Function at 0x50767c
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff20
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov esi, 0x675ee0
xor eax, eax
push ebp
push 0x50863f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0050216c
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x5085f9
mov bl, 1
call fcn.0053c3b8
test eax, eax
je 0x5076e6
call fcn.0053c3b8
mov bl, byte [eax + 0x14e]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp bl, byte [eax + 0x1c4]
je 0x507714
mov eax, dword [esi]
xor edx, edx
mov dword [eax + 0x164], edx
mov eax, dword [esi]
xor edx, edx
mov dword [eax + 0x170], edx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov byte [eax + 0x1c4], bl
call fcn.0053c3b8
test eax, eax
je 0x507fd7
call fcn.0053c3b8
call fcn.005c504c
test al, al
jne 0x507787
mov eax, dword [0x672244]
mov eax, dword [eax]
cmp dword [eax + 0x18], 1
jle 0x507787
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [0x672244]
mov eax, dword [eax]
mov edi, dword [eax + 0x18]
dec edi
cmp edi, 0
jl 0x5077a7
mov eax, dword [0x672244]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + edi*4]
add eax, 0x19c
mov edx, dword [eax + 0x20]
add dword [ebp - 0x20], edx
mov edx, dword [eax + 0x24]
add dword [ebp - 0x24], edx
mov eax, dword [eax + 0x28]
add dword [ebp - 0x28], eax
dec edi
cmp edi, 0xffffffff
jne 0x50775b
jmp 0x5077a7
call fcn.0053c3b8
mov edx, dword [eax + 0xb8]
mov dword [ebp - 0x20], edx
mov edx, dword [eax + 0xbc]
mov dword [ebp - 0x24], edx
mov eax, dword [eax + 0xc0]
mov dword [ebp - 0x28], eax
call fcn.0053c3b8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0x258
mov dword [ebp - 0x50], eax
mov bl, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x672cb4]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x5077dc
and edx, 0x7f
bt eax, edx
jae 0x507fcb
lea eax, [ebp - 0xc]
call fcn.00403274
xor eax, eax
mov al, bl
cmp eax, 0x12
ja case.0x5077f7.4
jmp dword [eax*4 + 0x5077fe]
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x14e]
dec eax
sub al, 2
jae 0x5078af
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4c]
call fcn.00566b28
mov eax, dword [eax + 8]
inc eax
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0x98], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4d4]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x90], 0
lea edx, [ebp - 0x9c]
mov eax, dword [0x671ee8]
mov eax, dword [eax]
mov ecx, 1
call fcn.00659050
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x417], 0
je 0x5078e0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1e4]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx + 0x13c]
cmp eax, dword [edx + 0x18]
jl 0x5078e0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1e4]
mov dword [ebp - 0x30], eax
jmp 0x5078fb
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x13c]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x1e4], edx
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x40e], 0
jne 0x50791c
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x40d], 0
jne 0x507949
cmp dword [ebp - 0x30], 0x3e8
jle 0x507949
mov edx, 0x3e8
mov eax, dword [ebp - 0x30]
call fcn.00656b78
lea edx, [ebp - 0xa0]
call fcn.0065930c
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 0x10]
mov ecx, 0x508658
call fcn.00403568
jmp 0x507954
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x30]
call fcn.0065930c
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x81c], 0
jne 0x507975
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4c]
call fcn.00566b28
mov eax, dword [eax + 8]
mov dword [ebp - 0x34], eax
jmp 0x507995
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx + 0x13c]
mov edx, dword [edx + 0x1c]
mov eax, dword [edx + eax*4]
call fcn.005605e0
mov eax, dword [eax + 8]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 8]
inc eax
mov dword [ebp - 0xc0], eax
mov byte [ebp - 0xbc], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0xb
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x4d4]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xc0]
