Function at 0x4f32c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6c4e70]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x130]
cmp eax, dword [ecx + 8]
jbe 0x4f4ac6
sub esp, 0x1b0
mov ebx, dword [esp + 0x1b8]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
ja 0x4f3afb
xchg ebp, eax
cmp al, 4
xchg ebp, eax
ja 0x4f3622
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jbe 0x4f34bf
xchg ebp, eax
cmp al, 3
xchg ebp, eax
jne 0x4f345e
mov ebp, dword [ebx + 0x18]
test ebp, ebp
je 0x4f3341
mov dword [esp + 0x84], ebp
mov esi, dword [esp + 0x1b4]
xor eax, eax
xor ecx, ecx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0x58], eax
xor eax, eax
jmp 0x4f4952
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x180]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x180], 6
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
inc ebp
mov eax, dword [ecx]
cmp ebx, ebp
jae 0x4f33e5
mov dword [esp + 0xa4], ecx
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f33d6
call fcn.00460f00
mov dword [edi], ecx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], ecx
mov ebp, edx
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x84]
mov dword [ecx + 4], ebp
mov ecx, dword [0x6c4f80]
lea ebx, [ebp + ebp*2]
lea edi, [eax + ebx*8 - 0x18]
test ecx, ecx
je 0x4f342c
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x180]
mov dword [esp + 8], eax
call fcn.00410740
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x180]
call fcn.004615c4
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
mov ebp, dword [esp + 0x1b4]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], bx
call fcn.004f5140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], bl
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 1
xchg ebp, eax
je 0x4f35f2
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x4f4672
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x198]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x198], 6
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
inc ebp
mov eax, dword [ecx]
cmp ebx, ebp
jae 0x4f3579
mov dword [esp + 0xa4], ecx
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f356a
call fcn.00460f00
mov dword [edi], ecx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], ecx
mov ebp, edx
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x84]
mov dword [ecx + 4], ebp
mov ecx, dword [0x6c4f80]
lea ebx, [ebp + ebp*2]
lea edi, [eax + ebx*8 - 0x18]
test ecx, ecx
je 0x4f35c0
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x198]
mov dword [esp + 8], eax
call fcn.00410740
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x198]
call fcn.004615c4
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
mov byte [esp + 0x1c8], 0
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 6
xchg ebp, eax
ja 0x4f3704
xchg ebp, eax
cmp al, 5
xchg ebp, eax
jne 0x4f369c
mov eax, dword [0x69acb0]
mov ecx, dword [0x69acb4]
mov edx, dword [0x69acb8]
mov ebx, dword [esp + 0x1b4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.004f5140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], bl
add esp, 0x1b0
ret
mov eax, dword [0x69acc0]
mov ecx, dword [0x69acc4]
mov edx, dword [0x69acc8]
mov ebx, dword [esp + 0x1b4]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov word [esp + 0x10], 0
call fcn.004f5140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], bl
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 7
xchg ebp, eax
jne 0x4f385a
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x168]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x168], 3
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, dword [ebx + 4]
inc eax
mov esi, dword [ebx]
cmp ebp, eax
jae 0x4f37b8
mov dword [esp + 0xa4], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f37a4
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, edx
