Function at 0x422ec2
Capabilities:
Get memory capacity

Disassembly:
mov eax, 0x612ff4
call fcn.0044c164
sub esp, 0xec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x58], edi
push dword [ebp + 0x4c]
mov esi, dword [ebp + 0xc]
fld1
push esi
fstp dword [ebp - 0x3c]
fld1
fstp dword [ebp - 0x40]
call fcn.00423b9d
pop ecx
cmp eax, edi
pop ecx
mov dword [ebp - 0x34], eax
jle 0x422f09
mov dword [ebp + 0x20], 1
mov dword [ebp + 0x24], eax
cmp word [ebp + 0x20], di
jne 0x422f40
cmp word [ebp + 0x48], di
jne 0x422f2c
push dword [ebp + 0x4c]
push esi
push dword [ebp + 8]
call fcn.00423c48
add esp, 0xc
cmp ax, di
mov dword [ebp + 0x20], eax
jne 0x422f40
cmp dword [0x671354], edi
jne 0x422f40
or dword [ebp - 4], 0xffffffff
cmp dword [ebp + 0x10], edi
jmp 0x423aad
cmp dword [ebp + 0x10], edi
je 0x423abb
cmp dword [ebp + 0x24], edi
je 0x422f59
mov edi, dword [ebp + 0x24]
mov ebx, dword [sym.imp.GDI32.dll_GetDeviceCaps]
jmp 0x422f77
mov ebx, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0xc
push dword [esi + 8]
call ebx
push 0xe
mov edi, eax
push dword [esi + 8]
call ebx
cmp eax, 1
jle 0x422f77
lea edi, [edi + edi*2]
push 1
pop eax
cmp dword [ebp - 0x34], eax
je 0x422f9a
cmp edi, eax
jne 0x422f8c
mov dword [ebp + 0x4c], 8
jmp 0x422f9d
xor eax, eax
cmp edi, 0x10
setg al
dec eax
and al, 0xf8
add eax, 0x18
mov dword [ebp + 0x4c], eax
push 0
push 0xa
push 1
mov edi, 0x12c
push dword [ebp + 8]
mov dword [ebp + 0x48], edi
call fcn.00507a2b
pop ecx
push eax
call fcn.004f99af
add esp, 0x10
test ax, ax
je 0x422fc9
mov dword [ebp + 0x48], 0x96
mov ecx, dword [ebp + 0x30]
test ecx, ecx
je 0x42302a
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x42302a
mov dword [ebp + 0x30], ecx
mov dword [ebp + 0x24], eax
mov esi, dword [ebp + 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_MulDiv]
mov eax, dword [ebp + 0x2c]
test eax, eax
jne 0x422ff0
mov eax, dword [ebp + 0x24]
cmp word [ebp + 0x20], 0
mov dword [ebp + 0x18], eax
jne 0x4230c5
cmp dword [0x671354], 1
jne 0x4230c5
push dword [ebp + 8]
call fcn.00423aea
test ax, ax
pop ecx
jne 0x4230c5
or dword [ebp - 4], 0xffffffff
cmp dword [ebp + 0x10], 0
jmp 0x423aad
push 0x58
push dword [esi + 8]
call ebx
push 0x5a
mov dword [ebp + 0x30], eax
push dword [esi + 8]
call ebx
cmp dword [ebp + 0x48], edi
mov esi, eax
mov dword [ebp + 0x24], esi
jne 0x42305c
mov ecx, 0x168
cdq
mov edi, ecx
idiv edi
imul eax, eax, 0x168
cmp eax, esi
jne 0x42305c
mov dword [ebp + 0x48], ecx
cmp esi, dword [ebp + 0x48]
jle 0x422fdd
fild dword [ebp + 0x48]
fild dword [ebp + 0x30]
push dword [ebp + 0x24]
mov eax, dword [ebp + 0x48]
mov esi, dword [ebp + 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_MulDiv]
fdiv st(1)
push eax
mov dword [ebp + 0x28], eax
push dword [esi + 0xc]
mov dword [ebp + 0x2c], eax
fstp dword [ebp - 0x3c]
fild dword [ebp + 0x24]
fdiv st(1)
fstp dword [ebp - 0x40]
fstp st(0)
call edi
push dword [ebp + 0x24]
mov dword [esi + 0xc], eax
push dword [ebp + 0x48]
push dword [esi + 4]
call edi
push dword [ebp + 0x24]