mov eax, dword [0x672318]
mov eax, dword [eax]
mov ecx, 3
call fcn.00659050
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx + 0xb0]
mov edx, dword [edx + 0x1c]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx + 0x10]
mov edx, dword [edx + 0x1c]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x14e]
dec eax
sub al, 2
jae 0x507ae7
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx + 0x10]
mov edx, dword [edx + 0x1c]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
call fcn.00560784
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
mov edi, dword [eax + 0x8c]
dec edi
cmp edi, 0
jl 0x507a9d
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x13c]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + edi*4]
mov dl, byte [0x50865c]
call fcn.005606e8
add dword [ebp - 0x38], eax
dec edi
cmp edi, 0xffffffff
jne 0x507a7a
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0x98], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x58]
sub eax, dword [edx + 0x28]
inc eax
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x90], 0
lea edx, [ebp - 0x9c]
mov eax, dword [0x672a0c]
mov eax, dword [eax]
mov ecx, 1
call fcn.00659050
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + 0x3c]
add dword [ebp - 0x3c], edx
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0x2c], 0
jne 0x507af6
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x3c]
call fcn.0062b8a4
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0xd4], 0xb
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx + 0x10]
mov edx, dword [edx + 0x1c]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x30]
call fcn.00560784
inc eax
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xcc], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x58]
sub eax, dword [edx + 0x28]
inc eax
mov dword [ebp - 0xc8], eax
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xd8]
mov eax, dword [0x672e1c]
mov eax, dword [eax]
mov ecx, 2
call fcn.00659050
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x38], 0
je case.0x5077f7.4
lea eax, [ebp - 0xc]
mov edx, dword [0x672e6c]
mov edx, dword [edx]
call fcn.00403438
jmp case.0x5077f7.4
lea eax, [ebp - 0xc]
xor edx, edx
mov dl, byte [0x675f41]
mov ecx, dword [0x67298c]
mov edx, dword [ecx + edx*4]
call fcn.00403438
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x3a4], 0x80000000
je case.0x5077f7.4
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x3a4]
call fcn.0062d6d0
jmp case.0x5077f7.4
mov eax, dword [0x671910]
mov ax, word [eax + 0xa9]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov word [edx + 0x270], ax
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x14d]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov byte [edx + 0x272], al
mov eax, dword [ebp - 0x4c]
mov al, byte [eax + 0x7dc]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov byte [edx + 0x273], al
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x26c]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov dword [edx + 0x274], eax
jmp case.0x5077f7.4
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x20]
call fcn.0061d178
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, dword [0x672fd0]
mov eax, dword [eax]
call fcn.0065918c
jmp case.0x5077f7.4
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x24]
call fcn.0061d178
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, dword [0x672fd0]
mov eax, dword [eax]
call fcn.0065918c
jmp case.0x5077f7.4
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x28]
call fcn.0061d178
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, dword [0x671ca4]
mov eax, dword [eax]
call fcn.0065918c
jmp case.0x5077f7.4
call fcn.00651de8
mov dword [ebp - 4], eax
mov eax, dword [0x672244]
mov eax, dword [eax]
cmp dword [eax + 0x18], 1
jle 0x507cf6
mov edx, dword [0x672244]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.00651fac
jmp 0x507d05
call fcn.0053c3b8
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.00652038
