Function at 0x48c540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xd0
mov eax, dword [0x6c9384]
xor eax, esp
mov dword [esp + 0xcc], eax
push esi
mov esi, dword [esp + 0xd8]
push edi
mov edi, dword [esi + 0x538]
mov dword [esp + 8], edi
test edi, edi
je 0x48d60c
lea ecx, [esp + 0x14]
call fcn.00424ad0
push 0
lea eax, [esp + 0x18]
push eax
push 0xd4
mov ecx, 0x6d8e50
call fcn.00429b80
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov dword [esi + 0x178], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x17c], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x180], eax
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x184], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x190], ecx
lea ecx, [esp + 0x54]
mov dword [esi + 0x188], edx
mov dword [esi + 0x18c], eax
call fcn.00424ad0
push 0
lea edx, [esp + 0x58]
push edx
push 0x3f
mov ecx, 0x6d8e50
call fcn.00429b80
push 0x1e1e1e
lea eax, [esp + 0x58]
push eax
push 0xffffffffffffffff
push 0x5a2b8c
mov ecx, esi
call fcn.00436270
lea ecx, [esp + 0x34]
mov dword [esi + 0x170], 1
call fcn.00424ad0
push 0
lea ecx, [esp + 0x38]
push ecx
push 0xd5
mov ecx, 0x6d8e50
call fcn.00429b80
lea eax, [esi + 0x194]
test eax, eax
je 0x48c643
push eax
mov ecx, esi
call fcn.00436230
push ebx
push ebp
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
add edi, 0x1e
push edi
lea edx, [esp + 0xa0]
push 0x5a4e58
push edx
call ebp
mov eax, dword [esi]
mov edx, dword [eax + 0xbc]
add esp, 0xc
mov ecx, esi
call edx
push 9
push 0
test ax, ax
jne 0x48c685
push 0xffffff
lea eax, [esp + 0xa8]
push eax
jmp 0x48c692
push 0xcc92f8
lea ecx, [esp + 0xa8]
push ecx
mov ecx, esi
call fcn.00436210
push 0
push 0
push 0xffffff
push 0x5a2b8c
mov ecx, esi
call fcn.00436210
mov edx, dword [esi + 0x538]
mov ecx, dword [0x6d944c]
mov ebx, 8
cmp word [edx + 0x3b], bx
jne 0x48c6cc
call fcn.0049bb20
jmp 0x48c6d1
call fcn.0049bad0
movzx edi, ax
mov eax, dword [esp + 0x10]
movzx eax, word [eax + 0x3d]
dec eax
cmp eax, 5
ja case.default.0x48c6e6
jmp dword [eax*4 + 0x48d628]
push 0x959
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0xa4]
push str._s__s
push ecx
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea edx, [esp + 0xa8]
push edx
jmp 0x48c7de
push 0x95a
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0xa4]
push str._s__s
push eax
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0xa8]
push ecx
jmp 0x48c7de
push 0x95b
jmp 0x48c79d
push 0x95c
jmp 0x48c6f2
push 0x95d
jmp 0x48c73d
push 0x95e
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xa4]
push str._s__s
push edx
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0xa8]
push eax
mov ecx, esi
call fcn.00436210
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 0xc7]
cmp eax, 7
ja case.0x48c7f9.6
jmp dword [eax*4 + 0x48d640]
push 0x95f
jmp 0x48c8ba
push 0x960
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0xa4]
push str._s__s
push ecx
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea edx, [esp + 0xa8]
push edx
jmp 0x48c8fb
push 0x961
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0xa4]
push str._s__s
push eax
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea ecx, [esp + 0xa8]
push ecx
jmp 0x48c8fb
push 0x962
jmp 0x48c8ba
push 0x963
jmp 0x48c80f
push 0x964
jmp 0x48c85a
push 0x965
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xa4]
push str._s__s
push edx
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0xa8]
push eax
mov ecx, esi
call fcn.00436210
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 0x3b]
sub eax, 3
je 0x48c95e
dec eax
jne 0x48c9ab
push 0x966
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xa4]
push str._s__s