mov dword [esi + 4], eax
push dword [ebp + 0x48]
push dword [esi]
call edi
push dword [ebp + 0x24]
mov dword [esi], eax
push dword [ebp + 0x48]
push dword [esi + 8]
call edi
mov dword [esi + 8], eax
jmp 0x422fe6
mov eax, dword [ebp + 0x38]
test eax, eax
je 0x4230d1
mov eax, dword [eax + 4]
jmp 0x4230db
mov eax, dword [ebp + 0xc]
push 0x6f
push dword [eax + 8]
call ebx
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x4c], eax
je 0x4230f0
push dword [ebp + 0x24]
push dword [ebp + 0x2c]
push eax
call edi
mov dword [ebp - 0x4c], eax
fild dword [ebp + 0x18]
fst dword [ebp + 0x34]
fild dword [ebp - 0x4c]
fdiv st(1)
fstp dword [ebp + 0x2c]
fmul dword [ebp + 0x2c]
call fcn.0044d7bc
mov dword [ebp + 0x20], eax
mov eax, dword [ebp + 0x3c]
test eax, eax
jne 0x42311a
mov eax, dword [ebp + 0xc]
push 8
push dword [eax + 8]
call ebx
xor ebx, ebx
mov dword [ebp + 0x48], eax
cmp dword [ebp + 0x28], ebx
je 0x423130
push dword [ebp + 0x30]
push dword [ebp + 0x28]
push eax
call edi
mov dword [ebp + 0x48], eax
cmp dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x28], ebx
je 0x423146
mov eax, dword [esi + 0xc]
sub eax, dword [esi + 4]
cmp dword [ebp + 0x20], eax
jle 0x423164
mov ecx, dword [esi + 4]
mov eax, dword [esi + 0xc]
sub eax, ecx
mov dword [ebp + 0x28], ecx
mov ecx, dword [ebp + 0x18]
lea eax, [eax + ecx - 1]
cdq
idiv ecx
mov dword [ebp + 0x20], eax
fild dword [ebp + 0x20]
fstp dword [ebp + 0x2c]
cmp dword [ebp + 0x48], ebx
je 0x423173
mov eax, dword [esi + 8]
sub eax, dword [esi]
cmp dword [ebp + 0x48], eax
jle 0x423180
mov eax, dword [esi]
mov esi, dword [esi + 8]
sub esi, eax
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x48], esi
fld dword [ebp + 0x2c]
fmul dword [0x625674]
call fcn.0044d7bc
mov dword [ebp + 0x38], eax
mov byte [ebp - 4], 1
call fcn.00593582
mov dword [ebp - 0x5c], eax
mov ecx, dword [eax]
mov dword [ebp - 0x64], ecx
lea ecx, [ebp - 0x64]
mov dword [eax], ecx
mov dword [ebp - 0x60], 0x593563
mov eax, dword [ebp + 0x2c]
mov edi, dword [ebp + 0x4c]
mov dword [ebp + 0x20], eax
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov eax, dword [ebp - 0xbc]
push 5
shl eax, 2
xor edx, edx
pop ecx
div ecx
mov esi, eax
mov eax, 0x2d00000
cmp esi, eax
jbe 0x4231e5
mov esi, eax
push 1
push dword [ebp + 8]
call fcn.00509172
or eax, dword [ebp + 0x54]
pop ecx
pop ecx
test ax, ax
je 0x4231ff
mov eax, dword [ebp + 0x4c]
lea edi, [eax + 0x28]
mov eax, dword [ebp + 0x48]
cmp eax, ebx
je 0x423231
push 8
mov dword [ebp - 0x4c], ebx
cdq
pop ecx
idiv ecx
xor edx, edx
mov ecx, eax
mov eax, esi
imul ecx, edi
imul ecx, dword [ebp + 0x18]
div ecx
mov dword [ebp - 0x50], eax
fild qword [ebp - 0x50]
fcom dword [0x625670]
fnstsw ax
sahf
jae 0x423233
fstp st(0)
fld1
fld dword [ebp + 0x2c]
fcomp st(1)
fnstsw ax
sahf
jbe 0x423242
fstp dword [ebp + 0x20]
jmp 0x423244
fstp st(0)
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.004f656b
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
cmp dword [ebp + 0x4c], 8
mov byte [ebp - 4], 5
jg 0x42337f
call fcn.00510f0f
