Function at 0x10046e30
Capabilities:
Check for time delay via gettickcount
Check http status code
Create process on windows
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x1014a018]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x41
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1005018b
push 1
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1005018b
push 2
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1005018b
push 3
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1005018b
push 4
mov eax, 0x861110
call eax
mov edx, 0x85ec20
mov ecx, eax
call edx
test al, al
jne 0x1005018b
mov eax, 5
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 6
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 7
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 8
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 9
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0xa
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0xb
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0xc
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0xd
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0xe
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0xf
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x10
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x13
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x14
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x15
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x16
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x17
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x18
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x19
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x1a
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x1d
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x1e
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x20
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x24
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x27
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x39
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x3a
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x3b
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x3c
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x3d
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x3e
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x3f
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x41
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x42
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x44
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x45
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x46
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x48
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x49
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x4a
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x4b
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x4c
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x4d
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x4e
call fcn.10079a50
test al, al
jne 0x1005018b
mov eax, 0x4f
call fcn.10079a50
test al, al
jne 0x1005018b
cmp byte [0x118c80d1], 1
je 0x1005018b
cmp byte [0x118cb941], 1
je 0x1005018b
cmp byte [0x118c846d], 1
je 0x1005018b
cmp byte [0x118c8125], 1
je 0x1005018b
cmp byte [0x118ceebd], 1
je 0x1005018b
cmp byte [0x118c7999], 1
je 0x1005018b
cmp byte [0x118c7f81], 1
je 0x1005018b
cmp byte [0x118d2829], 1
je 0x1005018b
cmp byte [0x118c5041], 1
je 0x1005018b
cmp byte [0x118c639d], 1
je 0x1005018b
cmp byte [0x118c60a9], 1
je 0x1005018b
cmp byte [0x118c60fd], 1
je 0x1005018b
cmp byte [0x118c7b3d], 1
je 0x1005018b
cmp byte [0x118d0465], 1
je 0x1005018b
cmp byte [0x118cbc89], 1
je 0x1005018b
cmp byte [0x118d1ef9], 1
je 0x1005018b
cmp byte [0x118cd9bd], 1
je 0x1005018b
cmp byte [0x118ce0a1], 1
je 0x1005018b
cmp byte [0x118ce634], 1
je 0x1005018b
cmp byte [0x118c8029], 1
je 0x1005018b
cmp byte [0x118c8179], 1
je 0x1005018b
call fcn.10063140
test al, al
jne 0x1005018b
mov eax, dword [0x10a885a4]
cmp byte [eax + 0x29], 0
jne 0x1005018b
mov ecx, dword [0x1190acb4]
cmp byte [ecx + 0x29], 0
jne 0x1005018b
cmp byte [0x101667f8], 0
jne 0x1005018b
mov eax, 0x6e
call fcn.10079a50
test al, al
jne 0x1005018b
mov edx, dword [0x10a8885c]
cmp byte [edx + 0x29], al
jne 0x1005018b
cmp byte [0x118c80d1], 1
je 0x1005018b
cmp byte [0x118cf0b5], 1
je 0x1005018b
cmp byte [0x118cc36d], 1
je 0x1005018b
cmp byte [0x118c5e09], 1
je 0x1005018b
cmp byte [0x118c5eb1], 1
je 0x1005018b
cmp byte [0x118d2b1d], 1
je 0x1005018b
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1013f5d8]
fadd qword [0x101400e0]
call fcn.1012e5b0
fild dword [0xe61e58]
push eax
fdiv dword [0xe7c3d4]
fmul qword [0x1013f510]
fsub qword [0x1013f950]
call fcn.1012e5b0
push eax
call fcn.10046ab0
cmp byte [0x10a88af9], 0
jne 0x10047402
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1012db16
mov esp, ebp
pop ebp
ret
push ebx
push esi
push edi
call fcn.100508e0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
fldz
sub esp, 0x24
fst dword [esp + 0x20]
fld dword [0x10141348]
mov eax, 0xf4001
fstp dword [esp + 0x1c]
fld dword [0x10141344]
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x10a88b08]
fstp dword [esp + 0xc]
fld dword [0x10a88b04]
fstp dword [esp + 8]
fild dword [0x10a88b00]
fstp dword [esp + 4]
fild dword [0x10a88afc]
fstp dword [esp]
call fcn.100466a0
fld dword [0x10a88b04]
push 0x10a40dd8
push 0
call fcn.1012e5b0
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de53c]
push eax
mov eax, dword [0x10a88b00]
push 0
push 0xffff00ff
add eax, 0x14
push eax
push ecx
push edx
mov cl, 3
call fcn.1008a600
fild dword [0x10a88afc]