mov esi, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov dword [ebx + 4], eax
mov ebx, dword [0x6c4f80]
lea ebp, [eax + eax*2]
lea edi, [esi + ebp*8 - 0x18]
test ebx, ebx
je 0x4f3805
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x168]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x168]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp edx, ebx
jae 0x4f4915
mov eax, dword [ecx]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8 + 8]
mov dword [eax], 1
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 8
xchg ebp, eax
jne 0x4f39b0
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x150]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x150], 3
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, dword [ebx + 4]
inc eax
mov esi, dword [ebx]
cmp ebp, eax
jae 0x4f390e
mov dword [esp + 0xa4], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f38fa
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, edx
mov esi, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov dword [ebx + 4], eax
mov ebx, dword [0x6c4f80]
lea ebp, [eax + eax*2]
lea edi, [esi + ebp*8 - 0x18]
test ebx, ebx
je 0x4f395b
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x150]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x150]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp edx, ebx
jae 0x4f490c
mov eax, dword [ecx]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8 + 8]
mov dword [eax], 2
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x138]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x138], 3
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, dword [ebx + 4]
inc eax
mov esi, dword [ebx]
cmp ebp, eax
jae 0x4f3a59
mov dword [esp + 0xa4], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f3a45
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, edx
mov esi, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov dword [ebx + 4], eax
mov ebx, dword [0x6c4f80]
lea ebp, [eax + eax*2]
lea edi, [esi + ebp*8 - 0x18]
test ebx, ebx
je 0x4f3aa6
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x138]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x138]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp edx, ebx
jae 0x4f4903
mov eax, dword [ecx]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8 + 8]
mov dword [eax], 4
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
ja 0x4f41fc
xchg ebp, eax
cmp al, 0xb
xchg ebp, eax
jbe 0x4f3f5b
xchg ebp, eax
cmp al, 0xc
xchg ebp, eax
je 0x4f3e10
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
mov ebp, dword [ebx + 0x30]
mov dword [esp + 0x84], ebp
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x80], edx
lea edi, [esp + 0xd8]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0xd8], 2
mov ecx, dword [esp + 0x1b4]
mov esi, dword [ecx]
mov edi, dword [esi + 8]
mov eax, dword [esi + 4]
inc eax
mov ebx, dword [esi]
cmp edi, eax
jae 0x4f3bd8
mov dword [esp + 0xa4], esi
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f3bbb
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov ebp, dword [esp + 0x84]
mov esi, ebx
mov eax, edx
mov ebx, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x80]
mov dword [esi + 4], eax
mov esi, dword [0x6c4f80]
lea eax, [eax + eax*2]
lea edi, [ebx + eax*8 - 0x18]
test esi, esi
je 0x4f3c2c
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea ecx, [esp + 0xd8]
mov dword [esp + 8], ecx
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0xd8]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov eax, dword [ebx + 4]
cmp edx, eax
jae 0x4f48fa
shl ebp, 1
mov ebx, dword [ebx]
lea esi, [edx + edx*2]
lea ebx, [ebx + esi*8 + 8]
mov dword [ebx], ebp
mov ebx, dword [ecx]
inc ebp
cmp dword [ebx + 0x10], ebp
jge 0x4f3c64
mov dword [ebx + 0x10], ebp
mov ebx, dword [esp + 0x1b8]
mov ebp, dword [ebx + 8]
test ebp, ebp
jbe 0x4f48f1