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x18]
dec edi
cmp edi, 0
jl 0x507d77
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + edi*4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x42b], 0
jne 0x507d71
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x441], 0
jne 0x507d71
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x42a], 0
jne 0x507d71
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x164], 0
je 0x507d71
cmp dword [ebp - 0x2c], 0
jge 0x507d5d
inc dword [ebp - 0x2c]
push 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x164]
push eax
call sub.kernel32.dll_GetFileSize
add dword [ebp - 0x2c], eax
dec edi
cmp edi, 0xffffffff
jne 0x507d18
cmp dword [ebp - 0x2c], 0
jl 0x507da0
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x2c]
call fcn.0061d178
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0xc]
mov eax, dword [0x672de4]
mov eax, dword [eax]
call fcn.0065918c
mov eax, dword [ebp - 4]
call fcn.00652408
jmp case.0x5077f7.4
lea eax, [ebp - 0xc]
push eax
fld xword [0x508660]
mov eax, dword [ebp - 0x4c]
fmul qword [eax + 0x8fc]
call fcn.00402590
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0xd4], 0
fld xword [0x508660]
mov eax, dword [ebp - 0x4c]
fmul qword [eax + 0x8fc]
call fcn.00402554
fmul dword [0x50866c]
mov eax, dword [ebp - 0x4c]
fsubr qword [eax + 0x8fc]
fld xword [0x508670]
fmulp st(1)
call fcn.00402590
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xcc], 0
fld xword [0x508670]
mov eax, dword [ebp - 0x4c]
fmul qword [eax + 0x8fc]
call fcn.00402554
fmul dword [0x50867c]
mov eax, dword [ebp - 0x4c]
fsubr qword [eax + 0x8fc]
fld xword [0x508680]
fmulp st(1)
call fcn.00402590
mov dword [ebp - 0xc8], eax
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xd8]
mov eax, 0x50868c
mov ecx, 2
call fcn.00659050
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x904], 0
jle case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
fld qword [eax + 0x8fc]
fcomp dword [0x50869c]
fnstsw ax
sahf
jb case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
fild dword [eax + 0x904]
call fcn.00402554
fmul dword [0x50867c]
mov eax, dword [ebp - 0x4c]
fdiv qword [eax + 0x8fc]
call fcn.00402590
mov edx, eax
lea ecx, [ebp - 0xc]
mov eax, dword [0x672b34]
mov eax, dword [eax]
call fcn.006592b4
jmp case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x90c], 0
jle case.0x5077f7.4
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x918], 2
jne 0x507eee
mov eax, dword [0x672c38]
mov eax, dword [eax]
mov dword [ebp - 8], eax
jmp 0x507ef8
mov eax, dword [0x67239c]
mov eax, dword [eax]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x914]
call fcn.00656b80
mov edi, eax
cmp edi, 0x7fffffff
jne 0x507f19
mov eax, dword [ebp - 0x4c]
mov edi, dword [eax + 0x90c]
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0x9c], edi
mov byte [ebp - 0x98], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x90c]
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x90], 0
lea edx, [ebp - 0x9c]
mov ecx, 1
mov eax, dword [ebp - 8]
call fcn.00659050
jmp case.0x5077f7.4
lea ecx, [ebp - 0xc]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x148]
mov eax, dword [0x672624]
mov eax, dword [eax]
call fcn.006592b4
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
mov edx, dword [esi]
lea edi, [edx + eax*4 + 0x15c]
mov eax, edi
mov edx, dword [ebp - 0xc]
call fcn.004032c8
cmp dword [ebp - 0xc], 0
je 0x507fcb
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0xc]
call fcn.0065829c
mov edx, dword [ebp - 0xdc]
mov eax, dword [esi]
mov eax, dword [eax + 0x120]
call fcn.0064bb5c
mov dword [edi + 4], eax
mov edx, dword [edi + 4]
mov eax, dword [esi]
mov eax, dword [eax + 0x124]
add eax, eax
add edx, eax
mov eax, dword [edi + 8]
call fcn.00656b78
mov dword [edi + 8], eax
dec ebx
cmp bl, 0xff
jne 0x5077bc
jmp 0x507ff4
xor ebx, ebx
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
mov edx, dword [esi]
lea eax, [edx + eax*4 + 0x15c]
call fcn.00403274
inc ebx
cmp bl, 0x15