test al, al
je 0x42328e
lea eax, [ebp + 0xc]
push 0x47473232
push eax
mov eax, dword [0x6b23e0]
call dword [eax + 0x38]
pop ecx
pop ecx
jmp 0x423293
mov eax, 0x67656e20
cmp eax, ebx
je 0x4232e9
push 1
push ebx
push ebx
call fcn.004f2564
add esp, 0xc
lea ecx, [ebp - 0x18]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x18]
mov ecx, 0x6b2118
push eax
mov byte [ebp - 4], 6
call fcn.004f2768
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x38]
push eax
mov byte [ebp - 4], 7
call fcn.00534556
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 5
je 0x42348f
push dword [ebp - 0x18]
jmp 0x423486
push ebx
push dword [ebp + 0xc]
push 1
call fcn.004f211c
add esp, 0xc
lea ecx, [ebp - 0x30]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x30]
mov ecx, 0x6b1f08
push eax
mov byte [ebp - 4], 8
call fcn.004f22d1
push ebx
lea eax, [ebp - 0x30]
push ebx
push eax
mov byte [ebp - 4], 9
call fcn.004f25c7
add esp, 0xc
lea ecx, [ebp - 0x18]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x18]
mov ecx, 0x6b2118
push eax
mov byte [ebp - 4], 0xa
call fcn.004f2768
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0xb
call fcn.00534556
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 9
je 0x42336a
push dword [ebp - 0x18]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x30], ebx
mov byte [ebp - 4], 5
je 0x42348f
push dword [ebp - 0x30]
jmp 0x423486
call fcn.00510f0f
test al, al
je 0x42339d
lea eax, [ebp + 0xc]
push 0x73524742
push eax
mov eax, dword [0x6b23e0]
call dword [eax + 0x38]
pop ecx
pop ecx
jmp 0x4233a2
mov eax, 0x67656e20
cmp eax, ebx
je 0x4233f9
push 1
push ebx
push 1
call fcn.004f2564
add esp, 0xc
lea ecx, [ebp - 0x18]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x18]
mov ecx, 0x6b2118
push eax
mov byte [ebp - 4], 0xc
call fcn.004f2768
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0xd
call fcn.00534556
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 5
je 0x42348f
push dword [ebp - 0x18]
jmp 0x423486
push ebx
push dword [ebp + 0xc]
push 1
call fcn.004f211c
add esp, 0xc
lea ecx, [ebp - 0x30]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x30]
mov ecx, 0x6b1f08
push eax
mov byte [ebp - 4], 0xe
call fcn.004f22d1
push ebx
lea eax, [ebp - 0x30]
push ebx
push eax
mov byte [ebp - 4], 0xf
call fcn.004f25c7
add esp, 0xc
lea ecx, [ebp - 0x18]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x18]
mov ecx, 0x6b2118
push eax
mov byte [ebp - 4], 0x10
call fcn.004f2768
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x11
call fcn.00534556
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0xf
je 0x42347a
push dword [ebp - 0x18]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x30], ebx
mov byte [ebp - 4], 5
je 0x42348f
push dword [ebp - 0x30]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
fld dword [ebp + 0x34]
fmul dword [ebp + 0x20]
mov dword [ebp + 0x30], ebx
call fcn.0044d7bc
fld dword [ebp + 0x20]
fmul dword [0x625674]
mov edi, eax
mov dword [ebp + 0x18], edi
call fcn.0044d7bc
mov esi, dword [ebp + 0x48]