mov edi, dword [0x10a88b00]
add esp, 0x20
fadd dword [0x10a88b04]
add edi, 0x14
push 0xa
mov dword [ebp - 0xa0], edi
fsub qword [0x1013fa48]
fld st(0)
call fcn.1012e5b0
mov esi, 0xa
mov edx, edi
mov ecx, eax
call fcn.10046570
test al, al
je 0x100475fb
push 1
fstp st(0)
mov eax, 0x791090
call eax
fldz
add esp, 4
sub esp, 0x24
fstp dword [esp + 0x20]
test al, al
fld dword [0x10141340]
mov eax, 0xf4001
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
je 0x10047581
fld dword [0x1014133c]
mov ecx, dword [0x10a88b00]
fstp dword [esp + 0x14]
add ecx, 0x14
fld dword [0x10141344]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x10]
fld dword [0x1013f6a0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
fstp dword [esp + 4]
fild dword [0x10a88afc]
fadd dword [0x10a88b04]
fsub qword [0x1013fa48]
fstp dword [ebp - 0xa0]
fld dword [ebp - 0xa0]
jmp 0x1004764f
fld dword [0x101406b4]
mov edx, dword [0x10a88b00]
fstp dword [esp + 0x14]
add edx, 0x14
fld dword [0x10141338]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x10]
fld dword [0x1013f6a0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
fstp dword [esp + 4]
fild dword [0x10a88afc]
fadd dword [0x10a88b04]
fsub qword [0x1013fa48]
fstp dword [ebp - 0xa0]
fld dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
push 1
mov eax, 0x791050
call eax
add esp, 4
test al, al
je 0x10047657
mov byte [0x10a88af9], 0
jmp 0x10047657
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141340]
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
fld dword [0x10141334]
fstp dword [esp + 0x14]
fld dword [0x10141330]
fstp dword [esp + 0x10]
fld dword [0x1013f6a0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
fstp dword [esp + 4]
fstp dword [ebp - 0xa0]
fld dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
xor edi, edi
mov dword [ebp - 0xb0], edi
xor ebx, ebx
mov dword [ebp - 0xb8], edi
jmp 0x10047670
mov eax, 0x10a88b48
call fcn.10050ec0
cmp dword [ebp - 0xb0], eax
jae 0x1004798a
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
push 0x14
add edx, 0x2d
lea ecx, [ecx + ebx + 0x11]
mov esi, 0x4c
call fcn.10046570
test al, al
je 0x100477cf
push 1
mov edx, 0x791090
call edx
fldz
mov ecx, dword [0x10a88afc]
add esp, 4
sub esp, 0x24
test al, al
mov eax, dword [0x10a88b00]
lea edx, [ecx + ebx + 0x11]
je 0x1004772f
fst dword [esp + 0x20]
add eax, 0x2d
fld dword [0x1014132c]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 0x1c]
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fstp dword [esp + 0x14]
fld dword [0x10141328]
fstp dword [esp + 0x10]
fld dword [0x10150fa8]
fstp dword [esp + 0xc]
fld dword [0x10141324]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
jmp 0x1004790d
fstp dword [esp + 0x20]
add eax, 0x2d
fld dword [0x1014132c]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 0x1c]
mov eax, 0xf4001
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fld dword [0x10140bc8]
fstp dword [esp + 0x14]
fld dword [0x10141320]
fstp dword [esp + 0x10]
fld dword [0x10150fa8]
fstp dword [esp + 0xc]
fld dword [0x10141324]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
push 1
mov eax, 0x791050
call eax
add esp, 4
test al, al
je 0x1004791a
mov ecx, dword [0x10a88b48]
mov edx, dword [ebp - 0xb8]
mov di, word [edx + ecx]
call fcn.10046850
mov edi, dword [ebp - 0xb8]
jmp 0x1004791a
movsx eax, word [0x10a88b2c]
mov ecx, dword [0x10a88b48]
sub esp, 0x10
cmp dword [edi + ecx], eax
jne 0x1004787d
fld1
fst dword [esp + 0xc]
fld dword [0x1013f5cc]
fst dword [esp + 8]
fstp dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add edx, 0x2d
fld dword [0x1014132c]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
lea ecx, [eax + ebx + 0x11]
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fld dword [0x10140bc8]
fstp dword [esp + 0x14]
fld dword [0x10141320]
fstp dword [esp + 0x10]
fld dword [0x10150fa8]
fstp dword [esp + 0xc]
fld dword [0x10141324]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
jmp 0x1004790d
fld dword [0x1013f8e8]
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add edx, 0x2d
fld dword [0x1014132c]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
lea ecx, [eax + ebx + 0x11]
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fld dword [0x10140bc8]
fstp dword [esp + 0x14]
fld dword [0x10141320]
fstp dword [esp + 0x10]
fld dword [0x10150fa8]
fstp dword [esp + 0xc]
fld dword [0x10141324]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0xf4001
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
mov edx, dword [0x10a88b48]
mov ecx, dword [0x10a88b00]
lea eax, [edi + edx + 4]
mov edx, dword [0x10a88afc]
push eax
push 0
push 0x4c
push 0
add ecx, 0x32
push 0xffffffffffffffbf
push ecx
mov ecx, dword [0x116de53c]
lea eax, [edx + ebx + 0x11]
push eax
push ecx
mov cl, 3
call fcn.1008a600
inc dword [ebp - 0xb0]
add edi, 0x28
add esp, 0x20
add ebx, esi
mov dword [ebp - 0xb8], edi
cmp edi, 0xc8
jl 0x10047670
fld dword [0x10a88b08]
push 0x10135e74
fsub qword [0x1013f9d8]
call fcn.1012e5b0
fld dword [0x10a88b04]
fsub qword [0x1013f790]
push eax
call fcn.1012e5b0
mov edx, dword [0x10a88b00]
mov ecx, dword [0x116de53c]
push eax
mov eax, dword [0x10a88afc]
push 0x50
push 0xff
add edx, 0x41
push edx
add eax, 0x10
push eax
push ecx
mov cl, 3
call fcn.1008a600
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10135e74
push 0x96
push 0x96
push 0x50
push 0xffffffffffffffff
add edx, 0x48
push edx
add eax, 0x5f
push eax
push ecx
xor cl, cl
call fcn.1008a600
add esp, 0x40
mov eax, 0x10a88b58
xor esi, esi
call fcn.10050ee0
test eax, eax
je 0x10047a3e
mov ecx, dword [0x10a88b58]
mov dx, word [0x10a88b2c]
add ecx, 0x24
cmp word [ecx], dx
jne 0x10047a38
inc esi
add ecx, 0x38
dec eax
jne 0x10047a32
