Function at 0x41e3e8
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
push 0x1c
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x60], eax
mov edi, eax
mov esi, 0x5ae0d6
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push 0x1c
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x64], eax
mov edi, eax
mov esi, 0x5ae0d6
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push 0xc
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x68], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x5ac256
push ebx
add ebx, 8
push ebx
push 8
call fcn.004c304a
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.0041d768
pop ebx
mov dword [ebp - 0x6c], 0
push 8
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x70], eax
mov edi, eax
mov esi, 0x5ab529
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41e583
push 0x30
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41e5a0
push 0x30
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 1
jne 0x41e67d
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41e5de
push 0x5b
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41e5fb
push 0x5b
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab83a
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
jmp 0x421c64
cmp dword [ebp + 0xc], 5
jl 0x41e6f8
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ad885
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
jmp 0x421c64
inc dword [ebp + 0xc]
push 0
mov ebx, 0x4c6370
call fcn.004c305c
add esp, 4
mov dword [ebp - 4], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 2
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41e78d
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 8], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 3
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41e80e
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 0xb
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41e88f
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 0xc
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov eax, 0x5ab83f
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.004100c4
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41e954
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41e967
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41e97e
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 0xc
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov eax, 0x5ab83f
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.00403bb9
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41ea43
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41ea56
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x94]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41ea6d
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 0xf
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41eaee
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000301
push 0
push 0x10
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 3
mov eax, 1
mov ebx, 0x52e640
call fcn.004c3068
add esp, 0x28
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41eb6f
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab50d
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab50d
push 0x80000301
push 0
push 0x11
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x5ad88e
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 4
call fcn.004010ab
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41ec9d
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41ecd6
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41ece9
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00410303
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41ed11
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
mov eax, 0x5ad8a1
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ed2b
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, 0x5ab50d
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41ed45
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x30]
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.00414a14
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41edec
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41edff
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41ee12
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41ee22
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41ee39
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x5ad8d5
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x41ee6e
mov eax, 0x5ab50d
push eax
push 4
mov ebx, 0x4c3d90
call fcn.004c305c
add esp, 0x34
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffff
je 0x41ee9e
jmp 0x41f265
push 0
mov ebx, 0x4c6370
call fcn.004c305c
add esp, 4
mov dword [ebp - 4], eax
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00410303
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41eedb
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 0
mov ebx, 0x4c3780
call fcn.004c305c
add esp, 4
mov dword [ebp - 0x74], eax
push 0x5ad8e5
push dword [ebp - 0x74]
mov ecx, 2
call fcn.004010ab
add esp, 8
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41ef1f
push ebx
call fcn.004c3044
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x41ef32
mov eax, 0x5ab50d
push eax
push 1
mov ebx, 0x4c4940
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x7c], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x41ef61
mov eax, 0x5ab529
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x41ef78
mov eax, 0x5ab50d
push eax
push 2
mov ebx, 0x4c5da0
call fcn.004c305c
add esp, 0x1c
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41ef9e
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41efb1
push ebx
call fcn.004c3044
add esp, 4
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x5ad8f0
push 0x80000004
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x41efe2
mov eax, 0x5ab50d
push eax
push 4
mov ebx, 0x4c3d90
call fcn.004c305c
add esp, 0x34
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffff
mov eax, 0
setne al
test eax, eax
je 0x41f01c
mov eax, 0x5ad8fe
jmp 0x41f038
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x41f038
push eax
mov ebx, eax
call fcn.00401040
inc eax
push eax
call fcn.004c304a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41f055
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push dword [ebp - 0x34]
push 0x5ad902
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 5
call fcn.004010ab
add esp, 0x14
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41f0ae
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41f0e7
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41f0fa
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41f124
push 0xae2
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41f141
push 0xae2
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 1
jne 0x41f21e
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41f17f
push 0xb0d
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41f19c
