Function at 0x4fcb81
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff20
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov esi, 0x66bec4
xor eax, eax
push ebp
push 0x4fd2ea
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004f668c
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x4fd2a4
mov bl, 1
call fcn.005336e0
test eax, eax
je 0x4fc3b6
call fcn.005336e0
mov bl, byte [eax + 0x14e]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp bl, byte [eax + 0x1c4]
je 0x4fc3e4
mov eax, dword [esi]
xor edx, edx
mov dword [eax + 0x164], edx
mov eax, dword [esi]
xor edx, edx
mov dword [eax + 0x170], edx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov byte [eax + 0x1c4], bl
call fcn.005336e0
test eax, eax
je 0x4fcc8c
call fcn.005336e0
call fcn.005bd35c
test al, al
jne 0x4fc457
mov eax, dword [0x669468]
mov eax, dword [eax]
cmp dword [eax + 0x18], 1
jle 0x4fc457
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [0x669468]
mov eax, dword [eax]
mov edi, dword [eax + 0x18]
dec edi
cmp edi, 0
jl 0x4fc477
mov eax, dword [0x669468]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + edi*4]
add eax, 0x19c
mov edx, dword [eax + 0x20]
add dword [ebp - 0x20], edx
mov edx, dword [eax + 0x24]
add dword [ebp - 0x24], edx
mov eax, dword [eax + 0x28]
add dword [ebp - 0x28], eax
dec edi
cmp edi, 0xffffffff
jne 0x4fc42b
jmp 0x4fc477
call fcn.005336e0
mov edx, dword [eax + 0xb8]
mov dword [ebp - 0x20], edx
mov edx, dword [eax + 0xbc]
mov dword [ebp - 0x24], edx
mov eax, dword [eax + 0xc0]
mov dword [ebp - 0x28], eax
call fcn.005336e0
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0x258
mov dword [ebp - 0x50], eax
mov bl, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x6698c8]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x4fc4ac
and edx, 0x7f
bt eax, edx
jae 0x4fcc80
lea eax, [ebp - 0xc]
call fcn.00403274
xor eax, eax
mov al, bl
cmp eax, 0x12
ja case.0x4fc4c7.4
jmp dword [eax*4 + 0x4fc4ce]
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x14e]
dec eax
sub al, 2
jae 0x4fc57d
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4c]
call fcn.0055e11c
mov eax, dword [eax + 8]
inc eax
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0x98], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4d4]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x90], 0
lea edx, [ebp - 0x9c]
mov eax, 0x4fd2f8
mov ecx, 1
call fcn.006550e0
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x417], 0
je 0x4fc5ae
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1e4]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx + 0x13c]
cmp eax, dword [edx + 0x18]
jl 0x4fc5ae
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1e4]
mov dword [ebp - 0x30], eax
jmp 0x4fc5c9
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x13c]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x1e4], edx
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x40e], 0
jne 0x4fc5ea
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x40d], 0
jne 0x4fc617
cmp dword [ebp - 0x30], 0x3e8
jle 0x4fc617
mov edx, 0x3e8
mov eax, dword [ebp - 0x30]
call fcn.00652c5c
lea edx, [ebp - 0xa0]
call fcn.0065539c
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 0x10]
mov ecx, 0x4fd30c
call fcn.00403568
jmp 0x4fc622
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x30]
call fcn.0065539c
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x81c], 0
jne 0x4fc643
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4c]
call fcn.0055e11c
mov eax, dword [eax + 8]
mov dword [ebp - 0x34], eax
jmp 0x4fc663
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx + 0x13c]
mov edx, dword [edx + 0x1c]
mov eax, dword [edx + eax*4]
call fcn.00557bcc
mov eax, dword [eax + 8]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 8]
inc eax
mov dword [ebp - 0xc0], eax