push edx
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea eax, [esp + 0xa8]
push eax
jmp 0x48c9a4
push 0x967
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0xa4]
push str._s__s
push ecx
call fcn.00583d3f
add esp, 0x10
push 7
push 0
push 0xffffb0
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.00436210
push 0x958
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 0x31]
push ecx
push 0x956
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xa8]
push str._s__d_s
push edx
call ebp
mov eax, dword [0x6d944c]
mov cx, word [eax + 0x43c]
mov edx, dword [esp + 0x24]
add esp, 0x14
push 7
push 0
cmp cx, word [edx + 0x31]
jae 0x48ca0f
push 0xe61414
lea eax, [esp + 0xa8]
push eax
jmp 0x48ca1c
push 0xffffff
lea ecx, [esp + 0xa8]
push ecx
mov ecx, esi
call fcn.00436210
push 0
push 0
push 0xffffff
push 0x5a2b8c
mov ecx, esi
call fcn.00436210
push 0
lea edx, [esp + 0x40]
push edx
push 0xffffb0
push 0x5a2b8c
mov ecx, esi
call fcn.00436210
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 0x31]
push ecx
push 0x972
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xa4]
push edx
call ebp
mov eax, dword [esp + 0x1c]
movzx eax, word [eax + 0x3d]
dec eax
add esp, 0xc
cmp eax, 5
ja case.default.0x48ca88
jmp dword [eax*4 + 0x48d660]
push 0
mov ecx, 0x6daf28
push 0
cmp di, 1
jne 0x48caad
push 0xffffff
push 0x1d1
jmp 0x48cb7e
push 0xe61414
push 0x1d1
jmp 0x48cb7e
push 0
mov ecx, 0x6daf28
push 0
cmp di, 2
jne 0x48cada
push 0xffffff
push 0x1d2
jmp 0x48cb7e
push 0xe61414
push 0x1d2
jmp 0x48cb7e
push 0
mov ecx, 0x6daf28
push 0
cmp di, 3
jne 0x48cb04
push 0xffffff
push 0x1d3
jmp 0x48cb7e
push 0xe61414
push 0x1d3
jmp 0x48cb7e
push 0
mov ecx, 0x6daf28
push 0
cmp di, 4
jne 0x48cb2b
push 0xffffff
push 0x1d4
jmp 0x48cb7e
push 0xe61414
push 0x1d4
jmp 0x48cb7e
push 0
mov ecx, 0x6daf28
push 0
cmp di, 5
jne 0x48cb52
push 0xffffff
push 0x1d5
jmp 0x48cb7e
push 0xe61414
push 0x1d5
jmp 0x48cb7e
push 0
mov ecx, 0x6daf28
push 0
cmp di, 6
jne 0x48cb74
push 0xffffff
jmp 0x48cb79
push 0xe61414
push 0x1d6
call fcn.004c8e10
push eax
mov ecx, esi
call fcn.00436210
mov ecx, dword [esi + 0x538]
cmp word [ecx + 0x3b], bx
push 0
push 0
mov ecx, 0x6daf28
jne 0x48cbc7
mov edx, dword [0x6d944c]
cmp dword [edx + 0x404], 1
jne 0x48cbbb
push 0xffffff
push 0x677
jmp 0x48cbe6
push 0xe61414
push 0x677
jmp 0x48cbe6
mov eax, dword [0x6d944c]
cmp dword [eax + 0x404], 1
jne 0x48cbdc
push 0xe61414
jmp 0x48cbe1
push 0xffffff
push 0x678
call fcn.004c8e10
push eax
mov ecx, esi
call fcn.00436210
mov eax, dword [esp + 0x10]
cmp word [eax + 0x3b], bx
jne 0x48cc42
cmp word [eax + 0x3d], 0
je 0x48cc42
mov ecx, dword [0x6d944c]
call fcn.0049bad0
mov ecx, dword [0x6d944c]
mov di, ax
call fcn.0049bb20
cmp di, ax
je 0x48cc42
push 0
push 0
push 0xe61414
push 0x67c
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
mov ecx, esi
call fcn.00436210
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx eax, al
cmp eax, 0xc
jge 0x48cd18
mov ecx, dword [esp + 0x10]
mov edi, dword [ecx + eax*4 + 0x7f]
mov dword [esp + 0x14], edi
test edi, edi
je 0x48cdc8
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
mov ecx, esi
cmp al, 0xc
jae 0x48cd24
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
call eax
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
test eax, eax
jns 0x48cca0
fadd dword [0x5a2d60]
fmul qword [0x5a4158]
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
mov ecx, esi
fidiv dword [esp + 0x14]
fstp dword [esp + 0x14]
call eax
lea ecx, [edi - 1]
cmp eax, ecx
je 0x48ccdc
fld dword [esp + 0x14]
fcomp qword [0x5a8948]
fnstsw ax
test ah, 0x41
jne 0x48ccdc
fld dword [0x5a8944]
fstp dword [esp + 0x14]