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004f32c0
mov eax, dword [esp + 0x1b4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1b8]
mov edx, dword [edx + 0x30]
mov dword [esp + 0x84], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x7c], ebx
nop
mov ebp, dword [esp + 8]
mov dword [esp + 0x78], ebp
movzx esi, byte [esp + 0x14]
xchg esi, eax
mov byte [esp + 0x38], al
xchg esi, eax
mov ecx, dword [ecx + 4]
mov dword [esp + 0x74], ecx
lea edi, [esp + 0xc0]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0xc0], 2
mov eax, dword [esp + 0x1b4]
mov ecx, dword [eax]
mov edi, dword [ecx + 8]
mov ebx, dword [ecx + 4]
inc ebx
mov esi, dword [ecx]
cmp edi, ebx
jae 0x4f3d5f
mov dword [esp + 0xa4], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f3d45
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, dword [esp + 0x1b4]
mov ebp, dword [esp + 0x78]
mov esi, ecx
mov ecx, ebx
mov ebx, edx
mov edx, dword [esp + 0x84]
mov dword [ecx + 4], ebx
mov ecx, dword [0x6c4f80]
lea ebx, [ebx + ebx*2]
lea edi, [esi + ebx*8 - 0x18]
test ecx, ecx
je 0x4f3db0
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.00410740
mov eax, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x78]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0xc0]
call fcn.004615c4
mov ecx, dword [eax]
mov ebx, dword [ecx + 4]
mov esi, ebp
mov ebp, dword [esp + 0x74]
cmp ebp, ebx
jae 0x4f48e8
shl edx, 1
or edx, 1
mov ebx, dword [ecx]
lea edi, [ebp + ebp*2]
lea ebx, [ebx + edi*8 + 8]
mov dword [ebx], edx
mov ebx, dword [eax]
inc edx
cmp dword [ebx + 0x10], edx
jge 0x4f3deb
mov dword [ebx + 0x10], edx
mov edx, dword [esp + 0x80]
test edx, edx
je 0x4f3dfa
test esi, esi
jne 0x4f3e05
xor ebx, ebx
xor ecx, ecx
xor edx, edx
jmp 0x4f485e
mov ebx, edx
shl edx, 1
mov edi, dword [eax]
jmp 0x4f481b
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0xf0], 3
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, dword [ebx + 4]
inc eax
mov esi, dword [ebx]
cmp ebp, eax
jae 0x4f3eb9
mov dword [esp + 0xa4], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f3ea5
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, edx
mov esi, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov dword [ebx + 4], eax
mov ebx, dword [0x6c4f80]
lea ebp, [eax + eax*2]
lea edi, [esi + ebp*8 - 0x18]
test ebx, ebx
je 0x4f3f06
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf0]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0xf0]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp edx, ebx
jae 0x4f480c
mov eax, dword [ecx]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8 + 8]
mov dword [eax], 0x20
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
jne 0x4f40b1
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x120]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x120], 3
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, dword [ebx + 4]
inc eax
mov esi, dword [ebx]
cmp ebp, eax
jae 0x4f400f
mov dword [esp + 0xa4], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f3ffb
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, edx
mov esi, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov dword [ebx + 4], eax
mov ebx, dword [0x6c4f80]
lea ebp, [eax + eax*2]
lea edi, [esi + ebp*8 - 0x18]
test ebx, ebx
je 0x4f405c
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x120]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x120]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp edx, ebx
jae 0x4f4803
mov eax, dword [ecx]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8 + 8]
mov dword [eax], 8
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0x108]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0x108], 3
mov ecx, dword [esp + 0x1b4]
mov ebx, dword [ecx]
mov ebp, dword [ebx + 8]
mov eax, dword [ebx + 4]
inc eax
mov esi, dword [ebx]
cmp ebp, eax
jae 0x4f415a