mov byte [ebp - 0xbc], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0xb
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4d4]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xc0]
mov eax, 0x4fd310
mov ecx, 3
call fcn.006550e0
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx + 0xb0]
mov edx, dword [edx + 0x1c]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx + 0x10]
mov edx, dword [edx + 0x1c]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x14e]
dec eax
sub al, 2
jae 0x4fc7b1
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx + 0x10]
mov edx, dword [edx + 0x1c]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
call fcn.00557d70
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
mov edi, dword [eax + 0x8c]
dec edi
cmp edi, 0
jl 0x4fc769
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x13c]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + edi*4]
mov dl, byte [0x4fd328]
call fcn.00557cd4
add dword [ebp - 0x38], eax
dec edi
cmp edi, 0xffffffff
jne 0x4fc746
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0x98], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x58]
sub eax, dword [edx + 0x28]
inc eax
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x90], 0
lea edx, [ebp - 0x9c]
mov eax, 0x4fd32c
mov ecx, 1
call fcn.006550e0
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + 0x3c]
add dword [ebp - 0x3c], edx
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0x2c], 0
jne 0x4fc7c0
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x3c]
call fcn.00627f44
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0xd4], 0xb
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx + 0x10]
mov edx, dword [edx + 0x1c]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
call fcn.00557d70
inc eax
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xcc], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x58]
sub eax, dword [edx + 0x28]
inc eax
mov dword [ebp - 0xc8], eax
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xd8]
mov eax, 0x4fd340
mov ecx, 2
call fcn.006550e0
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x38], 0
je case.0x4fc4c7.4
lea eax, [ebp - 0xc]
mov edx, 0x4fd360
call fcn.0040330c
jmp case.0x4fc4c7.4
lea eax, [ebp - 0xc]
xor edx, edx
mov dl, byte [0x66bf25]
mov ecx, dword [0x669780]
mov edx, dword [ecx + edx*4]
call fcn.00403438
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x3a4], 0x80000000
je case.0x4fc4c7.4
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3a4]
call fcn.0062a460
jmp case.0x4fc4c7.4
mov eax, dword [0x6690d8]
mov ax, word [eax + 0xa9]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov word [edx + 0x270], ax
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x14d]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov byte [edx + 0x272], al
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x7dc]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov byte [edx + 0x273], al
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov dword [edx + 0x274], eax
jmp case.0x4fc4c7.4
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x20]
call fcn.006197ac
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, 0x4fd36c
call fcn.0065521c
jmp case.0x4fc4c7.4
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x24]
call fcn.006197ac
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, 0x4fd36c
call fcn.0065521c
jmp case.0x4fc4c7.4
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x28]
call fcn.006197ac
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, 0x4fd378
call fcn.0065521c
jmp case.0x4fc4c7.4
call fcn.0064dfa0
mov dword [ebp - 4], eax
mov eax, dword [0x669468]
mov eax, dword [eax]
cmp dword [eax + 0x18], 1
jle 0x4fc9b5
mov edx, dword [0x669468]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.0064e164
jmp 0x4fc9c4
call fcn.005336e0
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.0064e1f0