push 0xb0d
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab83a
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
jmp 0x421c64
cmp dword [ebp - 0x30], 5
jl 0x41f238
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041e3e8
jmp 0x421c64
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push 1
push 0x3e8
call fcn.00407d5d
jmp 0x41ed2f
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5ab584
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5ad90d
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00418555
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f2c9
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41f2dc
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41f2f3
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5ab584
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5ad922
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00418555
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f35b
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41f36e
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41f385
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5ab584
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5ad938
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00418555
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f3ed
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41f400
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41f417
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
push 0x5ad955
push dword [ebp - 0x44]
push 0x5ad9d6
push dword [ebp - 0x44]
push 0x5ad9f2
mov ecx, 5
call fcn.004010ab
add esp, 0x14
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41f454
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
push 1
mov eax, 0x5ada3b
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 8]
push eax
mov eax, 0x5ada41
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
mov dword [ebp - 0x98], 0
push 0
push dword [ebp - 0x98]
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
mov eax, 0x5ada47
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0040512c
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa0]
test ebx, ebx
je 0x41f55a
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x41f56d
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41f580
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41f593
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41f5a6
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f5b9
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41f5cc
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41f5df
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x41f5ef
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0xa4]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41f606
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
mov eax, 0x5ada85
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
call fcn.00414a14
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41f6a9
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f6bc
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41f6cf
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41f6e6
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 0x1f7
jne 0x41f980
xor ecx, ecx
lea eax, [ebp - 0x58]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xa
jg 0x41f97d
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00410303
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41f734
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
mov eax, 0x5ada85
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
call fcn.00414a14
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41f7d7
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f7ea
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41f7fd
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41f814
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 0x1f7
je 0x41f82a
jmp 0x41f97d
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41f854
push 0x14ef
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41f871
push 0x14ef
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 1
jne 0x41f94e
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41f8af
push 0x151a
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41f8cc
push 0x151a
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab83a
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
jmp 0x421c64
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push 1
push 0x3e8
call fcn.00407d5d
pop ebx
pop ecx
jmp 0x41f6fe
add esp, 8
cmp dword [ebp - 0x3c], 0x19c
jne 0x4205d2
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5adacc
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5adad5
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41f9f1
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41fa04
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41fa1b
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5ab526
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5acafb
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41fa83
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x41fa96
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41faad
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x8c], 0
push 0
lea eax, [ebp - 0x8c]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.00414a14
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41fb6b
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41fb7e
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41fb91
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41fba4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x41fbb7
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41fbce
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 0
cmp eax, ecx
jl 0x41fbfa
push 0x1777
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov eax, 0x5ab584
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov eax, 0x5adae0
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00418555
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41fc6c
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41fc7f
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41fc98
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 3
cmp eax, ecx
jl 0x41fcc6
push 0x17eb
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov eax, 0x5ab526
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov eax, 0x5acb1a
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41fd38
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41fd4b
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41fd64
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x64]
call fcn.00401f79
mov eax, 2
cmp eax, ecx
jl 0x41fd92
push 0x1849
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov eax, 0x5ab526
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov eax, 0x5ac7ac
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41fe04
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41fe17