mov dword [esp + 0xa4], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f4146
call fcn.00460f00
mov dword [edi], ecx
mov ebp, dword [ebx]
mov dword [edi + 4], ebp
mov dword [ebx], ecx
mov eax, edx
mov esi, ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov dword [ebx + 4], eax
mov ebx, dword [0x6c4f80]
lea ebp, [eax + eax*2]
lea edi, [esi + ebp*8 - 0x18]
test ebx, ebx
je 0x4f41a7
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x108]
mov dword [esp + 8], eax
call fcn.00410740
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0x108]
call fcn.004615c4
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 4]
cmp edx, ebx
jae 0x4f47fa
mov eax, dword [ecx]
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8 + 8]
mov dword [eax], 0x10
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 0xf
xchg ebp, eax
jbe 0x4f442d
xchg ebp, eax
cmp al, 0x10
xchg ebp, eax
je 0x4f438f
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x4f4361
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x4f4244
mov dword [esp + 0x84], ecx
mov eax, dword [ebx + 4]
mov dword [esp + 0x9c], eax
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4f46ae
mov ecx, dword [esp + 0x1b4]
mov edx, dword [ecx]
nop
mov edx, dword [edx + 4]
mov dword [esp + 0x84], edx
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.004610ea
mov byte [esp + 0xa8], 6
mov ecx, dword [esp + 0x1b4]
mov ecx, dword [ecx]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 4]
inc ebp
mov eax, dword [ecx]
cmp ebx, ebp
jae 0x4f42e8
mov dword [esp + 0xa4], ecx
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x5717e0]
mov dword [esp + 0x10], eax
call fcn.004495c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + 8], eax
mov eax, dword [0x6c4f80]
test eax, eax
je 0x4f42d9
call fcn.00460f00
mov dword [edi], ecx
mov eax, dword [ebx]
mov dword [edi + 4], eax
mov dword [ebx], ecx
mov ebp, edx
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x84]
mov dword [ecx + 4], ebp
mov ecx, dword [0x6c4f80]
lea ebx, [ebp + ebp*2]
lea edi, [eax + ebx*8 - 0x18]
test ecx, ecx
je 0x4f432f
mov dword [esp + 0xa0], edi
lea eax, [0x5717e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00410740
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0xa0]
lea esi, [esp + 0xa8]
call fcn.004615c4
mov dword [esp + 0x1bc], edx
shl edx, 1
mov dword [esp + 0x1c0], edx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], 1
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 0x13
xchg ebp, eax
jne 0x4f4672
mov eax, dword [ebx + 4]
mov dword [esp + 0x98], eax
mov ecx, dword [ebx + 8]
mov dword [esp + 0x84], ecx
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4f4645
mov edx, dword [ebx + 8]
test edx, edx
jbe 0x4f4591
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004f32c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1b8]
movzx ebp, word [ebp + 2]
mov esi, dword [esp + 0x1b4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], bl
test bp, 0x20
setne al
mov byte [esp + 0x14], al
call fcn.004f4ce0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x24]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], bl
add esp, 0x1b0
ret
xchg ebp, eax
cmp al, 0xe
xchg ebp, eax
jne 0x4f44d6
mov edx, dword [ebx + 8]
test edx, edx
jbe 0x4f4588
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004f32c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1b8]
movzx ebp, word [ebp + 2]
mov esi, dword [esp + 0x1b4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], bl
test bp, 0x20
setne al
mov byte [esp + 0x14], al
call fcn.004f5030
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x24]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov dword [esp + 0x1c4], edx
mov byte [esp + 0x1c8], bl
add esp, 0x1b0
ret
mov edx, dword [ebx + 8]
test edx, edx
jbe 0x4f457f
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004f32c0