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x18]
dec edi
cmp edi, 0
jl 0x4fca36
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + edi*4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x42b], 0
jne 0x4fca30
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x441], 0
jne 0x4fca30
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x42a], 0
jne 0x4fca30
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x164], 0
je 0x4fca30
cmp dword [ebp - 0x2c], 0
jge 0x4fca1c
inc dword [ebp - 0x2c]
push 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x164]
push eax
call sub.kernel32.dll_GetFileSize
add dword [ebp - 0x2c], eax
dec edi
cmp edi, 0xffffffff
jne 0x4fc9d7
cmp dword [ebp - 0x2c], 0
jl 0x4fca5d
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x2c]
call fcn.006197ac
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, 0x4fd384
call fcn.0065521c
mov eax, dword [ebp - 4]
call fcn.0064e5c0
jmp case.0x4fc4c7.4
lea eax, [ebp - 0xc]
push eax
fld xword [0x4fd390]
mov eax, dword [ebp - 0x4c]
fmul qword [eax + 0x8fc]
call fcn.00402590
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0xd4], 0
fld xword [0x4fd390]
mov eax, dword [ebp - 0x4c]
fmul qword [eax + 0x8fc]
call fcn.00402554
fmul dword [0x4fd39c]
mov eax, dword [ebp - 0x4c]
fsubr qword [eax + 0x8fc]
fld xword [0x4fd3a0]
fmulp st(1)
call fcn.00402590
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xcc], 0
fld xword [0x4fd3a0]
mov eax, dword [ebp - 0x4c]
fmul qword [eax + 0x8fc]
call fcn.00402554
fmul dword [0x4fd3ac]
mov eax, dword [ebp - 0x4c]
fsubr qword [eax + 0x8fc]
fld xword [0x4fd3b0]
fmulp st(1)
call fcn.00402590
mov dword [ebp - 0xc8], eax
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xd8]
mov eax, 0x4fd3bc
mov ecx, 2
call fcn.006550e0
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x904], 0
jle case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
fld qword [eax + 0x8fc]
fcomp dword [0x4fd3cc]
fnstsw ax
sahf
jb case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
fild dword [eax + 0x904]
call fcn.00402554
fmul dword [0x4fd3ac]
mov eax, dword [ebp - 0x4c]
fdiv qword [eax + 0x8fc]
call fcn.00402590
mov edx, eax
lea ecx, [ebp - 0xc]
mov eax, 0x4fd3d0
call fcn.00655344
jmp case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x90c], 0
jle case.0x4fc4c7.4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x918], 2
jne 0x4fcba7
mov eax, 0x4fd3e0
mov dword [ebp - 8], eax
jmp 0x4fcbaf
mov eax, 0x4fd3f8
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x914]
call fcn.00652c64
mov edi, eax
cmp edi, 0x7fffffff
jne 0x4fcbd0
mov eax, dword [ebp - 0x4c]
mov edi, dword [eax + 0x90c]
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x9c], edi
mov byte [ebp - 0x98], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x90c]
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x90], 0
lea edx, [ebp - 0x9c]
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.006550e0
jmp case.0x4fc4c7.4
lea ecx, [ebp - 0xc]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x148]
mov eax, 0x4fd410
call fcn.00655344
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
mov edx, dword [esi]
lea edi, [edx + eax*4 + 0x15c]
mov eax, edi
mov edx, dword [ebp - 0xc]
call fcn.004032c8
cmp dword [ebp - 0xc], 0
je 0x4fcc80
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0xc]
call fcn.0065432c
mov edx, dword [ebp - 0xdc]
mov eax, dword [esi]
mov eax, dword [eax + 0x120]
call fcn.00648600
mov dword [edi + 4], eax
mov edx, dword [edi + 4]
mov eax, dword [esi]
mov eax, dword [eax + 0x124]
add eax, eax
add edx, eax
mov eax, dword [edi + 8]
call fcn.00652c5c
mov dword [edi + 8], eax
dec ebx
cmp bl, 0xff
jne 0x4fc48c
jmp 0x4fcca9
xor ebx, ebx
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
mov edx, dword [esi]
lea eax, [edx + eax*4 + 0x15c]
