Function at 0x4760e6
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x570f5f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x112ac
call fcn.0054cd40
lea ecx, [ebp - 0xa70]
call fcn.00565486
mov dword [ebp - 4], 0
mov dword [ebp - 0xa50], 0xffffffff
mov dword [ebp - 0x4c80], 0
mov dword [ebp - 0xa3c], 0
mov dword [ebp - 0xa74], 0
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0x1129c], 0
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0x4c7c], 0
mov dword [ebp - 0x1128c], 0
mov dword [ebp - 0x18], 0x20
mov dword [ebp - 0xa38], 0x4000
mov dword [ebp - 0xa34], 2
mov dword [ebp - 0x828], 0x200
mov dword [ebp - 0x14], 0x120
mov dword [ebp - 0x11294], 1
mov dword [ebp - 0x830], 0
mov dword [ebp - 0xd088], 0
mov dword [ebp - 0x11290], 0
mov eax, dword [ebp + 8]
cmp dword [eax + 0x2ac4], 0x407
je 0x47620a
mov ecx, dword [ebp - 0x11294]
mov dword [ebp - 0x112a4], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa70]
call fcn.005654db
mov eax, dword [ebp - 0x112a4]
jmp 0x476f42
cmp dword [ebp - 0x11294], 0
je 0x476270
mov edx, dword [ebp + 8]
add edx, 0x3bab
push edx
call fcn.0054c3e0
add esp, 4
test eax, eax
je 0x476270
mov eax, dword [ebp + 8]
add eax, 0x3bab
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x476270
mov dword [ebp - 0x11294], 0
mov ecx, dword [ebp - 0x11294]
mov dword [ebp - 0x112a8], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa70]
call fcn.005654db
mov eax, dword [ebp - 0x112a8]
jmp 0x476f42
cmp dword [ebp - 0x11294], 0
je 0x4762d6
mov edx, dword [ebp + 8]
add edx, 0x3aa7
push edx
call fcn.0054c3e0
add esp, 4
test eax, eax
je 0x4762d6
mov eax, dword [ebp + 8]
add eax, 0x3aa7
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x4762d6
mov dword [ebp - 0x11294], 0
mov ecx, dword [ebp - 0x11294]
mov dword [ebp - 0x112ac], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa70]
call fcn.005654db
mov eax, dword [ebp - 0x112ac]
jmp 0x476f42
cmp dword [ebp - 0x11294], 0
je 0x476eee
push 0x800
push 0
lea edx, [ebp - 0x81c]
push edx
call fcn.0054bfb0
add esp, 0xc
push str.Phy_Block_Header
lea eax, [ebp - 0x81c]
push eax
call fcn.0054bec0
add esp, 8
push 0
push 0x200
lea ecx, [ebp - 0xa30]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00469d70
add esp, 0x10
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cl, byte [eax + 0x7a8]
shl ecx, 8
mov edx, dword [ebp - 0x8b0]
and edx, 0xff
add ecx, edx
mov dword [ebp - 0x820], ecx
mov eax, dword [ebp + 8]
add eax, 0x27998
push eax
lea ecx, [ebp - 0xa30]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004db12c
add esp, 0xc
lea eax, [ebp - 0x4c80]
push eax
lea ecx, [ebp - 0xa40]
push ecx
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0xd084]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0047604e
add esp, 0x18
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0
jl 0x4763b3
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4764], 7
jg 0x4763b3
mov dword [ebp - 0xd084], 0
push str.Twin_Mode
lea edx, [ebp - 0x80c]
push edx
call fcn.0054bec0
add esp, 8
mov al, byte [ebp - 0xd084]
mov byte [ebp - 0x7fd], al
push str.Intlv_Mode
lea ecx, [ebp - 0x7fc]
push ecx
call fcn.0054bec0
add esp, 8
mov dl, byte [ebp - 0x824]
mov byte [ebp - 0x7ed], dl
push str.2Plane_Mode
lea eax, [ebp - 0x7ec]
push eax
call fcn.0054bec0
add esp, 8
