Function at 0x46baf0
Capabilities:
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x5cc8c6
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push ebp
push esi
push edi
mov eax, dword [0x680f10]
xor eax, esp
push eax
lea eax, [esp + 0xa4]
mov dword fs:[0], eax
mov dword [esp + 0x58], ecx
lea ebp, [ecx + 0x14]
push 1
mov ecx, ebp
call fcn.004b61f0
push 0x5efdd0
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 0
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
or edi, 0xffffffff
mov ebx, 0x10
cmp dword [esp + 0x50], ebx
mov esi, 0x5f1558
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], esi
jb 0x46bb86
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5efdd8
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 1
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], esi
jb 0x46bbd2
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efde0
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 2
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], esi
jb 0x46bc1e
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
push 0x5efde8
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 3
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], esi
jb 0x46bc6a
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5efdf0
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 4
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], esi
jb 0x46bcb6
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efdf8
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 5
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], esi
jb 0x46bd02
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
push 0x5efdfc
lea ecx, [esp + 0x68]
call fcn.0048cd50
lea eax, [esp + 0x64]
push eax
mov ecx, ebp
mov dword [esp + 0xb0], 6
call fcn.004b7af0
cmp dword [esp + 0x80], ebx
mov esi, eax
mov dword [esp + 0xac], edi
mov dword [esp + 0x64], 0x5f1558
jb 0x46bd4e
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.004274fc
add esp, 4
test esi, esi
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], 0
mov byte [esp + 0x6c], 0
mov dword [esp + 0x64], 0x5f13d0
je 0x46bfaf
push 1
mov ecx, esi
call fcn.004b61f0
push 0x5efe04
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 7
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46bdcf
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push str.Author
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 8
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46be1f
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
push str.Subject
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 9
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46be6f
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push str.Keywords
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0xa
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46bebf
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push str.Creator
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0xb
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46bf0f
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
push str.Producer
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0xc
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46bf5f
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push str.CreationDate
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0xd
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46bfaf
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efe4c
lea ecx, [esp + 0x68]
call fcn.0048cd50
lea ecx, [esp + 0x64]
push ecx
mov ecx, ebp
mov dword [esp + 0xb0], 0xe
call fcn.004b7af0
cmp dword [esp + 0x80], ebx
mov esi, eax
mov dword [esp + 0xac], edi
mov dword [esp + 0x64], 0x5f1558
jb 0x46bffb
mov edx, dword [esp + 0x6c]
push edx
call fcn.004274fc
add esp, 4
test esi, esi
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], 0
mov byte [esp + 0x6c], 0
mov dword [esp + 0x64], 0x5f13d0
je 0x46cb50
push 1
mov ecx, esi
call fcn.004b61f0
push 0x5efe54
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0xf
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov ebp, 0x5f1558
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c07d
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5efe5c
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], ebx
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c0c5
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efe64
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x11
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c111
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
push 0x5efe70
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x12
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c15d
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push str.PageLayout
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x13
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c1a9
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efe90
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x14
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c1f5
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
push 0x5efe9c
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x15
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c241
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5efea8
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x16
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x50], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], ebp
jb 0x46c28d
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efeb4
lea ecx, [esp + 0x38]
call fcn.0048cd50
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov dword [esp + 0xb0], 0x17
call fcn.004b7af0
cmp dword [esp + 0x50], ebx
mov ebp, eax
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46c2d6
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
test ebp, ebp
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], 0
mov byte [esp + 0x3c], 0
mov dword [esp + 0x34], 0x5f13d0
je 0x46c3f4
push 1
mov ecx, ebp
call fcn.004b61f0
push 0x5efebc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 0x18
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46c354
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5efec4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 0x19
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46c3a4
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efecc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 0x1a
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46c3f4
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5efed4
lea ecx, [esp + 0x18]
call fcn.0048cd50
lea eax, [esp + 0x14]
push eax
mov ecx, esi
mov dword [esp + 0xb0], 0x1b
call fcn.004b7af0
lea ecx, [esp + 0x14]
mov ebp, eax
mov dword [esp + 0xac], edi
call fcn.004b36e0
test ebp, ebp
je 0x46c62c
push 1
mov ecx, ebp
call fcn.004b61f0
push str.HideToolbar
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 0x1c
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.HideMenubar
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 0x1d
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.HideWindowUI
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 0x1e
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.FitWindow