call fcn.00403274
inc ebx
cmp bl, 0x15
jne 0x4fcc8e
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.00403274
call fcn.005336e0
test eax, eax
je 0x4fcf0e
call fcn.005336e0
mov ebx, eax
cmp dword [ebx + 0x990], 0xfffffffe
jne 0x4fcce4
mov eax, dword [ebx + 0x9a4]
call fcn.00542248
dec eax
jg 0x4fccfe
cmp dword [ebx + 0x990], 0
jl 0x4fcf0e
cmp dword [ebx + 0x9a0], 2
jle 0x4fcf0e
mov eax, ebx
call fcn.005f826c
test al, al
jne 0x4fcf0e
cmp dword [ebx + 0x990], 0
jl 0x4fcd5f
push 0x4fd420
lea eax, [ebp - 0xa0]
mov edx, dword [ebx + 0x9a0]
and edx, 0x80000003
jns 0x4fcd34
dec edx
or edx, 0xfffffffc
inc edx
mov edx, dword [edx*4 + 0x663a50]
call fcn.00403438
push dword [ebp - 0xa0]
push 0x4fd430
push 0x4fd430
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004035dc
jmp 0x4fcd67
lea eax, [ebp - 0x14]
call fcn.00403274
mov eax, dword [ebx + 0x9a4]
call fcn.00542248
mov edi, eax
cmp edi, 1
jg 0x4fcdc0
cmp dword [ebx + 0x81c], 0
jne 0x4fcd8c
mov eax, 0x4fd434
mov dword [ebp - 8], eax
jmp 0x4fcd94
mov eax, 0x4fd470
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xa0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
call fcn.0065521c
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.004032c8
jmp 0x4fcea6
cmp dword [ebx + 0x81c], 0
jne 0x4fcde0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
mov edx, 0x4fd4c0
call fcn.004032c8
jmp 0x4fcdf5
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
mov edx, 0x4fd50c
call fcn.004032c8
cmp dword [ebx + 0x990], 0xfffffffe
jne 0x4fce1d
lea ecx, [ebp - 0x18]
mov eax, 0x4fd55c
mov edx, 1
call fcn.00655344
lea eax, [ebp - 0x1c]
mov edx, 0x4fd56c
call fcn.0040330c
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 0xbc], 0xb
lea edx, [ebp - 0xe0]
mov eax, edi
call fcn.006197ac
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0xb
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0xb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0xb
lea edx, [ebp - 0xc0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x1c8]
mov ecx, 3
call fcn.006550e0
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.004032c8
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0xd8], 2
mov byte [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 3
mov byte [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 4
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xd8]
mov eax, 0x4fd570
mov ecx, 2
call fcn.006550e0
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.00403524
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp dword [eax + 0x1c8], 0
jne 0x4fcf41
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
test eax, eax
je 0x4fd29d
cmp byte [eax + 0x3a], 0
je 0x4fd29d
call fcn.006400c0
jmp 0x4fd29d
mov eax, dword [esi]
cmp dword [eax + 0x144], 0
jne 0x4fcfea
mov edx, dword [0x4f3294]
mov eax, dword [esi]
call fcn.00641710
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x144], ebx
mov byte [ebx + 0x114], 1
mov eax, ebx
call fcn.006400c0
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
mov edx, dword [0x611358]
call fcn.00641710
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x148], ebx
mov dword [ebx + 0x180], 1
mov byte [ebx + 0x171], 0
mov dword [ebx + 0x15c], 0xc0ffff
mov eax, dword [esi]
mov dword [ebx + 0x188], eax
mov dword [ebx + 0x184], 0x4f4fbc
mov byte [ebx + 0x176], 1
mov eax, dword [esi]
mov dword [ebx + 0x1a0], eax
mov dword [ebx + 0x19c], 0x4f5080
mov eax, dword [esi]
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1a4], 0x4f51c0
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
mov byte [eax + 0x175], 1
lea edx, [ebp - 0xdc]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x1c8]
call fcn.0065432c
mov edx, dword [ebp - 0xdc]
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
add eax, 0x144
call fcn.004038bc
mov eax, 0x80
call fcn.0064be40