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41fe30
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x64]
call fcn.00401f79
mov eax, 3
cmp eax, ecx
jl 0x41fe5e
push 0x18a7
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov eax, 0x5ab526
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov eax, 0x5ac469
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41fed0
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x41fee3
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41fefc
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
push dword [ebp - 0x38]
push 0x5ab526
push dword [ebp - 0x5c]
push 0x5adaed
mov ecx, 4
call fcn.004010ab
add esp, 0x10
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 0
mov eax, 0x5acc50
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00414a14
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x41ffd6
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x41ffe9
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x41fffc
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42000c
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x42001f
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x420036
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 1
cmp eax, ecx
jl 0x420062
push 0x19e9
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov eax, 0x5ab526
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov eax, 0x5adb05
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x4200d4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x4200e7
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x420100
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 2
cmp eax, ecx
jl 0x42012e
push 0x1a35
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x420152
push eax
mov ebx, eax
call fcn.00401040
inc eax
push eax
call fcn.004c304a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x420165
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 4
cmp eax, ecx
jl 0x420193
push 0x1a5c
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov eax, 0x5ab526
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov eax, 0x5adaed
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418555
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x420205
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x420218
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x74]
mov ebx, dword [ebx]
test ebx, ebx
je 0x420231
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov ebx, dword [ebp - 0x74]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 0
cmp eax, ecx
jl 0x42025f
push 0x1ad3
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 1
cmp eax, ecx
jl 0x42028f
push 0x1ad3
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 2
cmp eax, ecx
jl 0x4202c2
push 0x1ad3
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x7c], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 3
cmp eax, ecx
jl 0x4202f5
push 0x1ad3
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x80], ebx
mov ebx, dword [ebp - 0x60]
call fcn.00401f79
mov eax, 4
cmp eax, ecx
jl 0x420328
push 0x1ad3
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x84], ebx
push 0x5adb0b
mov ebx, dword [ebp - 0x84]
push dword [ebx]
push 0x5acb4c
mov ebx, dword [ebp - 0x80]
push dword [ebx]
push 0x5acb32
mov ebx, dword [ebp - 0x7c]
push dword [ebx]
push 0x5adb46
mov ebx, dword [ebp - 0x78]
push dword [ebx]
push 0x5adb5d
mov ebx, dword [ebp - 0x74]
push dword [ebx]
push 0x5adb66
mov ecx, 0xb
call fcn.004010ab
add esp, 0x2c
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4203a0
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push 0x5adbc0
push dword [ebp - 0x38]
mov ecx, 2
call fcn.004010ab
add esp, 8
mov dword [ebp - 0x74], eax
push 1
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x78], 0
push 0
lea eax, [ebp - 0x78]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 1
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 3
mov eax, 0x5adbe4
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00414a14
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x420470
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x420483
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x420496
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4204a6
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4204b9
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4204cc
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4204e3
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x80000301
push 0
push dword [ebp - 0x3c]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x78], eax
push dword [ebp - 0x78]
push 0x5adc1c
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 5
call fcn.004010ab
add esp, 0x14
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x420561
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x420574
push ebx
call fcn.004c3044
add esp, 4
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4205b8
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x4205cb
push ebx
call fcn.004c3044
add esp, 4
mov dword [ebp - 0x3c], 0xc8
cmp dword [ebp - 0x3c], 0xc8
je 0x4206fd
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ac772
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x5adc3c
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 4
call fcn.004010ab
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42069d
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4206d6
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4206e9
push ebx
call fcn.004c3044
add esp, 4
push 0xf6d2b4
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x421c64
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x5ace71
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 4
call fcn.004010ab
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42074f
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x420788
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x42079b
push ebx
call fcn.004c3044
add esp, 4
push 0x5adc47
push dword [ebp - 0x40]
push 0x5adcd4
mov ecx, 3
call fcn.004010ab
add esp, 0xc
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4207cc
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
mov eax, 0x5adce0
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
lea eax, [ebp - 0x48]
push eax
call fcn.00414a14
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x8c]
test ebx, ebx
je 0x420889
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x42089c
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x4208af
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4208c2
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4208d9
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov eax, 0x5ab584
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
mov eax, 0x5add03
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00418555
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x420941
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x420954