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 0x1f
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.CenterWindow
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 0x20
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.DisplayDocTitle
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 0x21
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.NonFullScreenPageMode
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 0x22
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push str.Direction
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 0x23
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5eff60
lea ecx, [esp + 0x18]
call fcn.0048cd50
lea eax, [esp + 0x14]
push eax
mov ecx, esi
mov dword [esp + 0xb0], 0x24
call fcn.004b7af0
lea ecx, [esp + 0x14]
mov esi, eax
mov dword [esp + 0xac], edi
call fcn.004b36e0
test esi, esi
je 0x46c7aa
push 1
mov ecx, esi
call fcn.004b61f0
push 0x5eff6c
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x25
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5eff74
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x26
call fcn.004b7a00
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5eff84
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x27
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5eff88
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x28
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5eff8c
lea ecx, [esp + 0x38]
call fcn.0048cd50
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x29
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], edi
call fcn.004b36e0
mov eax, dword [esp + 0x58]
cmp dword [eax + 0x1ec], 0
mov dword [esp + 0x54], 0
jbe 0x46cb50
mov ebp, 0x5f1558
jmp 0x46c7d0
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x5c]
call fcn.00466450
mov esi, eax
test esi, esi
je 0x46cb35
push 1
mov ecx, esi
call fcn.004b61f0
push 0x5eff90
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x2a
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46c83d
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5eff94
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x2b
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46c889
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5eff9c
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x2c
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46c8d5
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5effa4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x2d
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46c921
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5effa8
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x2e
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46c96d
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5effac
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x2f
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46c9b9
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5effb0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x30
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46ca05
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5effb4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x31
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46ca51
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5effb8
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x32
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46ca9d
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5effbc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x33
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cae9
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5effc0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x34
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cb35
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
add eax, 1
cmp eax, dword [ecx + 0x1ec]
mov dword [esp + 0x54], eax
jb 0x46c7d0
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x54], 0
call fcn.00465810
test eax, eax
jbe 0x46d809
lea esp, [esp]
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
push edx
call fcn.004657c0
mov esi, eax
test esi, esi
je 0x46d7ed
push 1
mov ecx, esi
call fcn.004b61f0
push 0x5effc4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x35
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov ebp, 0x5f1558
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cbe2
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5effcc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x36
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cc2e
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5effd4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x37
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cc7a
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5effe0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x38
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46ccc6
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5effec
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x39
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cd12
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5efff4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x3a
call fcn.004b7b20
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cd5e
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5f0000
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x3b
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cdaa
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5f000c
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x3c
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46cdf6
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5f0014
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x3d
call fcn.004b7b20
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46ce42
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5f001c
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x3e
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], ebp
jb 0x46ce8e
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5f0024
lea ecx, [esp + 0x38]
call fcn.0048cd50
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov dword [esp + 0xb0], 0x3f
call fcn.004b7af0
cmp dword [esp + 0x50], ebx
mov ebp, eax
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46ced7
mov eax, dword [esp + 0x3c]
push eax
call fcn.004274fc
add esp, 4
test ebp, ebp
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], 0
mov byte [esp + 0x3c], 0
mov dword [esp + 0x34], 0x5f13d0
je 0x46d0e5
push 1
mov ecx, ebp
call fcn.004b61f0
push 0x5f0030
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 0x40
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46cf55
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5f003c
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 0x41
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46cfa5
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5f0048
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 0x42
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46cff5
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5f0050
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, ebp
mov dword [esp + 0xb4], 0x43