mov cl, byte [ebp - 0x10]
mov byte [ebp - 0x7dd], cl
push str.MLC_Flash
lea edx, [ebp - 0x7dc]
push edx
call fcn.0054bec0
add esp, 8
mov al, byte [ebp - 0xa40]
mov byte [ebp - 0x7cd], al
lea ecx, [ebp - 0x61c]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x37b4
push edx
call fcn.00536311
add esp, 8
mov eax, dword [ebp + 8]
add eax, 0x3bab
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x47650b
push 0
push 0x40
mov ecx, dword [ebp + 8]
add ecx, 0x3bab
push ecx
lea ecx, [ebp - 0xa70]
call fcn.00565598
test eax, eax
je 0x47650b
lea ecx, [ebp - 0xa70]
call fcn.00565892
mov dword [ebp - 0xa74], eax
push 1
mov edx, dword [ebp - 0xa74]
push edx
call fcn.0054d6ae
add esp, 8
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 0
jne 0x4764e7
mov eax, dword [ebp - 0x1129c]
add eax, 1
mov dword [ebp - 0x1129c], eax
cmp dword [ebp - 0x1129c], 0xa
jle 0x4764da
mov dword [ebp - 0x11294], 0
jmp 0x476eee
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x476493
mov ecx, dword [ebp - 0xa74]
push ecx
mov edx, dword [ebp - 0x830]
push edx
lea ecx, [ebp - 0xa70]
call fcn.0045d6c0
lea ecx, [ebp - 0xa70]
call fcn.005657b3
mov eax, dword [ebp + 8]
add eax, 0x3aa7
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x4765cd
push 0
push 0x40
mov ecx, dword [ebp + 8]
add ecx, 0x3aa7
push ecx
lea ecx, [ebp - 0xa70]
call fcn.00565598
test eax, eax
je 0x4765cd
lea ecx, [ebp - 0xa70]
call fcn.00565892
mov dword [ebp - 0xa44], eax
push 1
mov edx, dword [ebp - 0xa44]
push edx
call fcn.0054d6ae
add esp, 8
mov dword [ebp - 0xd088], eax
cmp dword [ebp - 0xd088], 0
jne 0x4765a9
mov eax, dword [ebp - 0x1129c]
add eax, 1
mov dword [ebp - 0x1129c], eax
cmp dword [ebp - 0x1129c], 0xa
jle 0x47659c
mov dword [ebp - 0x11294], 0
jmp 0x476eee
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x476555
mov ecx, dword [ebp - 0xa44]
push ecx
mov edx, dword [ebp - 0xd088]
push edx
lea ecx, [ebp - 0xa70]
call fcn.0045d6c0
lea ecx, [ebp - 0xa70]
call fcn.005657b3
cmp dword [0x5d9694], 0
je 0x4765e0
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4765cd
mov dword [0x5d9694], 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2af4]
mov dword [ebp - 0xa50], ecx
cmp dword [ebp - 0xa50], 0
jl 0x4766b0
mov edx, dword [ebp - 0xa50]
imul edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0xa74]
jl 0x476624
mov dword [ebp - 0xa50], 0xffffffff
jmp 0x476643
mov eax, dword [ebp - 0xa50]
imul eax, dword [ebp - 0xa38]
cmp eax, dword [ebp - 0xa44]
jl 0x476643
mov dword [ebp - 0xa50], 0xffffffff
cmp dword [ebp - 0xa50], 0
jl 0x4766b0
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0xa50]
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x830]
add eax, edx
push eax
mov ecx, dword [ebp - 0x830]
push ecx
call fcn.0054c980
add esp, 0xc
mov edx, dword [ebp - 0xa38]
push edx
mov eax, dword [ebp - 0xa50]
imul eax, dword [ebp - 0xa38]
mov ecx, dword [ebp - 0xd088]
add ecx, eax
push ecx
mov edx, dword [ebp - 0xd088]
push edx
call fcn.0054c980
add esp, 0xc
mov eax, dword [ebp - 0xa50]
add eax, 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2af4], eax
mov dword [0x5d9694], 0
cmp dword [ebp - 0xa50], 0
jge 0x4766d2
mov dword [ebp - 0x11294], 0
jmp 0x476eee
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0xa74], edx
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xa44], eax