dec esi
mov dword [ebp - 0xa0], esi
fild dword [ebp - 0xa0]
push ecx
fdiv qword [0x1013f580]
fstp dword [ebp - 0xa0]
fld dword [ebp - 0xa0]
fstp dword [esp]
call fcn.10051c50
add esp, 4
call fcn.1012e5b0
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
lea edi, [eax + 1]
add edx, 0x106
add ecx, 0x4e
push 0xc
mov esi, 0xc
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xa0], ecx
call fcn.10046570
test al, al
je 0x10047c11
push 1
mov edx, 0x791090
call edx
fldz
add esp, 4
sub esp, 0x24
fstp dword [esp + 0x20]
fld dword [0x1014131c]
fstp dword [esp + 0x1c]
fld dword [0x10141318]
fstp dword [esp + 0x18]
fld dword [0x10141164]
fstp dword [esp + 0x14]
test al, al
je 0x10047bc6
fld dword [0x101412a0]
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
fstp dword [esp + 0x10]
fld dword [0x1013fc4c]
add eax, 0x106
fst dword [esp + 0xc]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 8]
add ecx, 0x4e
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
mov eax, 0xf4002
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov ax, word [0x10a88b30]
movsx edx, ax
cmp edx, edi
jge 0x10047c6d
inc ax
mov word [0x10a88b30], ax
cwde
lea esi, [eax + eax*4]
add esi, esi
xor edi, edi
xor ebx, ebx
test esi, esi
jle 0x10047c6d
mov eax, 0x10a88b58
call fcn.10050ee0
mov ecx, dword [0x10a88b58]
mov dword [ebp - 0xb0], eax
xor eax, eax
mov edi, edi
cmp ebx, dword [ebp - 0xb0]
jae 0x10047c6d
mov dx, word [0x10a88b2c]
cmp word [eax + ecx + 0x24], dx
jne 0x10047ba2
lea edx, [esi - 0xa]
cmp edi, edx
jge 0x10047baf
inc edi
inc ebx
add eax, 0x38
cmp edi, esi
jl 0x10047b80
jmp 0x10047c6d
lea eax, [ebx*8]
sub eax, ebx
mov ax, word [ecx + eax*8]
call fcn.100468b0
jmp 0x10047c6d
fld dword [0x10141314]
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
fstp dword [esp + 0x10]
fld dword [0x1013fc4c]
add ecx, 0x106
fst dword [esp + 0xc]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 8]
add edx, 0x4e
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
jmp 0x10047c60
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
fld dword [0x1014131c]
fstp dword [esp + 0x1c]
fld dword [0x10141318]
fstp dword [esp + 0x18]
fld dword [0x10141164]
fstp dword [esp + 0x14]
fld dword [0x10141310]
fstp dword [esp + 0x10]
fld dword [0x1013fc4c]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xb0]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0xf4002
fstp dword [esp]
call fcn.100466a0
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0x106
add ecx, 0x16
push 0xc
mov esi, 0xc
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xa0], ecx
call fcn.10046570
test al, al
je 0x10047dfc
push 1
mov eax, 0x791090
call eax
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
add esp, 4
sub esp, 0x24
fstp dword [esp + 0x20]
add ecx, 0x106
fld dword [0x1014131c]
add edx, 0x16
fstp dword [esp + 0x1c]
test al, al
fld dword [0x10141318]
mov eax, 0xf4002
fstp dword [esp + 0x18]
fld dword [0x10141164]
fstp dword [esp + 0x14]
je 0x10047dc6
fld dword [0x1014130c]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x10]
fld dword [0x1013fc4c]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
cmp word [0x10a88b30], 1
jle 0x10047e58
mov ax, word [0x10a88b30]
dec ax
mov word [0x10a88b30], ax
cwde
lea esi, [eax + eax*4]
add esi, esi
xor ebx, ebx
xor edi, edi
test esi, esi
jle 0x10047e58
mov eax, 0x10a88b58
call fcn.10050ee0
mov ecx, dword [0x10a88b58]
mov dword [ebp - 0xb0], eax
xor eax, eax
lea esp, [esp]
cmp edi, dword [ebp - 0xb0]
jae 0x10047e58
mov dx, word [0x10a88b2c]
cmp word [eax + ecx + 0x24], dx
jne 0x10047da2
lea edx, [esi - 0xa]
cmp ebx, edx
jge 0x10047daf
inc ebx
inc edi
add eax, 0x38
cmp ebx, esi
jl 0x10047d80
jmp 0x10047e58
lea eax, [edi*8]
sub eax, edi
mov ax, word [ecx + eax*8]
call fcn.100468b0
jmp 0x10047e58
fld dword [0x10141308]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x10]
fld dword [0x1013fc4c]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
jmp 0x10047e50
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4002
fld dword [0x1014131c]
fstp dword [esp + 0x1c]
fld dword [0x10141318]
fstp dword [esp + 0x18]
fld dword [0x10141164]
fstp dword [esp + 0x14]
fld dword [0x10140bb4]
fstp dword [esp + 0x10]
fld dword [0x1013fc4c]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xb0]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
movsx ecx, word [0x10a88b30]
mov eax, dword [ebp - 0xb8]
mov edx, dword [0x10a88b00]
push eax
mov eax, dword [0x10a88afc]
push ecx
mov ecx, dword [0x116de53c]
push str._d____d
xor esi, esi
push esi
push 0x48
push esi
push 0xffffffffffffffbf
add edx, 0x107
push edx
add eax, 0x14
push eax
push ecx
mov cl, 3
call fcn.1008a600
movsx eax, word [0x10a88b30]
lea edi, [eax + eax*4]
add edi, edi
add esp, 0x28
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xb0], esi
cmp edi, esi
jle 0x10050178
mov ebx, dword [sym.imp.MSVCR100.dll_sprintf]
mov eax, 0x10a88b58
call fcn.10050ee0
cmp dword [ebp - 0xb0], eax
jae 0x10050178
mov ecx, dword [ebp - 0xb0]
mov edx, dword [0x10a88b58]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
add eax, eax
add eax, eax
mov dword [ebp - 0xa4], eax
mov ax, word [eax + edx + 0x24]
cmp ax, word [0x10a88b2c]
jne 0x1005015a
add edi, 0xfffffff6
cmp dword [ebp - 0xbc], edi
jl 0x10050154
mov edi, dword [ebp - 0xbc]
mov eax, 0x66666667
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x10a88b00]
lea ecx, [eax + eax*4]
add ecx, ecx
sub edi, ecx
mov ecx, dword [0x10a88afc]
imul edi, edi, 0x13
push 0x13
lea edx, [edi + edx + 0x46]
add ecx, 0x14
mov esi, 0x48
call fcn.10046570
test al, al
je 0x1004807d
push 1
mov eax, 0x791090
call eax
fldz
mov ecx, dword [0x10a88b00]
add esp, 4
sub esp, 0x24
test al, al
mov eax, dword [0x10a88afc]