mov dword [ebp - 0x40], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
xor ecx, ecx
mov edx, dword [ebp - 0x40]
call fcn.006130a8
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
mov eax, dword [eax + 0x150]
cmp dword [eax + 0x18], 1
je 0x4fd069
mov eax, dword [0x669600]
mov eax, dword [eax]
add eax, eax
add dword [ebp - 0x40], eax
jmp 0x4fd035
mov eax, dword [0x669600]
mov eax, dword [eax]
add dword [ebp - 0x40], eax
mov eax, dword [esi]
cmp dword [eax + 0x28], 0
setg al
and eax, 0x7f
mov edx, dword [0x6694a0]
imul dword [edx]
mov dword [ebp - 0x44], eax
mov eax, dword [esi]
call fcn.0063f884
mov ebx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
call fcn.0063fa34
cmp ebx, eax
setl al
and eax, 0x7f
mov edx, dword [0x6694a0]
imul dword [edx]
mov edx, dword [esi]
mov edi, dword [edx + 0x30]
sub edi, eax
mov eax, dword [esi]
call fcn.004f3d68
xor ebx, ebx
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x6698c8]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x4fd0dd
and edx, 0x7f
bt eax, edx
jae 0x4fd0fd
lea ecx, [ebp - 0x6c]
mov edx, ebx
mov eax, dword [esi]
call fcn.004f6534
cmp bl, 0xe
jae 0x4fd0f8
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x44], eax
jmp 0x4fd0fd
mov edi, dword [ebp - 0x6c]
jmp 0x4fd103
inc ebx
cmp bl, 0x15
jne 0x4fd0bd
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x4fd201
mov bl, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x6698c8]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x4fd133
and edx, 0x7f
bt eax, edx
jae 0x4fd151
lea ecx, [ebp - 0x7c]
mov edx, ebx
mov eax, dword [esi]
call fcn.004f6534
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x44], eax
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x4fd157
dec ebx
cmp bl, 0xff
jne 0x4fd113
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x4fd1b0
mov bl, 0xe
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x6698c8]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x4fd183
and edx, 0x7f
bt eax, edx
jae 0x4fd1aa
lea ecx, [ebp - 0x8c]
mov edx, ebx
mov eax, dword [esi]
call fcn.004f6534
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jl 0x4fd1aa
mov edi, dword [ebp - 0x8c]
jmp 0x4fd1b0
inc ebx
cmp bl, 0x15
jne 0x4fd163
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x4fd1fb
mov eax, dword [esi]
cmp dword [eax + 0x28], 0
setg al
and eax, 0x7f
mov edx, dword [0x6694a0]
imul dword [edx]
mov dword [ebp - 0x44], eax
mov eax, dword [esi]
call fcn.0063f884
mov ebx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
call fcn.0063fa34
cmp ebx, eax
setl al
and eax, 0x7f
mov edx, dword [0x6694a0]
imul dword [edx]
mov edx, dword [esi]
mov edi, dword [edx + 0x30]
sub edi, eax
sub edi, dword [ebp - 0x44]
mov dword [ebp - 0x40], edi
mov eax, dword [0x669600]
mov edx, dword [ebp - 0x40]
sub edx, dword [eax]
push edx
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
mov edx, dword [0x669600]
sub eax, dword [edx]
push eax
mov ecx, dword [0x6694a0]
mov ecx, dword [ecx]
mov edx, dword [0x6694a0]
mov edx, dword [edx]
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [esi]
mov ebx, dword [eax + 0x148]
mov eax, ebx
call fcn.00612fc8
mov edx, dword [ebx + 0x34]
sub edx, eax
sar edx, 1
jns 0x4fd252
adc edx, 0
mov eax, dword [esi]
mov edi, dword [eax + 0x148]
mov dword [edi + 0x148], edx
mov byte [edi + 0x175], 0
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
mov edx, dword [eax]
call dword [edx + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
call fcn.006400c8
mov eax, dword [esi]
mov edx, dword [eax]
call dword [edx + 0x34]
mov dl, byte [ebp - 0x45]
mov eax, dword [esi]
call fcn.0063fc4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fd2f1
lea eax, [ebp - 0xe0]
call fcn.00403274
lea eax, [ebp - 0xdc]
call fcn.00403880
lea eax, [ebp - 0xa0]
call fcn.00403274
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00403298
ret