mov dword [ebp + 0x3c], eax
imul esi, dword [ebp + 0x4c]
mov eax, dword [ebp + 0x48]
add esi, 0x1f
sar esi, 3
and esi, 0xfffffffc
mov dword [ebp - 0xa0], eax
mov eax, esi
lea ecx, [ebp - 0x54]
imul eax, edi
push eax
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x9c], edi
call fcn.00427eb4
cmp dword [ebp - 0x50], ebx
je 0x4235d1
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x30]
push ebx
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x54]
push esi
push eax
lea eax, [ebp - 0xa8]
push dword [ebp + 0x4c]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004f4618
add esp, 0x28
lea ecx, [ebp - 0x18]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x18]
mov ecx, 0x6b1e80
push eax
mov byte [ebp - 4], 0x14
call fcn.004f46fc
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x15
call fcn.00534556
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x13
je 0x423568
push dword [ebp - 0x18]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x30], ebx
mov byte [ebp - 4], 0x12
je 0x42357d
push dword [ebp - 0x30]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x48], ebx
je 0x4235dd
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x80]
push eax
call fcn.0041c5ec
mov esi, eax
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call fcn.00423acf
mov eax, dword [esi + 8]
cmp dword [ebp - 0x80], ebx
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x12
je 0x4235be
push dword [ebp - 0x80]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x28], ebx
je 0x4235d1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call fcn.0041c58e
jmp 0x4235fb
fld dword [ebp + 0x20]
fsub dword [0x625670]
fstp dword [ebp + 0x20]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 5
call fcn.0041c58e
fld dword [ebp + 0x20]
fcomp dword [0x625670]
fnstsw ax
sahf
ja 0x42348f
cmp dword [ebp - 0x28], ebx
je 0x423a5f
fld dword [ebp + 0x20]
fcomp dword [0x625670]
fnstsw ax
sahf
jb 0x423a5f
call fcn.004f0f0d
mov dword [ebp - 0x58], eax
lea eax, [ebp + 0x10]
fild dword [ebp + 0x38]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp + 0x2c], ebx
fstp dword [ebp - 0x74]
call fcn.00427feb
cmp dword [ebp - 0x70], ebx
mov byte [ebp - 4], 0x17
je 0x42364e
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x70]
call dword [eax + 4]
pop ecx
pop ecx
xor ebx, ebx
fld dword [ebp - 0x74]
fcomp dword [0x62565c]
fnstsw ax
sahf
jbe 0x4239c9
mov eax, dword [ebp - 0x44]
push ebx
push dword [ebp - 0x48]
call dword [eax + 0x10]
mov eax, dword [ebp + 0x2c]
pop ecx
imul eax, dword [ebp + 0x18]
inc dword [ebp + 0x2c]
mov dword [ebp + 0x20], eax
fild dword [ebp + 0x20]
mov eax, dword [ebp - 0x24]
pop ecx
push dword [ebp - 0x28]
fstp dword [ebp - 0xd4]
call dword [eax + 0x90]
pop ecx
fld1
push 1
push ebx
fstp dword [ebp + 0x34]
push ebx
call fcn.004f2564
add esp, 0xc
lea ecx, [ebp - 0x50]
push eax
call fcn.004f66b1
lea eax, [ebp - 0x50]
mov ecx, 0x6b2118
push eax
mov byte [ebp - 4], 0x18
call fcn.004f2768
lea eax, [ebp + 0x34]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004f4fc8