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42096b
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, 0x5ad8a1
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x420985
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x84], 0
push 0
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x88], 0
push 0
lea eax, [ebp - 0x88]
push eax
push 1
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.00414a14
mov dword [ebp - 0x8c], eax
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x420a36
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x420a49
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x420a5c
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x420a6f
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x420a7f
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x8c]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x420a96
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00421e89
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x420aba
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x5ab50d
push dword [ebp - 0x50]
call fcn.00401921
add esp, 8
cmp eax, 0
jne 0x420b85
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x5add0a
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 4
call fcn.004010ab
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x420b29
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x420b62
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x420b75
push ebx
call fcn.004c3044
add esp, 4
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041e3e8
jmp 0x421c64
push 0x20
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x74], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x74]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x420be3
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x420bf7
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x420c0b
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x420c1f
push ebx
call fcn.004c3044
add esp, 4
pop ebx
call fcn.004c3044
add esp, 4
push 1
mov eax, 0x5add16
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x420c5a
push ebx
call fcn.004c3044
add esp, 4
cmp dword [ebp - 0x78], 1
mov eax, 0
sete al
test eax, eax
je 0x420c7b
mov eax, 0x5add1b
jmp 0x420c80
mov eax, 0x5ab50d
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x420c9d
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x6c], eax
push 0
push 0
push 0
push 0x80000004
push 0
push 0x5ab558
push 0x80000004
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x420cc6
mov eax, 0x5ab50d
push eax
push 3
mov ebx, 0x4c47b0
call fcn.004c305c
add esp, 0x28
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x70]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x420cfe
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x420cfa
imul eax, dword [ebx]
jmp 0x420cef
mov ecx, eax
test ecx, ecx
je 0x420d1d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x420d16
push ebx
push eax
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x420d04
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x70]
call fcn.00401f79
mov eax, 0
cmp eax, ecx
jl 0x420d51
push 0x26bf
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x74]
call fcn.0041c339
mov dword [ebp - 0x78], eax
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.0041c339
mov dword [ebp - 0x7c], eax
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x18]
push eax
call fcn.0041c339
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x70]
call fcn.00401f79
mov eax, 2
cmp eax, ecx
jl 0x420dd7
push 0x284a
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x84], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x84]
call fcn.0041c339
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x70]
call fcn.00401f79
mov eax, 1
cmp eax, ecx
jl 0x420e29
push 0x28ce
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x8c], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x8c]
call fcn.0041c339
mov dword [ebp - 0x90], eax
mov ebx, dword [ebp - 0x70]
call fcn.00401f79
mov eax, 3
cmp eax, ecx
jl 0x420e7b
push 0x2958
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x94], ebx
push 1
push 1
push 1
push 1
push dword [ebp - 0x94]
call fcn.0041c339
mov dword [ebp - 0x98], eax
push 0x5add21
push dword [ebp - 0x98]
push 0x5add7d
push dword [ebp - 0x90]
push 0x5adddc
push dword [ebp - 0x88]
push 0x5ade35
push dword [ebp - 0x80]
push 0x5ade90
push dword [ebp - 0x7c]
push 0x5adeee
push dword [ebp - 0x78]
push 0x5adf4b
mov ecx, 0xd
call fcn.004010ab
add esp, 0x34
mov dword [ebp - 0x9c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x420f12
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x420f25
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x420f38
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x88]
test ebx, ebx
je 0x420f4b
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x420f5e
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x98]
test ebx, ebx
je 0x420f71
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x9c]
push eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x420f88
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 1
mov eax, 0x5adfa4
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x420fd3
push ebx
call fcn.004c3044
add esp, 4
push 0x80000002
push 0
push 1
mov ebx, 6
call fcn.00401004
push 0x80000004
push 0
push 0x5adfd4
push 0x80000004
push 0
push 0x5adfe3
push 0x80000004
push 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x421017
mov eax, 0x5ab50d
push eax
push 6
mov ebx, 0x4c45c0
call fcn.004c305c
add esp, 0x4c
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x421043
push ebx
call fcn.004c3044
add esp, 4
push 0x5adff8
push dword [ebp - 0x80]
mov ecx, 2
call fcn.004010ab
add esp, 8
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x421074
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42108b
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.00414a14
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x421122
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x421135
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x421145
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x42115c
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x5ab50d
push dword [ebp - 0x50]
call fcn.00401921
add esp, 8
cmp eax, 0
jne 0x4213cb
xor ecx, ecx
lea eax, [ebp - 0x58]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0xa
jg 0x4213c8
push 1
push 1
push 1
push dword [ebp + 8]
call fcn.00410303
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4211b6
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0xffffffff
mov dword [ebp - 0x74], 0
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
push 1
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.00414a14
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x80]
test ebx, ebx
je 0x42124d
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x421260
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x421270
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x84]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x421287