push 0x5a8fc4
lea ecx, [ebp - 0x71c]
push ecx
call fcn.0054bec0
add esp, 8
push 0x5a8fc8
lea edx, [ebp - 0x70c]
push edx
call fcn.0054bec0
add esp, 8
mov dword [ebp - 0x112a0], 0
jmp 0x47672a
mov eax, dword [ebp - 0x112a0]
add eax, 1
mov dword [ebp - 0x112a0], eax
cmp dword [ebp - 0x112a0], 4
jge 0x476771
mov ecx, dword [ebp - 0x112a0]
shl ecx, 3
mov edx, dword [ebp - 0xa74]
sar edx, cl
mov eax, dword [ebp - 0x112a0]
mov byte [ebp + eax - 0x714], dl
mov ecx, dword [ebp - 0x112a0]
shl ecx, 3
mov edx, dword [ebp - 0xa44]
sar edx, cl
mov eax, dword [ebp - 0x112a0]
mov byte [ebp + eax - 0x704], dl
jmp 0x47671b
mov ecx, dword [ebp - 0x4c80]
mov dword [ebp - 0x82c], ecx
cmp dword [ebp - 0xd084], 0
je 0x476794
mov edx, dword [ebp - 0x82c]
shl edx, 1
mov dword [ebp - 0x82c], edx
cmp dword [ebp - 0x82c], 0x10
jl 0x4767a7
mov dword [ebp - 0x82c], 0x10
push 0x10
push 0
lea eax, [ebp - 0xa60]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x8400
push 0
lea ecx, [ebp - 0xd080]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4764], 8
jl 0x47680b
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0xd
jg 0x47680b
mov ecx, dword [ebp - 0xa24]
and ecx, 0xff
shl ecx, 8
mov edx, dword [ebp - 0xa25]
and edx, 0xff
add ecx, edx
mov dword [ebp - 0x820], ecx
mov eax, dword [ebp + 8]
add eax, 0x27998
push eax
lea ecx, [ebp - 0xa60]
push ecx
push 0
push 0
push 0
mov edx, dword [ebp - 0x820]
push edx
push 0xa
push 1
call fcn.00464a69
add esp, 0x20
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 8
jl 0x47689b
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4764], 0xd
jg 0x47689b
mov byte [ebp - 0xa57], 4
xor edx, edx
cmp dword [ebp - 0xd084], 0
setne dl
inc edx
mov eax, dword [ebp - 0x4c80]
imul eax, edx
mov byte [ebp - 0xa55], al
mov ecx, dword [ebp - 0xa55]
and ecx, 0xff
add ecx, 1
mov dword [ebp - 0xa34], ecx
mov edx, dword [ebp - 0xa55]
and edx, 0xff
shl edx, 9
mov dword [ebp - 0x828], edx
jmp 0x4768a2
mov byte [ebp - 0xa55], 2
mov eax, dword [ebp - 0xa34]
shl eax, 9
push eax
lea ecx, [ebp - 0xd080]
push ecx
lea edx, [ebp - 0xa60]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004da8ef
add esp, 0x10
test eax, eax
je 0x4768f2
mov ecx, dword [ebp - 0x828]
xor edx, edx
mov dl, byte [ebp + ecx - 0xd080]
cmp edx, 0xe1
je 0x4768f0
mov dword [ebp - 0x11294], 0
jmp 0x476eee
jmp 0x476901
mov dword [ebp - 0x11294], 0
jmp 0x476eee
mov dword [ebp - 0x1128c], 0x11b
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 8
jl 0x476934
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4764], 0xd
jg 0x476934
mov dword [ebp - 0x1128c], 0x1dd
mov dword [ebp - 0x14], 0x1e2
mov edx, dword [ebp - 0x1128c]
cmp edx, dword [ebp - 0x14]
jge 0x4769b8
push 0x10
push 0
lea eax, [ebp - 0xa60]
push eax
call fcn.0054bfb0
add esp, 0xc
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0x7a8]
shl edx, 8
mov eax, dword [ebp - 0x1128c]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xd080]
add edx, ecx
mov dword [ebp - 0xa48], edx
mov edx, dword [ebp + 8]
add edx, 0x27998
push edx
lea eax, [ebp - 0xa60]
push eax
push 0
push 0
push 0
mov ecx, dword [ebp - 0xa48]
push ecx
push 0xc
push 1
call fcn.00464a69
add esp, 0x20
push 0
push 0
lea edx, [ebp - 0xa60]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004da8ef
add esp, 0x10
mov dword [ebp - 0x11298], 0