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.004f66b1
lea eax, [ebp - 0x30]
mov ecx, 0x6b1f80
push eax
mov byte [ebp - 4], 0x1a
call fcn.004f5471
mov eax, dword [ebp - 0x24]
push ebx
push ebx
mov byte [ebp - 4], 0x1b
push dword [ebp - 0x30]
push dword [ebp - 0x28]
call dword [eax + 0xc0]
add esp, 0x10
cmp dword [ebp - 0x30], ebx
mov byte [ebp - 4], 0x19
je 0x423718
push dword [ebp - 0x30]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x50], ebx
mov byte [ebp - 4], 0x17
je 0x42372d
push dword [ebp - 0x50]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
push dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call dword [eax + 0x3c]
pop ecx
mov eax, dword [ebp - 0x24]
fldz
push ecx
fstp dword [esp]
fldz
push ecx
fstp dword [esp]
push dword [ebp - 0x28]
call dword [eax + 0x40]
fild dword [ebp + 0x48]
add esp, 0xc
mov eax, dword [ebp - 0x24]
fstp dword [ebp + 0x20]
fldz
push ecx
fstp dword [esp]
fld dword [ebp + 0x20]
push ecx
fstp dword [esp]
push dword [ebp - 0x28]
call dword [eax + 0x48]
fild dword [ebp + 0x18]
add esp, 0xc
mov eax, dword [ebp - 0x24]
fst dword [ebp + 0x4c]
push ecx
fstp dword [esp]
fld dword [ebp + 0x20]
push ecx
fstp dword [esp]
push dword [ebp - 0x28]
call dword [eax + 0x48]
fld dword [ebp + 0x4c]
add esp, 0xc
mov eax, dword [ebp - 0x24]
push ecx
fstp dword [esp]
fldz
push ecx
fstp dword [esp]
push dword [ebp - 0x28]
call dword [eax + 0x48]
mov eax, dword [ebp - 0x24]
add esp, 0xc
push dword [ebp - 0x28]
call dword [eax + 0x54]
mov eax, dword [ebp - 0x24]
pop ecx
push dword [ebp - 0x28]
call dword [eax + 0xc4]
fld dword [ebp - 0x3c]
fcomp dword [0x625670]
pop ecx
fnstsw ax
sahf
ja 0x4237f6
fld dword [ebp - 0x40]
fcomp dword [0x625670]
fnstsw ax
sahf
ja 0x4237f6
fild dword [ebp + 0x28]
mov eax, dword [ebp + 0x24]
push ecx
neg eax
fadd dword [ebp - 0xd4]
mov dword [ebp + 0x4c], eax
fst dword [ebp + 0x20]
fchs
fstp dword [esp]
fild dword [ebp + 0x4c]
jmp 0x42384b
fld1
push 6
mov esi, 0x631b18
fdiv dword [ebp - 0x3c]
pop ecx
lea edi, [ebp - 0xc0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x28]
fstp dword [ebp - 0xc0]
fld1
fdiv dword [ebp - 0x40]
fstp dword [ebp - 0xb4]
call dword [eax + 0x14]
fild dword [ebp + 0x28]
pop ecx
pop ecx
fadd dword [ebp - 0xd4]
push ecx
fst dword [ebp + 0x20]
fmul dword [ebp - 0x40]
fchs
fstp dword [esp]
fild dword [ebp + 0x24]
fmul dword [ebp - 0x3c]
fchs
mov eax, dword [ebp - 0x24]
push ecx
fstp dword [esp]
push dword [ebp - 0x28]
call dword [eax + 0x98]
add esp, 0xc
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [eax + 0xa0]
mov ax, word [ebp + 0x54]
pop ecx
neg ax
pop ecx
mov cx, word [ebp + 0x44]
push ebx
sbb eax, eax
push 0x4222dd
and eax, 0x100
push ebx
neg cx
sbb ecx, ecx
and ecx, 0x40
or eax, ecx
xor ecx, ecx
cmp word [ebp + 0x40], bx
setne cl
or eax, ecx
or al, 0x80
push eax
push 0x10000
push dword [ebp - 0x58]
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call fcn.0050f19b
mov eax, dword [ebp - 0x24]
add esp, 0x20
push dword [ebp - 0x28]
call dword [eax + 0x94]
mov eax, dword [ebp + 0x14]