mov edx, dword [esi]
fld dword [esp + 0x14]
mov eax, dword [edx + 0xa8]
sub esp, 8
mov ecx, esi
fstp qword [esp]
call eax
movzx ecx, al
push ecx
push 0x1d7
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xac]
push edx
call fcn.00583d3f
add esp, 0x14
jmp 0x48cd6f
or edi, 0xffffffff
mov dword [esp + 0x14], edi
jmp 0x48cc6e
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
call edx
movzx eax, ax
push eax
call fcn.00405e30
mov ecx, eax
call fcn.005421a0
test eax, eax
jne 0x48cd6f
mov edx, dword [esi]
mov eax, dword [edx + 0xa8]
mov ecx, esi
call eax
movzx ecx, al
push ecx
push 0x195
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0xa4]
push edx
call fcn.00583d3f
add esp, 0xc
push 0
push 0
push 0xe6e826
lea eax, [esp + 0xa8]
push eax
mov ecx, esi
call fcn.00436210
cmp dword [0x6bc394], 0
je 0x48cdc8
mov edx, dword [esi]
mov eax, dword [edx + 0xa0]
push edi
mov ecx, esi
call eax
push eax
lea ecx, [esp + 0xa4]
push str._d____d
push ecx
call ebp
add esp, 0x10
push 0
push 0
push 0xe6e826
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.00436210
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
test al, al
je 0x48ce2b
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
mov ebx, dword [esp + 0x10]
movzx eax, al
movzx eax, word [ebx + eax*2 + 0xad]
push eax
push 0x1d8
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0xa4]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0xe6e826
lea edx, [esp + 0xa8]
push edx
mov ecx, esi
call fcn.00436210
jmp 0x48ce2f
mov ebx, dword [esp + 0x10]
mov eax, dword [esi]
mov edx, dword [eax + 0xb8]
mov ecx, esi
call edx
test eax, eax
je 0x48ce81
mov eax, dword [esi]
mov edx, dword [eax + 0xb8]
mov ecx, esi
call edx
push eax
push 0x246
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0xffc800
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
cmp word [ebx + 0x86b], 0
je 0x48cf26
push 0
push 0
push 0xe6e826
push 0x54f
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
mov ecx, esi
call fcn.00436210
test byte [0x6cbc40], 1
movzx edi, word [ebx + 0x86b]
jne 0x48cedd
or dword [0x6cbc40], 1
mov ecx, 0x6cbad0
call fcn.00543730
push 0x5a0670
call fcn.00584524
add esp, 4
push edi
mov ecx, 0x6cbad0
call fcn.0048df90
test eax, eax
je 0x48cf26
movzx edx, word [eax + 6]
push edx
push 0x550
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0xe6e826
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
test byte [0x6cbc40], 1
jne 0x48cf4d
or dword [0x6cbc40], 1
mov ecx, 0x6cbad0
call fcn.00543730
push 0x5a0670
call fcn.00584524
add esp, 4
mov edx, dword [esi]
mov eax, dword [edx + 0xbc]
mov ecx, esi
call eax
movzx ecx, ax
xor edx, edx
mov eax, ecx
div dword [0x6cbbb0]
mov eax, dword [0x6cbbb4]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x48d5ab
cmp dword [edx], ecx
je 0x48cf86
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x48cf76
jmp 0x48d5ab
mov edi, dword [edx + 4]
test edi, edi
je 0x48d5ab
mov eax, dword [edi + 0x1e]
test eax, eax
jle 0x48cfce
push eax
push 0x524
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0x1e]
test eax, eax
jns 0x48d00d
neg eax
push eax
push 0x528
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x22]
fnstsw ax
test ah, 5
jp 0x48d063
fld dword [edi + 0x22]
fmul qword [0x5a4158]
fadd qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x525
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x22]
fnstsw ax
test ah, 0x41
jne 0x48d0b9
fld dword [edi + 0x22]
fmul qword [0x5a4158]
fsubr qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x529
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x26]
fnstsw ax
test ah, 5
jp 0x48d10f
fld dword [edi + 0x26]
fmul qword [0x5a4158]