jmp 0x4769d3
mov ecx, dword [ebp - 0x11298]
add ecx, 1
mov dword [ebp - 0x11298], ecx
cmp dword [ebp - 0x11298], 2
jge 0x476eee
cmp dword [ebp - 0x11294], 0
jne 0x4769ee
jmp 0x476eee
mov dword [ebp - 0x4c7c], 0
mov edx, dword [ebp - 0x1128c]
xor eax, eax
mov al, byte [ebp + edx - 0xd080]
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0x11298]
mov dword [ebp - 0x112b4], ecx
cmp dword [ebp - 0x112b4], 0
je 0x476a30
cmp dword [ebp - 0x112b4], 1
je 0x476a64
jmp 0x476b0f
mov edx, dword [ebp - 0xa74]
mov dword [ebp - 0xa3c], edx
mov eax, dword [ebp - 0x82c]
shl eax, 9
mov ecx, dword [ebp - 0xa3c]
add ecx, eax
mov dword [ebp - 0xa3c], ecx
mov edx, dword [ebp - 0x830]
mov dword [ebp - 0x11290], edx
jmp 0x476b0f
mov eax, dword [ebp - 0x1128c]
add eax, 1
mov dword [ebp - 0x1128c], eax
mov ecx, dword [ebp - 0x1128c]
cmp ecx, dword [ebp - 0x14]
jge 0x476af7
push 0x10
push 0
lea edx, [ebp - 0xa60]
push edx
call fcn.0054bfb0
add esp, 0xc
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cl, byte [eax + 0x7a8]
shl ecx, 8
mov edx, dword [ebp - 0x1128c]
xor eax, eax
mov al, byte [ebp + edx - 0xd080]
add ecx, eax
mov dword [ebp - 0xa48], ecx
mov ecx, dword [ebp + 8]
add ecx, 0x27998
push ecx
lea edx, [ebp - 0xa60]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0xa48]
push eax
push 0xc
push 1
call fcn.00464a69
add esp, 0x20
push 0
push 0
lea ecx, [ebp - 0xa60]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004da8ef
add esp, 0x10
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xa3c], eax
mov ecx, dword [ebp - 0xd088]
mov dword [ebp - 0x11290], ecx
cmp dword [ebp - 0xa3c], 0
jle 0x476ed2
mov edx, dword [ebp - 0x1128c]
cmp edx, dword [ebp - 0x14]
jge 0x476ed2
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cl, byte [eax + 0x7a8]
shl ecx, 8
mov edx, dword [ebp - 0x1128c]
xor eax, eax
mov al, byte [ebp + edx - 0xd080]
add ecx, eax
mov dword [ebp - 0xa48], ecx
mov dword [ebp - 0x4c78], 0
jmp 0x476b6b
mov ecx, dword [ebp - 0x4c78]
add ecx, 1
mov dword [ebp - 0x4c78], ecx
mov edx, dword [ebp - 0xa40]
neg edx
sbb edx, edx
and edx, 0x40
add edx, 0x40
cmp dword [ebp - 0x4c78], edx
jge 0x476e2d
cmp dword [ebp - 0xa3c], 0
jg 0x476b95
jmp 0x476e2d
mov dword [ebp - 0xa4c], 0
jmp 0x476bb0
mov eax, dword [ebp - 0xa4c]
add eax, 1
mov dword [ebp - 0xa4c], eax
xor ecx, ecx
cmp dword [ebp - 0x824], 0
setne cl
inc ecx
cmp dword [ebp - 0xa4c], ecx
jge 0x476e28
cmp dword [ebp - 0xa3c], 0
jg 0x476bd7
jmp 0x476e28
mov dword [ebp - 0x1c], 0
jmp 0x476be9
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
xor eax, eax
cmp dword [ebp - 0x10], 0
setne al
inc eax
cmp dword [ebp - 0x1c], eax
jge 0x476e23
cmp dword [ebp - 0xa3c], 0
jg 0x476c0a
jmp 0x476e23
mov ecx, dword [ebp + 8]
add ecx, 0x27998
push ecx
lea edx, [ebp - 0xa60]
push edx
push 0
push 0
mov eax, dword [ebp - 0x4c78]
push eax
mov ecx, dword [ebp - 0xa48]
push ecx
push 0x3b
push 0
call fcn.00464a69
add esp, 0x20
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4764], 0
jl 0x476c9b
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 7
jg 0x476c9b
mov byte [ebp - 0xa59], 0x17
mov ecx, dword [ebp - 0xa4c]
neg ecx
sbb ecx, ecx
and ecx, 0x40
mov edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
and edx, 0x80
or ecx, edx
mov byte [ebp - 0xa58], cl
mov eax, dword [ebp - 0x82c]