pop ecx
push 6
mov esi, 0x631b18
pop ecx
lea edi, [ebp - 0x98]
push dword [ebp + 0x10]
rep movsd dword es:[edi], dword [esi]
call dword [eax + 0x90]
pop ecx
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x70]
call dword [eax + 0x14]
fld dword [ebp - 0x3c]
fcomp dword [0x625670]
pop ecx
pop ecx
fnstsw ax
sahf
ja 0x423927
fld dword [ebp - 0x40]
fcomp dword [0x625670]
fnstsw ax
sahf
ja 0x423927
fild dword [ebp + 0x24]
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x84], eax
fstp dword [ebp - 0x88]
jmp 0x423951
fild dword [ebp + 0x24]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x40]
fmul dword [ebp - 0x3c]
mov dword [ebp - 0x8c], eax
fstp dword [ebp - 0x88]
fld dword [ebp + 0x20]
fmul dword [ebp - 0x40]
fstp dword [ebp - 0x84]
lea eax, [ebp - 0x18]
push ebx
push eax
lea ecx, [ebp - 0x28]
call fcn.00410572
cmp dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x1c
je 0x423971
push dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
call dword [eax + 4]
pop ecx
lea eax, [ebp - 0x98]
push ebx
push eax
mov eax, dword [ebp + 0x14]
push dword [ebp - 0x18]
push dword [ebp + 0x10]
call dword [eax + 0xd4]
mov eax, dword [ebp + 0x14]
add esp, 0x10
push dword [ebp + 0x10]
call dword [eax + 0x94]
mov eax, dword [ebp + 0x50]
pop ecx
cmp eax, ebx
je 0x4239a2
mov word [eax], bx
fild dword [ebp + 0x3c]
cmp dword [ebp - 0x18], ebx
mov byte [ebp - 4], 0x17
fsubr dword [ebp - 0x74]
fstp dword [ebp - 0x74]
je 0x423650
push dword [ebp - 0x18]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
jmp 0x423650
cmp dword [ebp - 0x70], ebx
mov byte [ebp - 4], 5
je 0x4239de
push dword [ebp - 0x70]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x38], ebx
mov byte [ebp - 4], 4
je 0x4239f3
push dword [ebp - 0x38]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x28], ebx
mov byte [ebp - 4], 3
je 0x423a08
push dword [ebp - 0x28]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x48], ebx
mov byte [ebp - 4], 2
je 0x423a1d
push dword [ebp - 0x48]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
xor esi, esi
mov dword [ebp - 4], esi
cmp dword [ebp - 0x58], esi
je 0x423a38
push dword [ebp - 0x58]
call fcn.005d23ab
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp + 0x10], esi
je 0x423a4d
push dword [ebp + 0x10]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
mov eax, dword [ebp + 0x30]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
cmp dword [ebp - 0x38], ebx
mov byte [ebp - 4], 4
je 0x423a74
push dword [ebp - 0x38]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x28], ebx
mov byte [ebp - 4], 3
je 0x423a89
push dword [ebp - 0x28]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
cmp dword [ebp - 0x48], ebx
mov byte [ebp - 4], 2
je 0x423a9e
push dword [ebp - 0x48]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x64]
or dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
cmp dword [ebp + 0x10], ebx
je 0x423abb
push dword [ebp + 0x10]
mov eax, dword [0x6b1bfc]
call dword [eax + 0xc]
pop ecx
push 1
pop eax
jmp 0x423a50