jne 0x507fd9
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.00403274
call fcn.0053c3b8
test eax, eax
je 0x508263
call fcn.0053c3b8
mov ebx, eax
cmp dword [ebx + 0x990], 0xfffffffe
jne 0x50802f
mov eax, dword [ebx + 0x9a4]
call fcn.0054ac9c
dec eax
jg 0x508049
cmp dword [ebx + 0x990], 0
jl 0x508263
cmp dword [ebx + 0x9a0], 2
jle 0x508263
mov eax, ebx
call fcn.005feec0
test al, al
jne 0x508263
cmp dword [ebx + 0x990], 0
jl 0x5080aa
push 0x5086a8
lea eax, [ebp - 0xa0]
mov edx, dword [ebx + 0x9a0]
and edx, 0x80000003
jns 0x50807f
dec edx
or edx, 0xfffffffc
inc edx
mov edx, dword [edx*4 + 0x66c244]
call fcn.00403438
push dword [ebp - 0xa0]
push 0x5086b8
push 0x5086b8
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004035dc
jmp 0x5080b2
lea eax, [ebp - 0x14]
call fcn.00403274
mov eax, dword [ebx + 0x9a4]
call fcn.0054ac9c
mov edi, eax
cmp edi, 1
jg 0x50810f
cmp dword [ebx + 0x81c], 0
jne 0x5080d9
mov eax, dword [0x67288c]
mov eax, dword [eax]
mov dword [ebp - 8], eax
jmp 0x5080e3
mov eax, dword [0x6733ec]
mov eax, dword [eax]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xa0]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
call fcn.0065918c
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.004032c8
jmp 0x5081fb
cmp dword [ebx + 0x81c], 0
jne 0x508132
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
mov edx, dword [0x671b98]
mov edx, dword [edx]
call fcn.00403438
jmp 0x50814a
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
mov edx, dword [0x6726dc]
mov edx, dword [edx]
call fcn.00403438
cmp dword [ebx + 0x990], 0xfffffffe
jne 0x508172
lea ecx, [ebp - 0x18]
mov eax, 0x5086bc
mov edx, 1
call fcn.006592b4
lea eax, [ebp - 0x1c]
mov edx, 0x5086cc
call fcn.0040330c
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 0xbc], 0xb
lea edx, [ebp - 0xe0]
mov eax, edi
call fcn.0061d178
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0xb
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0xb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0xb
lea edx, [ebp - 0xc0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x1c8]
mov ecx, 3
call fcn.00659050
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.004032c8
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0xd8], 2
mov byte [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 3
mov byte [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 4
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xd8]
mov eax, 0x5086d0
mov ecx, 2
call fcn.00659050
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
add eax, 0x1c8
call fcn.00403524
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp dword [eax + 0x1c8], 0
jne 0x508296
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
test eax, eax
je 0x5085f2
cmp byte [eax + 0x3a], 0
je 0x5085f2
call fcn.00643568
jmp 0x5085f2
mov eax, dword [esi]
cmp dword [eax + 0x144], 0
jne 0x50833f
mov edx, dword [0x4ff094]
mov eax, dword [esi]
call fcn.00644bb8
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x144], ebx
mov byte [ebx + 0x114], 1
mov eax, ebx
call fcn.00643568
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
mov edx, dword [0x617388]
call fcn.00644bb8
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x148], ebx
mov dword [ebx + 0x180], 1
mov byte [ebx + 0x171], 0
mov dword [ebx + 0x15c], 0xc0ffff
mov eax, dword [esi]
mov dword [ebx + 0x188], eax
mov dword [ebx + 0x184], 0x500b10
mov byte [ebx + 0x176], 1
mov eax, dword [esi]
mov dword [ebx + 0x1a0], eax
mov dword [ebx + 0x19c], 0x500bd4
mov eax, dword [esi]
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1a4], 0x500ca0
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
mov byte [eax + 0x175], 1
lea edx, [ebp - 0xdc]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x1c8]
call fcn.0065829c
mov edx, dword [ebp - 0xdc]
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
add eax, 0x144
call fcn.004038bc
mov eax, 0x80
call fcn.0064f39c
mov dword [ebp - 0x40], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