mov eax, dword [esp + 0x1b8]
movzx eax, word [eax + 2]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
movzx ebp, byte [esp + 0x14]
xchg ebp, eax
mov byte [esp + 0x37], al
xchg ebp, eax
mov esi, dword [esp + 0x1b4]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
xchg ebp, eax
mov byte [esp + 0x10], al
xchg ebp, eax
test ax, 0x20
setne al
mov byte [esp + 0x14], al
call fcn.004f4e90
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x1bc], edx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
movzx eax, byte [esp + 0x37]
mov byte [esp + 0x1c8], al
add esp, 0x1b0
ret
xor eax, eax
mov ecx, eax
call fcn.00460f60
xor eax, eax
mov ecx, eax
call fcn.00460f60
xor eax, eax
mov ecx, eax
call fcn.00460f60
mov dword [esp + 0x54], ebx
mov dword [esp + 0x5c], ebp
xchg edi, eax
mov byte [esp + 0x39], al
xchg edi, eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x80], edx
mov ecx, dword [eax + edx*4]
mov ebx, dword [esp + 0x1b4]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.004f32c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, dword [esp + 0x1b4]
mov dword [esp], ebp
mov esi, dword [esp + 0x68]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x5c]
mov dword [esp + 8], esi
mov esi, dword [esp + 0x54]
mov dword [esp + 0xc], esi
movzx esi, byte [esp + 0x39]
xchg esi, eax
mov byte [esp + 0x10], al
xchg esi, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov byte [esp + 0x20], bl
call fcn.004f4ad0
mov eax, dword [esp + 0x80]
lea edx, [eax + 1]
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
movzx edi, byte [esp + 0x30]
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x84]
cmp edx, ecx
jl 0x4f459a
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1c0], ebp
mov dword [esp + 0x1c4], ebx
xchg edi, eax
mov byte [esp + 0x1c8], al
xchg edi, eax
add esp, 0x1b0
ret
lea eax, [0x560820]
mov dword [esp], eax
lea eax, [0x5c0370]
mov dword [esp + 4], eax
call fcn.00435490
mov ebp, dword [esp + 0x44]
inc ebp
mov esi, eax
mov edi, ecx
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x84]
mov eax, edx
mov edx, ebp
mov ebp, eax
mov eax, dword [esp + 0x9c]
cmp edx, ecx
jge 0x4f477b
mov dword [esp + 0x44], edx
mov edi, dword [eax + edx*4]
test edx, edx
jne 0x4f46f1
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004f32c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0x14]
mov ebp, eax
mov eax, ecx
mov ecx, edx
mov edx, ebx
mov ebx, ebp
jmp 0x4f468a
xchg ebp, eax
mov byte [esp + 0x3a], al
xchg ebp, eax
mov dword [esp + 0x60], esi
mov dword [esp + 0x6c], ebx
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004f32c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
movzx edx, byte [esp + 0x14]
mov ebx, dword [esp + 0x6c]
test ebx, ebx
je 0x4f472f
mov ebp, dword [esp + 8]
test ebp, ebp
jne 0x4f473c
xor ecx, ecx
xor ebx, ebx
xor eax, eax
xor edx, edx
jmp 0x4f468a
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], ecx
mov edi, dword [esp + 0x1b4]
mov esi, dword [edi]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x90]
jmp 0x4f47b7
movzx ebp, byte [esp + 0x3a]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4f468a
xor edx, edx
jmp 0x4f468a
mov dword [esp + 0x1bc], ebx
mov dword [esp + 0x1c0], esi
mov dword [esp + 0x1c4], edi
xchg ebp, eax
mov byte [esp + 0x1c8], al
xchg ebp, eax
add esp, 0x1b0
ret
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x1b4]
mov edi, dword [esp + 0x48]
test edi, edi
je 0x4f4765
mov eax, dword [esi + 4]
shr edi, 1
cmp eax, edi
jbe 0x4f47f1
mov eax, dword [esi]
lea edi, [edi + edi*2]
lea ecx, [eax + edi*8]
mov ebx, dword [esp + 0x48]
test ebx, 1
jne 0x4f47e6
lea ebx, [eax + edi*8 + 4]
mov edi, dword [ebx]
mov dword [ebx], ebp
jmp 0x4f47a0
lea ebx, [eax + edi*8 + 8]
mov edi, dword [ecx + 8]
mov dword [ebx], ebp
jmp 0x4f47a0
mov ecx, eax
mov eax, edi
call fcn.00460f70