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x3c], 0xc8
jne 0x42129d
jmp 0x4213c8
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4212c7
push 0x2cf0
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4212e4
push 0x2cf0
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 1
jne 0x4213c1
mov ebx, dword [0xf6d2a8]
call fcn.00401f79
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x421322
push 0x2d1b
push 0x401560c
push 4
call fcn.004c3050
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x42133f
push 0x2d1b
push 0x401560c
push 1
call fcn.004c3050
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov dword [ebx], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab83a
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
jmp 0x421c64
pop ebx
pop ecx
jmp 0x421180
add esp, 8
push 0x20
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x74], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x74]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x421429
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x42143d
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x421451
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x421465
push ebx
call fcn.004c3044
add esp, 4
pop ebx
call fcn.004c3044
add esp, 4
push 1
mov eax, 0x5add16
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4214a0
push ebx
call fcn.004c3044
add esp, 4
cmp dword [ebp - 0x78], 1
mov eax, 0
sete al
test eax, eax
je 0x4214c1
mov eax, 0x5add1b
jmp 0x4214c6
mov eax, 0x5ab50d
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4214e3
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x6c], eax
push 0x5ae036
push dword [ebp - 0x6c]
mov ecx, 2
call fcn.004010ab
add esp, 8
mov dword [ebp - 0x74], eax
push 1
push 1
push 1
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x421530
push ebx
call fcn.004c3044
add esp, 4
push 0x20
call fcn.004c304a
add esp, 4
mov dword [ebp - 0x7c], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x421593
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4215ad
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4215c1
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4215d5
push ebx
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4215e9
push ebx
call fcn.004c3044
add esp, 4
pop ebx
call fcn.004c3044
add esp, 4
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 1
mov eax, 0x5ae06a
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x421639
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x421650
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 1
mov eax, 0x5ae073
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x42169b
push ebx
call fcn.004c3044
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4216b2
push ebx
call fcn.004c3044
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x5ab50d
push dword [ebp - 0x14]
call fcn.00401921
add esp, 8
cmp eax, 0
jne 0x4217e9
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5ab517]
fstp qword [ebp - 0x80]
push 0x80000004
push 0
push 0x5ab9b4
push 0x80000301
push 0
push 8
fld qword [ebp - 0x80]
call fcn.00401107
push 0x80000301
push 0
push eax
push 0x20004
push 0x160155cb
push 0x52010001
push 4
mov eax, 1
mov ebx, 0x52e810
call fcn.004c3068
add esp, 0x34
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x4c5370
call fcn.004c305c
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x5ae07d
push dword [ebp - 8]
push 0x5ab85a
push dword [ebp - 0x74]
mov ecx, 4
call fcn.004010ab
add esp, 0x10
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x42178d
push ebx
call fcn.004c3044
add esp, 4
push 1
push 1
mov dword [ebp - 0x7c], 0
push 0
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00402b27
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4217c6
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x4217d9
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
push 1
mov eax, 0x5ae099
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x421830
push ebx
call fcn.004c3044
add esp, 4
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
push 1
mov eax, 0x5ae0a5
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x88], eax
mov ebx, dword [ebp - 0x84]
test ebx, ebx
je 0x42187d
push ebx
call fcn.004c3044
add esp, 4
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
push 1
mov eax, 0x5ae0ab
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
mov dword [ebp - 0x94], eax
mov ebx, dword [ebp - 0x90]
test ebx, ebx
je 0x4218ca
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x421c74
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x421c84
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x421c94
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x421ca4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x421cb4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x421cc4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x421cd4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x421ce4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x421cf4
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x421d04
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x421d14
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x421d24
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x421d34
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x421d44
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x421d54
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x421d64
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x421d74
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x421d84
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x421d94
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x421db2
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x421dae
imul eax, dword [ebx]
jmp 0x421da3
mov ecx, eax
test ecx, ecx
je 0x421dd1
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x421dca
push ebx
push eax
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x421db8
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x64]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x421df7
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x421df3
imul eax, dword [ebx]
jmp 0x421de8
mov ecx, eax
test ecx, ecx
je 0x421e16
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x421e0f
push ebx
push eax
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x421dfd
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x68]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x421e3e
push ebx
call fcn.004c3044
add esp, 4
mov ebx, dword [ebp - 0x70]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x421e5c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x421e58
imul eax, dword [ebx]
jmp 0x421e4d
mov ecx, eax
test ecx, ecx
je 0x421e7b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x421e74
push ebx
push eax
call fcn.004c3044
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x421e62
call fcn.004c3044
add esp, 4
mov esp, ebp
pop ebp
ret 8