xor ecx, ecx
mov edx, dword [ebp - 0x40]
call fcn.006190d8
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
mov eax, dword [eax + 0x150]
cmp dword [eax + 0x18], 1
je 0x5083be
mov eax, dword [0x672608]
mov eax, dword [eax]
add eax, eax
add dword [ebp - 0x40], eax
jmp 0x50838a
mov eax, dword [0x672608]
mov eax, dword [eax]
add dword [ebp - 0x40], eax
mov eax, dword [esi]
cmp dword [eax + 0x28], 0
setg al
and eax, 0x7f
mov edx, dword [0x6722a0]
imul dword [edx]
mov dword [ebp - 0x44], eax
mov eax, dword [esi]
call fcn.00642cdc
mov ebx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
call fcn.00642e8c
cmp ebx, eax
setl al
and eax, 0x7f
mov edx, dword [0x6722a0]
imul dword [edx]
mov edx, dword [esi]
mov edi, dword [edx + 0x30]
sub edi, eax
mov eax, dword [esi]
call fcn.004ffb54
xor ebx, ebx
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x672cb4]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x508432
and edx, 0x7f
bt eax, edx
jae 0x508452
lea ecx, [ebp - 0x6c]
mov edx, ebx
mov eax, dword [esi]
call fcn.00502014
cmp bl, 0xe
jae 0x50844d
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x44], eax
jmp 0x508452
mov edi, dword [ebp - 0x6c]
jmp 0x508458
inc ebx
cmp bl, 0x15
jne 0x508412
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x508556
mov bl, 0x14
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x672cb4]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x508488
and edx, 0x7f
bt eax, edx
jae 0x5084a6
lea ecx, [ebp - 0x7c]
mov edx, ebx
mov eax, dword [esi]
call fcn.00502014
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x44], eax
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x5084ac
dec ebx
cmp bl, 0xff
jne 0x508468
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x508505
mov bl, 0xe
mov eax, dword [esi]
mov eax, dword [eax + 0x140]
mov edx, dword [0x672cb4]
not eax
and eax, dword [edx + 0x16]
mov edx, ebx
cmp dl, 0x1f
ja 0x5084d8
and edx, 0x7f
bt eax, edx
jae 0x5084ff
lea ecx, [ebp - 0x8c]
mov edx, ebx
mov eax, dword [esi]
call fcn.00502014
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jl 0x5084ff
mov edi, dword [ebp - 0x8c]
jmp 0x508505
inc ebx
cmp bl, 0x15
jne 0x5084b8
mov eax, edi
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x508550
mov eax, dword [esi]
cmp dword [eax + 0x28], 0
setg al
and eax, 0x7f
mov edx, dword [0x6722a0]
imul dword [edx]
mov dword [ebp - 0x44], eax
mov eax, dword [esi]
call fcn.00642cdc
mov ebx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
call fcn.00642e8c
cmp ebx, eax
setl al
and eax, 0x7f
mov edx, dword [0x6722a0]
imul dword [edx]
mov edx, dword [esi]
mov edi, dword [edx + 0x30]
sub edi, eax
sub edi, dword [ebp - 0x44]
mov dword [ebp - 0x40], edi
mov eax, dword [0x672608]
mov edx, dword [ebp - 0x40]
sub edx, dword [eax]
push edx
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
mov edx, dword [0x672608]
sub eax, dword [edx]
push eax
mov ecx, dword [0x6722a0]
mov ecx, dword [ecx]
mov edx, dword [0x6722a0]
mov edx, dword [edx]
mov eax, dword [esi]
mov eax, dword [eax + 0x148]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [esi]
mov ebx, dword [eax + 0x148]
mov eax, ebx
call fcn.00618ff8
mov edx, dword [ebx + 0x34]
sub edx, eax
sar edx, 1
jns 0x5085a7
adc edx, 0
mov eax, dword [esi]
mov edi, dword [eax + 0x148]
mov dword [edi + 0x148], edx
mov byte [edi + 0x175], 0
mov eax, dword [ebp - 0x40]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
xor ecx, ecx
mov edx, dword [ebp - 0x44]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
mov edx, dword [eax]
call dword [edx + 0x34]
mov eax, dword [esi]
mov eax, dword [eax + 0x144]
call fcn.00643570
mov eax, dword [esi]
mov edx, dword [eax]
call dword [edx + 0x34]
mov dl, byte [ebp - 0x45]
mov eax, dword [esi]
call fcn.006430a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x508646
lea eax, [ebp - 0xe0]
call fcn.00403274
lea eax, [ebp - 0xdc]
call fcn.00403880
lea eax, [ebp - 0xa0]
call fcn.00403274
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00403298
ret