mov eax, edx
mov ecx, ebx
call fcn.00460f70
mov eax, edx
mov ecx, ebx
call fcn.00460f70
mov eax, edx
mov ecx, ebx
call fcn.00460f70
mov edx, ebp
mov ebp, dword [esp + 0x74]
test edx, edx
je 0x4f4855
mov dword [esp + 0x4c], edx
mov ecx, dword [edi + 4]
shr edx, 1
cmp ecx, edx
jbe 0x4f48e1
mov ecx, dword [edi]
lea edx, [edx + edx*2]
mov ebp, dword [esp + 0x4c]
test ebp, 1
jne 0x4f484b
lea edx, [ecx + edx*8 + 4]
mov ebp, dword [edx]
mov dword [edx], esi
jmp 0x4f4815
lea edx, [ecx + edx*8 + 8]
mov ebp, dword [edx]
mov dword [edx], esi
jmp 0x4f4815
mov ecx, dword [esp + 0x7c]
movzx edx, byte [esp + 0x38]
test ebx, ebx
je 0x4f486e
test ebp, ebp
je 0x4f486e
mov byte [esp + 0x38], dl
mov esi, dword [eax]
jmp 0x4f489e
xor eax, eax
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], eax
mov byte [esp + 0x1c8], dl
add esp, 0x1b0
ret
movzx edx, byte [esp + 0x38]
mov ecx, edi
test ecx, ecx
je 0x4f48d2
mov edi, dword [esi + 4]
mov eax, ecx
shr eax, 1
cmp edi, eax
jbe 0x4f48da
mov edi, dword [esi]
lea eax, [eax + eax*2]
lea edx, [edi + eax*8]
test ecx, 1
jne 0x4f48c7
lea edx, [edi + eax*8 + 4]
mov edi, dword [edx]
mov dword [edx], ebp
jmp 0x4f4897
lea eax, [edi + eax*8 + 8]
mov edi, dword [edx + 8]
mov dword [eax], ebp
jmp 0x4f4897
shl ebp, 1
mov eax, ebp
mov ecx, ebx
jmp 0x4f4874
mov ecx, edi
call fcn.00460f70
mov eax, edx
call fcn.00460f70
mov eax, ebp
mov ecx, ebx
call fcn.00460f70
xor eax, eax
mov ecx, eax
call fcn.00460f60
mov ecx, eax
mov eax, edx
call fcn.00460f70
mov eax, edx
mov ecx, ebx
call fcn.00460f70
mov eax, edx
mov ecx, ebx
call fcn.00460f70
mov eax, edx
mov ecx, ebx
call fcn.00460f70
mov ebx, dword [esp + 0x1b8]
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x1b4]
mov eax, dword [esp + 0x80]
mov edi, esi
mov dword [esp + 0x58], edx
mov esi, dword [esp + 0x1b4]
mov edx, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x84]
cmp eax, ebp
jge 0x4f4a31
xchg edi, eax
mov byte [esp + 0x3b], al
xchg edi, eax
mov dword [esp + 0x64], edx
mov edi, dword [ebx + 0x1c]
lea edx, [eax + 1]
cmp edi, edx
jb 0x4f4abc
cmp eax, edx
ja 0x4f4ab5
mov dword [esp + 0x40], eax
mov dword [esp + 0x80], edx
mov dword [esp + 0x70], ecx
mov ecx, dword [ebx + 0x14]
sub edi, eax
mov edx, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and eax, edi
add eax, ecx
movzx ecx, word [ebx + 2]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov dword [esp + 0xc], edx
mov word [esp + 0x10], cx
call fcn.004f5140
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ebx, byte [esp + 0x20]
mov ebp, dword [esp + 0x40]
test ebp, ebp
jne 0x4f49e3
mov ebp, eax
mov esi, ebx
jmp 0x4f491e
mov ebp, dword [esp + 0x70]
test ebp, ebp
je 0x4f49ef
test eax, eax
jne 0x4f49fc
xor ecx, ecx
xor ebp, ebp
xor edx, edx
xor esi, esi
jmp 0x4f491e
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], edx
mov esi, dword [esp + 0x1b4]
mov edi, dword [esi]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x88]
jmp 0x4f4a71
movzx esi, byte [esp + 0x3b]
and esi, ebx
jmp 0x4f491e
mov dword [esp + 0x1bc], ecx
mov dword [esp + 0x1c0], edx
mov eax, dword [esp + 0x58]
mov dword [esp + 0x1c4], eax
xchg edi, eax
mov byte [esp + 0x1c8], al
xchg edi, eax
add esp, 0x1b0
ret
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x50], esi
mov esi, dword [esp + 0x1b4]
mov esi, dword [esp + 0x50]
test esi, esi
je 0x4f4a25
mov ecx, dword [edi + 4]
shr esi, 1
cmp ecx, esi
jbe 0x4f4aae
mov ecx, dword [edi]
lea esi, [esi + esi*2]
lea edx, [ecx + esi*8]
mov ebp, dword [esp + 0x50]
test ebp, 1
jne 0x4f4aa2
lea ebp, [ecx + esi*8 + 4]
mov esi, dword [ebp]
mov dword [ebp], eax
jmp 0x4f4a5a
lea ebp, [ecx + esi*8 + 8]
mov esi, dword [edx + 8]
mov dword [ebp], eax
jmp 0x4f4a5a
mov eax, esi
call fcn.00460f70
mov ecx, edx
call fcn.00460fc0
mov ecx, edx
mov edx, edi
call fcn.00460fa0
nop
call fcn.0045faf0
jmp fcn.004f32c0