fadd qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x526
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x26]
fnstsw ax
test ah, 0x41
jne 0x48d165
fld dword [edi + 0x26]
fmul qword [0x5a4158]
fsubr qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x52a
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
fld dword [edi + 0x2a]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x48d1b7
fld dword [edi + 0x2a]
fmul qword [0x5a4158]
call fcn.005846d0
push eax
push 0x6cc
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x2e]
fnstsw ax
test ah, 5
jp 0x48d20d
fld dword [edi + 0x2e]
fmul qword [0x5a4158]
fadd qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x527
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x2e]
fnstsw ax
test ah, 0x41
jne 0x48d263
fld dword [edi + 0x2e]
fmul qword [0x5a4158]
fsubr qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x52b
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0xa]
test eax, eax
jle 0x48d2a0
push eax
push 0x53c
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0xa]
test eax, eax
jns 0x48d2df
neg eax
push eax
push 0x53d
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0xe]
test eax, eax
jle 0x48d31c
push eax
push 0x53e
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0xe]
test eax, eax
jns 0x48d35b
neg eax
push eax
push 0x53f
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0x12]
test eax, eax
jle 0x48d398
push eax
push 0x540
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0x12]
test eax, eax
jns 0x48d3d7
neg eax
push eax
push 0x541
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x16]
fnstsw ax
test ah, 5
jp 0x48d42d
fld dword [edi + 0x16]
fmul qword [0x5a4158]
fadd qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x544
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x16]
fnstsw ax
test ah, 0x41
jne 0x48d483
fld dword [edi + 0x16]
fmul qword [0x5a4158]
fsubr qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x545
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x1a]
fnstsw ax
test ah, 5
jp 0x48d4d9
fld dword [edi + 0x1a]
fmul qword [0x5a4158]
fadd qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x52c
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
fldz
fcomp dword [edi + 0x1a]
fnstsw ax
test ah, 0x41
jne 0x48d52f
fld dword [edi + 0x1a]
fmul qword [0x5a4158]
fsubr qword [0x5a30f0]
call fcn.005846d0
push eax
push 0x52d
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea ecx, [esp + 0x84]
push ecx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea edx, [esp + 0x88]
push edx
mov ecx, esi
call fcn.00436210
mov eax, dword [edi + 0x32]
test eax, eax
jle 0x48d56c
push eax
push 0x542
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea eax, [esp + 0x84]
push eax
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea ecx, [esp + 0x88]
push ecx
mov ecx, esi
call fcn.00436210
mov edi, dword [edi + 0x32]
test edi, edi
jns 0x48d5ab
neg edi
push edi
push 0x543
mov ecx, 0x6daf28
call fcn.004c8e10
push eax
lea edx, [esp + 0x84]
push edx
call ebp
add esp, 0xc
push 0
push 0
push 0x548fdf
lea eax, [esp + 0x88]
push eax
mov ecx, esi
call fcn.00436210
push 0
push 0
push 0xffffff
push 0x5a2b8c
mov ecx, esi
call fcn.00436210
push 0
lea ecx, [esp + 0x40]
push ecx
push 0xffffb0
push 0x5a2b8c
mov ecx, esi
call fcn.00436210
movzx edx, word [ebx + 0x2f]
push 1
push 0xc8d7aa
push edx
push esi
mov ecx, 0x6da050
call fcn.004a0c20
lea ecx, [esp + 0x3c]
call fcn.00424ae0
lea ecx, [esp + 0x5c]
call fcn.00424ae0
lea ecx, [esp + 0x1c]
call fcn.00424ae0
pop ebp
pop ebx
mov ecx, dword [esp + 0xd4]
pop edi
pop esi
xor ecx, esp
call fcn.005837be
add esp, 0xd0
ret 4