lea edx, [edi + ecx + 0x46]
je 0x10047fe3
fst dword [esp + 0x20]
mov dword [ebp - 0xa0], edx
fld dword [0x1014132c]
add eax, 0x14
fstp dword [esp + 0x1c]
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fstp dword [esp + 0x14]
fld dword [0x10141328]
fstp dword [esp + 0x10]
fld dword [0x1013fb24]
fstp dword [esp + 0xc]
fld dword [0x101402a8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
jmp 0x100481c0
fstp dword [esp + 0x20]
mov dword [ebp - 0xa0], edx
fld dword [0x1014132c]
add eax, 0x14
fstp dword [esp + 0x1c]
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fld dword [0x10140bc8]
fstp dword [esp + 0x14]
fld dword [0x10141320]
fstp dword [esp + 0x10]
fld dword [0x1013fb24]
fstp dword [esp + 0xc]
fld dword [0x101402a8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, 0xf4001
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
push 1
mov ecx, 0x791050
call ecx
add esp, 4
test al, al
je 0x100481cd
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
mov ax, word [eax + edx]
call fcn.100468b0
jmp 0x100481cd
movsx ecx, word [0x10a88b2e]
mov edx, dword [ebp - 0xa4]
mov eax, dword [0x10a88b58]
sub esp, 0x10
cmp dword [edx + eax], ecx
jne 0x10048130
fld1
fst dword [esp + 0xc]
fld dword [0x1013f5cc]
fst dword [esp + 8]
fstp dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
fldz
mov ecx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
lea edx, [edi + ecx + 0x46]
fld dword [0x1014132c]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
add eax, 0x14
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fld dword [0x10140bc8]
fstp dword [esp + 0x14]
fld dword [0x10141320]
fstp dword [esp + 0x10]
fld dword [0x1013fb24]
fstp dword [esp + 0xc]
fld dword [0x101402a8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
jmp 0x100481c0
fld dword [0x1013f8e8]
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
fldz
mov ecx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
lea edx, [edi + ecx + 0x46]
fld dword [0x1014132c]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
add eax, 0x14
fld dword [0x101406b4]
fstp dword [esp + 0x18]
fld dword [0x10140bc8]
fstp dword [esp + 0x14]
fld dword [0x10141320]
fstp dword [esp + 0x10]
fld dword [0x1013fb24]
fstp dword [esp + 0xc]
fld dword [0x101402a8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0xf4001
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call dword [sym.imp.OPENGL32.dll_glColor4f]
mov ecx, dword [0x10a88b58]
mov esi, dword [ebp - 0xa4]
mov eax, dword [0x10a88b00]
lea edx, [esi + ecx + 4]
push edx
mov edx, dword [0x10a88afc]
push 0
push 0x48
push 0
lea ecx, [edi + eax + 0x4b]
mov eax, dword [0x116de53c]
push 0xffffffffffffffbf
push ecx
add edx, 0x14
push edx
push eax
mov cl, 3
call fcn.1008a600
movsx ecx, word [0x10a88b2e]
mov edx, dword [0x10a88b58]
add esp, 0x20
cmp dword [esi + edx], ecx
jne 0x10050154
mov ax, word [0x10a88b2e]
test ax, ax
jne 0x100482ca
mov eax, edx
mov ecx, esi
cmp word [ecx + eax + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
push ecx
fst dword [esp]
push 1
fld1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
add edx, 0x48
mov dword [ebp - 0xa0], edx
add eax, 0x5f
fst dword [esp + 0x14]
mov ecx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x10140308]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a50
call ecx
add esp, 0x30
jmp 0x10048b78
cmp ax, 1
jne 0x1004835e
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
cmp word [eax + edx + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88afc]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88b00]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add ecx, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], ecx
add edx, 0x5f
fst dword [esp + 0x14]
mov eax, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x10140308]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a51
call eax
add esp, 0x30
jmp 0x10048b78
cmp ax, 9
jne 0x100483f1
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp word [edx + ecx + 0x26], 0
jne 0x10048b60
fldz
mov eax, dword [0x10a88b00]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88afc]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add eax, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], eax
add ecx, 0x5f
fst dword [esp + 0x14]
mov edx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a73
call edx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0xa
jne 0x10048483
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
cmp word [ecx + eax + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
push ecx
fst dword [esp]
push 1
fld1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
add edx, 0x48
mov dword [ebp - 0xa0], edx
add eax, 0x5f
fst dword [esp + 0x14]
mov ecx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a74
call ecx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0xb
jne 0x10048517
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
cmp word [eax + edx + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88afc]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88b00]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add ecx, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], ecx
add edx, 0x5f
fst dword [esp + 0x14]
mov eax, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a7c
call eax
add esp, 0x30
jmp 0x10048b78
cmp ax, 0xc
jne 0x100485aa
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp word [edx + ecx + 0x26], 0
jne 0x10048b60
fldz
mov eax, dword [0x10a88b00]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88afc]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add eax, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], eax
add ecx, 0x5f
fst dword [esp + 0x14]
mov edx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a7a