add eax, 1
mov byte [ebp - 0xa55], al
mov ecx, dword [ebp - 0xa55]
and ecx, 0xff
mov dword [ebp - 0xa34], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4764], 8
jl 0x476cf5
mov eax, dword [ebp + 8]
cmp dword [eax + 0x4764], 0xd
jg 0x476cf5
mov ecx, dword [ebp - 0xa4c]
neg ecx
sbb ecx, ecx
and ecx, 2
or ecx, 4
xor edx, edx
cmp dword [ebp - 0x1c], 0
setne dl
or ecx, edx
mov byte [ebp - 0xa57], cl
mov al, byte [ebp - 0x82c]
mov byte [ebp - 0xa55], al
mov ecx, dword [ebp - 0xa55]
and ecx, 0xff
add ecx, 1
mov dword [ebp - 0xa34], ecx
push 0x4200
push 0
lea edx, [ebp - 0x4c74]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x4200
push 0
lea eax, [ebp - 0x11288]
push eax
call fcn.0054bfb0
add esp, 0xc
cmp dword [ebp - 0x11298], 0
jne 0x476d5f
cmp dword [ebp - 0x4c78], 0
jne 0x476d5f
cmp dword [ebp - 0xa4c], 0
jne 0x476d5f
cmp dword [ebp - 0x1c], 0
jne 0x476d5f
push 0x800
lea ecx, [ebp - 0x81c]
push ecx
lea edx, [ebp - 0x4c74]
push edx
call fcn.0054c980
add esp, 0xc
jmp 0x476dd0
mov eax, dword [ebp - 0xa3c]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
cmp eax, dword [ebp - 0x82c]
jle 0x476d8a
mov eax, dword [ebp - 0x82c]
shl eax, 9
mov dword [ebp - 0x112b8], eax
jmp 0x476d96
mov ecx, dword [ebp - 0xa3c]
mov dword [ebp - 0x112b8], ecx
mov edx, dword [ebp - 0x112b8]
push edx
mov eax, dword [ebp - 0x11290]
add eax, dword [ebp - 0x4c7c]
push eax
lea ecx, [ebp - 0x4c74]
push ecx
call fcn.0054c980
add esp, 0xc
mov edx, dword [ebp - 0x82c]
shl edx, 9
mov eax, dword [ebp - 0x4c7c]
add eax, edx
mov dword [ebp - 0x4c7c], eax
mov ecx, dword [ebp - 0xa34]
shl ecx, 9
push ecx
lea edx, [ebp - 0x4c74]
push edx
lea eax, [ebp - 0xa60]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004da773
add esp, 0x10
test eax, eax
jne 0x476e07
mov dword [ebp - 0x11294], 0
jmp 0x476eee
mov edx, dword [ebp - 0x82c]
shl edx, 9
mov eax, dword [ebp - 0xa3c]
sub eax, edx
mov dword [ebp - 0xa3c], eax
jmp 0x476be0
jmp 0x476ba1
jmp 0x476b5c
cmp dword [ebp - 0xa3c], 0
jle 0x476ecd
mov ecx, dword [ebp - 0x1128c]
add ecx, 1
mov dword [ebp - 0x1128c], ecx
mov edx, dword [ebp - 0x1128c]
cmp edx, dword [ebp - 0x14]
jge 0x476ecd
push 0x10
push 0
lea eax, [ebp - 0xa60]
push eax
call fcn.0054bfb0
add esp, 0xc
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0x7a8]
shl edx, 8
mov eax, dword [ebp - 0x1128c]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xd080]
add edx, ecx
mov dword [ebp - 0xa48], edx
mov edx, dword [ebp + 8]
add edx, 0x27998
push edx
lea eax, [ebp - 0xa60]
push eax
push 0
push 0
push 0
mov ecx, dword [ebp - 0xa48]
push ecx
push 0xc
push 1
call fcn.00464a69
add esp, 0x20
push 0
push 0
lea edx, [ebp - 0xa60]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004da8ef
add esp, 0x10
jmp 0x476b0f
mov ecx, dword [ebp - 0x1128c]
cmp ecx, dword [ebp - 0x14]
jl 0x476ee9
mov dword [ebp - 0x11294], 0
jmp 0x476eee
jmp 0x4769c4
cmp dword [ebp - 0x830], 0
je 0x476f06
mov edx, dword [ebp - 0x830]
push edx
call fcn.0054c543
add esp, 4
cmp dword [ebp - 0xd088], 0
je 0x476f1e
mov eax, dword [ebp - 0xd088]
push eax
call fcn.0054c543
add esp, 4
mov ecx, dword [ebp - 0x11294]
mov dword [ebp - 0x112b0], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa70]
call fcn.005654db
mov eax, dword [ebp - 0x112b0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret