b1b0b
mov ecx, ebp
call fcn.00441480
mov edx, dword [esp + 0x14]
movzx eax, word [edx + 0x44]
push 1
push 0xc8d7aa
push eax
push ebp
mov ecx, esi
call fcn.004ac440
lea ecx, [esp + 0x2c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.0042f100
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0xdc]
xor ecx, esp
call fcn.005825b3
add esp, 0xec
ret 0x14