call edx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0xd
jne 0x1004863c
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
cmp word [ecx + eax + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
push ecx
fst dword [esp]
push 1
fld1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
add edx, 0x48
mov dword [ebp - 0xa0], edx
add eax, 0x5f
fst dword [esp + 0x14]
mov ecx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a77
call ecx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0xe
jne 0x100486d0
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
cmp word [eax + edx + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88afc]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88b00]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add ecx, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], ecx
add edx, 0x5f
fst dword [esp + 0x14]
mov eax, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a76
call eax
add esp, 0x30
jmp 0x10048b78
cmp ax, 0xf
jne 0x10048763
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp word [edx + ecx + 0x26], 0
jne 0x10048b60
fldz
mov eax, dword [0x10a88b00]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88afc]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add eax, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], eax
add ecx, 0x5f
fst dword [esp + 0x14]
mov edx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a78
call edx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x10
jne 0x100487f5
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
cmp word [ecx + eax + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
push ecx
fst dword [esp]
push 1
fld1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
add edx, 0x48
mov dword [ebp - 0xa0], edx
add eax, 0x5f
fst dword [esp + 0x14]
mov ecx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a7b
call ecx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x11
jne 0x10048889
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
cmp word [eax + edx + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88afc]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88b00]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add ecx, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], ecx
add edx, 0x5f
fst dword [esp + 0x14]
mov eax, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a7d
call eax
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x12
jne 0x1004891c
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp word [edx + ecx + 0x26], 0
jne 0x10048b60
fldz
mov eax, dword [0x10a88b00]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88afc]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add eax, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], eax
add ecx, 0x5f
fst dword [esp + 0x14]
mov edx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a75
call edx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x13
jne 0x100489ae
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
cmp word [ecx + eax + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
push ecx
fst dword [esp]
push 1
fld1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
add edx, 0x48
mov dword [ebp - 0xa0], edx
add eax, 0x5f
fst dword [esp + 0x14]
mov ecx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a79
call ecx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x1b
jne 0x10048a42
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
cmp word [eax + edx + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88afc]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88b00]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add ecx, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], ecx
add edx, 0x5f
fst dword [esp + 0x14]
mov eax, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a8e
call eax
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x1c
jne 0x10048ad5
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp word [edx + ecx + 0x26], 0
jne 0x10048b60
fldz
mov eax, dword [0x10a88b00]
push ecx
fst dword [esp]
fld1
mov ecx, dword [0x10a88afc]
push 1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
add eax, 0x48
fstp dword [esp + 0x18]
mov dword [ebp - 0xa0], eax
add ecx, 0x5f
fst dword [esp + 0x14]
mov edx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a8f
call edx
add esp, 0x30
jmp 0x10048b78
cmp ax, 0x1d
jne 0x10048b60
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
cmp word [ecx + eax + 0x26], 0
jne 0x10048b60
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
push ecx
fst dword [esp]
push 1
fld1
push 1
sub esp, 0x20
fst dword [esp + 0x1c]
fstp dword [esp + 0x18]
add edx, 0x48
mov dword [ebp - 0xa0], edx
add eax, 0x5f
fst dword [esp + 0x14]
mov ecx, 0x637c60
fstp dword [esp + 0x10]
fld dword [0x1013fd24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
push 0x81a90
call ecx
add esp, 0x30
jmp 0x10048b78
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
add edx, 0x48
push edx
add eax, 0x5f
push eax
call fcn.10050400
mov esi, dword [ebp - 0xa4]
add esi, dword [0x10a88b58]
cmp dword [esi + 0x30], 0
je 0x1004902e
cmp word [0x10a88b2e], 0x12
je 0x1004902e
call fcn.100462b0
mov esi, dword [esi + 0x30]
sub esi, eax
test esi, esi
jle 0x10049010
mov eax, 0x91a2b3c5
imul esi
add edx, esi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0xa0], eax
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
cdq
mov edi, 0x3c
idiv edi
mov eax, ecx
shl eax, 4
sub eax, ecx
push 0x31
add eax, eax
lea ecx, [ebp - 0x9b]
add eax, eax
push 0
mov edi, esi
push ecx
sub edi, eax
mov byte [ebp - 0x9c], 0
mov dword [ebp - 0xb8], edx
call sub.MSVCR100.dll_memset
movsx eax, word [0x10a88b2c]
lea edx, [eax + eax*4]
mov eax, dword [0x10a88b48]
add esp, 0xc
cmp byte [eax + edx*8 + 0x24], 0
jne 0x10048c37
push 0x10a40e50
lea ecx, [ebp - 0x9c]
push ecx
jmp 0x10048c43
push 0x10a40ec8
lea edx, [ebp - 0x9c]
push edx
call ebx
mov ecx, dword [ebp - 0xa0]
add esp, 8
cmp ecx, 0x18
jl 0x10048cc0
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, dword [0x10a88b58]
xor edx, edx
lea ecx, [ebp - 0x9c]
push ecx
mov ecx, dword [ebp - 0xa4]
cmp esi, dword [ecx + eax + 0x28]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
setg dl
push str._s:__d_days_s_
push 0
push 0x96
push 0
add eax, 0x5f
dec edx
and edx, 0xff0100
dec edx
push edx
mov edx, dword [0x10a88b00]
add edx, 0xed
push edx
push eax
push ecx
mov cl, 3
call fcn.1008a600
add esp, 0x28
jmp 0x10048d23
mov edx, dword [ebp - 0xb8]
push edi
push edx
mov edx, dword [0x10a88b58]
push ecx
xor ecx, ecx
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0xa4]
cmp esi, dword [eax + edx + 0x28]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
setg cl
push str._s:__02d:_02d:_02d
push 0
push 0x96
push 0
add edx, 0x5f
dec ecx
and ecx, 0xff0100
dec ecx
push ecx
mov ecx, dword [0x10a88b00]
add ecx, 0xed
push ecx
push edx
push eax
mov cl, 3
call fcn.1008a600
add esp, 0x30
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp esi, dword [edx + ecx + 0x28]
jg 0x1004902e
mov si, word [0x10a88b2e]
cmp si, 0x12
je 0x10049035
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0xfc
add ecx, 0x68
push 0x17
mov esi, 0x84
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], ecx
call fcn.10046570
test al, al
je 0x10048f72
push 1
mov eax, 0x791090
call eax
add esp, 4
test al, al
je 0x10048e8f
fld dword [0x1013f8e8]
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
sub esp, 0x10
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add ecx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x1c]
add edx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40f40
push 0
push esi
push 0
push 0xffffff7f
add eax, 0x102
push eax
add ecx, 0x68
push ecx
push edx
mov cl, 3
call fcn.1008a600
mov si, word [0x10a88b2e]
add esp, 0x20
jmp 0x1004903b
fldz
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add eax, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 0x1c]
add ecx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffffffffffffff
add edx, 0x102
push edx
add eax, 0x68
push eax
push ecx
mov cl, 3
call fcn.1008a600
push 1
mov edx, 0x791050
call edx
add esp, 0x24
test al, al
je 0x1004902e
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
mov ax, word [ecx + eax + 0x2c]
call fcn.10050e90
jmp 0x1004902e
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141304]
fstp dword [esp + 0x1c]
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xac]
fstp dword [esp + 4]
fild dword [ebp - 0xa8]
fstp dword [esp]
call fcn.100466a0
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffff7f
add edx, 0x102
push edx
add eax, 0x68
push eax
push ecx
mov cl, 3
call fcn.1008a600
add esp, 0x20
jmp 0x1004902e
mov eax, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
cmp word [edx + eax + 0x2e], 0xffff
je 0x1004902e
mov ecx, edx
mov ax, word [ecx + eax]
call fcn.100468b0
mov si, word [0x10a88b2e]
mov edi, dword [sym.imp.OPENGL32.dll_glColor4f]
cmp si, 0x11
jne 0x100492fa
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0xfc
add ecx, 0x68
push 0x17
mov esi, 0x84
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], ecx
call fcn.10046570
test al, al
je 0x10049257
push 1
mov edx, 0x791090
call edx
add esp, 4
test al, al
je 0x10049172
fld dword [0x1013f8e8]
sub esp, 0x10
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
fldz
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add eax, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 0x1c]
add ecx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10a40f40
push 0
push esi
push 0
push 0xffffff7f
add edx, 0x102
push edx
add eax, 0x68
push eax
push ecx
jmp 0x100492e9
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add edx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
add eax, 0x68
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, 0xf4001
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffffffffffffff
add ecx, 0x102
push ecx
add edx, 0x68
push edx
push eax
mov cl, 3
call fcn.1008a600
push 1
mov ecx, 0x791050
call ecx
add esp, 0x24
test al, al
je 0x100492f3
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
mov ax, word [eax + edx + 0x2c]
call fcn.10050e90
jmp 0x100492f3
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141304]
fstp dword [esp + 0x1c]
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xac]
fstp dword [esp + 4]
fild dword [ebp - 0xa8]
fstp dword [esp]
call fcn.100466a0
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffff7f
add ecx, 0x102
push ecx
add edx, 0x68
push edx
push eax
mov cl, 3
call fcn.1008a600
add esp, 0x20
mov si, word [0x10a88b2e]
cmp si, 0x12
jne 0x100495b9
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0xfc
add ecx, 0x68
push 0x17
mov esi, 0x84
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], ecx
call fcn.10046570
test al, al
je 0x10049517
push 1
mov ecx, 0x791090
call ecx
add esp, 4
test al, al
je 0x10049432
fld dword [0x1013f8e8]
sub esp, 0x10
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add edx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
add eax, 0x68
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, 0xf4001
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
push 0x10a40f40
push 0
push esi
push 0
push 0xffffff7f
add ecx, 0x102
push ecx
add edx, 0x68
push edx
push eax
jmp 0x100495a8
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add ecx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x1c]
add edx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffffffffffffff
add eax, 0x102
push eax
add ecx, 0x68
push ecx
push edx
mov cl, 3
call fcn.1008a600
push 1
mov eax, 0x791050
call eax
add esp, 0x24
test al, al
je 0x100495b2
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
mov ax, word [edx + ecx + 0x2c]
call fcn.10050e90
jmp 0x100495b2
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141304]
fstp dword [esp + 0x1c]
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xac]
fstp dword [esp + 4]
fild dword [ebp - 0xa8]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffff7f
add eax, 0x102
push eax
add ecx, 0x68
push ecx
push edx
mov cl, 3
call fcn.1008a600
add esp, 0x20
mov si, word [0x10a88b2e]
cmp si, 0x19
jne 0x10049877
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0xfc
add ecx, 0x68
push 0x17
mov esi, 0x84
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], ecx
call fcn.10046570
test al, al
je 0x100497d4
push 1
mov eax, 0x791090
call eax
add esp, 4
test al, al
je 0x100496f1
fld dword [0x1013f8e8]
sub esp, 0x10
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add ecx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x1c]
add edx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40f40
push 0
push esi
push 0
push 0xffffff7f
add eax, 0x102
push eax
add ecx, 0x68
push ecx
push edx
jmp 0x10049866
fldz
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add eax, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 0x1c]
add ecx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffffffffffffff
add edx, 0x102
push edx
add eax, 0x68
push eax
push ecx
mov cl, 3
call fcn.1008a600
push 1
mov edx, 0x791050
call edx
add esp, 0x24
test al, al
je 0x10049870
mov eax, dword [0x10a88b58]
mov ecx, dword [ebp - 0xa4]
mov ax, word [ecx + eax + 0x2c]
call fcn.10050e90
jmp 0x10049870
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141304]
fstp dword [esp + 0x1c]
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xac]
fstp dword [esp + 4]
fild dword [ebp - 0xa8]
fstp dword [esp]
call fcn.100466a0
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffff7f
add edx, 0x102
push edx
add eax, 0x68
push eax
push ecx
mov cl, 3
call fcn.1008a600
add esp, 0x20
mov si, word [0x10a88b2e]
cmp si, 0x1a
jne 0x10049b36
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0xfc
add ecx, 0x68
push 0x17
mov esi, 0x84
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], ecx
call fcn.10046570
test al, al
je 0x10049a93
push 1
mov edx, 0x791090
call edx
add esp, 4
test al, al
je 0x100499ae
fld dword [0x1013f8e8]
sub esp, 0x10
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
fldz
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add eax, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 0x1c]
add ecx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
mov ecx, dword [0x116de538]
push 0x10a40f40
push 0
push esi
push 0
push 0xffffff7f
add edx, 0x102
push edx
add eax, 0x68
push eax
push ecx
jmp 0x10049b25
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add edx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
add eax, 0x68
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, 0xf4001
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffffffffffffff
add ecx, 0x102
push ecx
add edx, 0x68
push edx
push eax
mov cl, 3
call fcn.1008a600
push 1
mov ecx, 0x791050
call ecx
add esp, 0x24
test al, al
je 0x10049b2f
mov edx, dword [0x10a88b58]
mov eax, dword [ebp - 0xa4]
mov ax, word [eax + edx + 0x2c]
call fcn.10050e90
jmp 0x10049b2f
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141304]
fstp dword [esp + 0x1c]
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xac]
fstp dword [esp + 4]
fild dword [ebp - 0xa8]
fstp dword [esp]
call fcn.100466a0
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffff7f
add ecx, 0x102
push ecx
add edx, 0x68
push edx
push eax
mov cl, 3
call fcn.1008a600
add esp, 0x20
mov si, word [0x10a88b2e]
cmp si, 0x1c
jne 0x10049df5
mov edx, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
add edx, 0xfc
add ecx, 0x68
push 0x17
mov esi, 0x84
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], ecx
call fcn.10046570
test al, al
je 0x10049d53
push 1
mov ecx, 0x791090
call ecx
add esp, 4
test al, al
je 0x10049c6e
fld dword [0x1013f8e8]
sub esp, 0x10
fstp dword [esp + 0xc]
fld1
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add edx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 0x1c]
add eax, 0x68
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, 0xf4001
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fst dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call edi
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
mov eax, dword [0x116de538]
push 0x10a40f40
push 0
push esi
push 0
push 0xffffff7f
add ecx, 0x102
push ecx
add edx, 0x68
push edx
push eax
jmp 0x10049de4
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fstp dword [esp + 0x20]
add ecx, 0xfc
fld dword [0x10141304]
mov dword [ebp - 0xa0], ecx
fstp dword [esp + 0x1c]
add edx, 0x68
fld dword [0x1013fc88]
mov eax, 0xf4001
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffffffffffffff
add eax, 0x102
push eax
add ecx, 0x68
push ecx
push edx
mov cl, 3
call fcn.1008a600
push 1
mov eax, 0x791050
call eax
add esp, 0x24
test al, al
je 0x10049dee
mov ecx, dword [0x10a88b58]
mov edx, dword [ebp - 0xa4]
mov ax, word [edx + ecx + 0x2c]
call fcn.10050e90
jmp 0x10049dee
fldz
sub esp, 0x24
fstp dword [esp + 0x20]
mov eax, 0xf4001
fld dword [0x10141304]
fstp dword [esp + 0x1c]
fld dword [0x1013fc88]
fstp dword [esp + 0x18]
fld dword [0x101406b4]
fstp dword [esp + 0x14]
fld dword [0x10141300]
fstp dword [esp + 0x10]
fld dword [0x1013fb28]
fstp dword [esp + 0xc]
fld dword [0x10140cc8]
fstp dword [esp + 8]
fild dword [ebp - 0xac]
fstp dword [esp + 4]
fild dword [ebp - 0xa8]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40f40
push 0
push 0x84
push 0
push 0xffffff7f
add eax, 0x102
push eax
add ecx, 0x68
push ecx
push edx
mov cl, 3
call fcn.1008a600
add esp, 0x20
mov si, word [0x10a88b2e]
push 0x64
lea eax, [ebp - 0x68]
push 0
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
test si, si
jne 0x1004a085
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a40fb8
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41030
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a410a8
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a41120
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a41198
jmp 0x1004faa4
cmp si, 1
jne 0x1004a306
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41210
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41288
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41300
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a41378
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a413f0
jmp 0x1004faa4
cmp si, 2
jne 0x1004a587
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41468
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a414e0
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41558
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a415d0
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a41648
jmp 0x1004faa4
cmp si, 3
jne 0x1004a808
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a416c0
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41738
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a417b0
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a41828
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a418a0
jmp 0x1004faa4
cmp si, 4
jne 0x1004aa89
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41918
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41990
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41a08
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a41a80
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a41af8
jmp 0x1004faa4
cmp si, 5
jne 0x1004ad0a
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41b70
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41be8
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41c60
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a41cd8
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a41d50
jmp 0x1004faa4
cmp si, 6
jne 0x1004af8b
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41dc8
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41e40
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a41eb8
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a41f30
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a41fa8
jmp 0x1004faa4
cmp si, 7
jne 0x1004b20c
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a42020
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a42098
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a42110
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a42188
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a42200
jmp 0x1004faa4
cmp si, 8
jne 0x1004b48d
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x4a
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a42278
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x48
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
fldz
mov eax, dword [0x10a88b00]
fst dword [esp + 0x1c]
fld dword [0x1013f4f4]
mov ecx, dword [0x10a88afc]
fst dword [esp + 0x18]
add eax, 0x59
fstp dword [esp + 0x14]
mov dword [ebp - 0xa0], eax
add ecx, 0xff
mov eax, 0x7bc4
fst dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x1013f6b0]
fst dword [esp + 8]
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], ecx
fstp dword [esp]
push ecx
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
fldz
mov edx, dword [0x10a88b00]
mov eax, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add edx, 0x68
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], edx
fst dword [esp + 0x1c]
add eax, 0xff
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
mov eax, 0x7bc4
fstp dword [esp]
call fcn.100466a0
fldz
mov ecx, dword [0x10a88b00]
mov edx, dword [0x10a88afc]
sub esp, 0x24
fst dword [esp + 0x20]
add ecx, 0x77
fld dword [0x1013f4f4]
mov dword [ebp - 0xa0], ecx
fst dword [esp + 0x1c]
add edx, 0xff
fstp dword [esp + 0x18]
mov eax, 0x7bc4
fst dword [esp + 0x14]
fstp dword [esp + 0x10]
fld dword [0x1013f6b0]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fild dword [ebp - 0xa0]
mov dword [ebp - 0xa0], edx
fstp dword [esp + 4]
fild dword [ebp - 0xa0]
fstp dword [esp]
call fcn.100466a0
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a422f0
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x57
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
push 0x10a42368
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x66
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
mov eax, dword [0x10a88b00]
mov ecx, dword [0x10a88afc]
mov edx, dword [0x116de538]
add esp, 0x40
push 0x10a423e0
push 0
push 0
push 0
push 0xffffffffffffffff
add eax, 0x75
push eax
add ecx, 0x109
push ecx
push edx
xor cl, cl
call fcn.1008a600
push 0x10a42458
jmp 0x1004faa4
cmp si, 9
jne 0x1004b70e
lea eax, [ebp - 0x68]
push eax
call ebx
add esp, 0x28
lea eax, [ebp - 0x68]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1004fab3
inc dword [ebp - 0xbc]
movsx eax, word [0x10a88b30]
inc dword [ebp - 0xb0]
lea edi, [eax + eax*4]
add edi, edi
cmp dword [ebp - 0xbc], edi
jl 0x10047ec1
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1012db16
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor ecx, ebp
xor al, al
call fcn.1012db16
mov esp, ebp
pop ebp
ret