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46d045
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5f0058
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, ebp
mov dword [esp + 0xb4], 0x44
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46d095
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5f0060
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, ebp
mov dword [esp + 0xb4], 0x45
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46d0e5
mov eax, dword [esp + 0x1c]
push eax
call fcn.004274fc
add esp, 4
push 0x5f0068
lea ecx, [esp + 0x38]
call fcn.0048cd50
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov dword [esp + 0xb0], 0x46
call fcn.004b7ac0
cmp dword [esp + 0x50], ebx
mov ebp, eax
mov dword [esp + 0x60], ebp
mov dword [esp + 0xac], edi
mov dword [esp + 0x34], 0x5f1558
jb 0x46d132
mov edx, dword [esp + 0x3c]
push edx
call fcn.004274fc
add esp, 4
xor esi, esi
cmp ebp, esi
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], esi
mov byte [esp + 0x3c], 0
mov dword [esp + 0x34], 0x5f13d0
je 0x46d7ed
mov ecx, ebp
mov dword [esp + 0x5c], esi
call fcn.004b5810
test eax, eax
jbe 0x46d7ed
push esi
mov ecx, ebp
call fcn.004b5830
mov esi, eax
test esi, esi
je 0x46d7cf
mov eax, dword [esi]
mov edx, dword [eax]
mov ecx, esi
call edx
cmp eax, 5
mov ecx, esi
je 0x46d195
push 1
call fcn.004b5970
jmp 0x46d7cf
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
call edx
cmp eax, 2
jne 0x46d1cd
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
mov ecx, esi
call edx
mov ebp, eax
cmp ebp, 8
jg 0x46d1c1
je 0x46d1db
test ebp, ebp
jle 0x46d1cd
cmp ebp, 2
jle 0x46d1db
cmp ebp, 4
jmp 0x46d1cb
cmp ebp, ebx
je 0x46d1db
cmp ebp, 0x200000
je 0x46d1db
push 1
mov ecx, esi
call fcn.004b5970
jmp 0x46d7cf
push 1
mov ecx, esi
call fcn.004b61f0
push 0x5f0070
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x47
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46d234
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5f0078
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x48
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f0080
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x49
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f008c
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x4a
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f0090
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x4b
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f0094
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x4c
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f0098
lea ecx, [esp + 0x18]
call fcn.0048cd50
mov dword [esp + 0xac], 0x4d
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f009c
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x4e
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00a0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x4f
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00a8
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x50
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00ac
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x51
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00b0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x52
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
cmp ebp, 8
jne 0x46d7cf
push 0x5f00b8
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x53
call fcn.004b7a60
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00bc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x54
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00c4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x55
call fcn.004b7ac0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00cc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x56
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00d0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x57
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00d4
lea ecx, [esp + 0x18]
call fcn.0048cd50
mov dword [esp + 0xac], 0x58
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00d8
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x59
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00dc
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x5a
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00e0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x5b
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00e4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0xb4], 0x5c
call fcn.004b7af0
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00e8
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov dword [esp + 0xb4], 0x5d
call fcn.004b7a90
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
push 0x5f00ec
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 0
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0xb4], 0x5e
call fcn.004b7a30
mov ecx, eax
call fcn.004b5970
lea ecx, [esp + 0x14]
mov dword [esp + 0xac], edi
call fcn.004b36e0
mov esi, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
add esi, 1
mov ecx, ebp
mov dword [esp + 0x5c], esi
call fcn.004b5810
cmp esi, eax
jb 0x46d168
mov esi, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
add esi, 1
mov dword [esp + 0x54], esi
call fcn.00465810
cmp esi, eax
jb 0x46cb70
mov eax, dword [esp + 0x58]
mov ebp, dword [eax + 0x1f4]
add eax, 0x1f0
cmp ebp, dword [eax + 8]
mov dword [esp + 0x5c], eax
jbe 0x46d826
call fcn.0044b7ad
mov esi, dword [esp + 0x5c]
lea ebx, [ebx]
mov eax, dword [esi + 8]
cmp dword [esi + 4], eax
mov dword [esp + 0x60], eax
jbe 0x46d841
call fcn.0044b7ad
cmp esi, esi
je 0x46d84a
call fcn.0044b7ad
cmp ebp, dword [esp + 0x60]
je 0x46da03
cmp ebp, dword [esi + 8]
jb 0x46d85e
call fcn.0044b7ad
mov ecx, dword [ebp]
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
cmp eax, 6
jne 0x46d9c4
cmp ebp, dword [esi + 8]
jb 0x46d87a
call fcn.0044b7ad
mov esi, dword [ebp]
push 0x5f00f0
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 1
lea ecx, [esp + 0x18]
push ecx
push 0
mov ecx, esi
mov dword [esp + 0xb8], 0x5f
call fcn.004b53e0
mov ecx, eax
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46d8d6
mov edx, dword [esp + 0x1c]
push edx
call fcn.004274fc
add esp, 4
push 0x5f00f4
lea ecx, [esp + 0x18]
call fcn.0048cd50
push 1
lea eax, [esp + 0x18]
push eax
push 0
mov ecx, esi
mov dword [esp + 0xb8], 0x60
call fcn.004b53e0
mov ecx, eax
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0x30], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x14], 0x5f1558
jb 0x46d92f
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004274fc
add esp, 4
push 0x5f00fc
lea ecx, [esp + 0x88]
call fcn.0048cd50
push 1
lea edx, [esp + 0x88]
push edx
push 0
mov ecx, esi
mov dword [esp + 0xb8], 0x61
call fcn.004b53e0
mov ecx, eax
call fcn.004b7950
mov ecx, eax
call fcn.004b5970
cmp dword [esp + 0xa0], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0x84], 0x5f1558
jb 0x46d997
mov eax, dword [esp + 0x8c]
push eax
call fcn.004274fc
add esp, 4
mov esi, dword [esp + 0x5c]
mov dword [esp + 0xa0], 0xf
mov dword [esp + 0x9c], 0
mov byte [esp + 0x8c], 0
mov dword [esp + 0x84], 0x5f13d0
cmp ebp, dword [esi + 8]
jb 0x46d9ce
call fcn.0044b7ad
mov ecx, dword [ebp]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
cmp eax, 1
je 0x46d9f1
cmp ebp, dword [esi + 8]
jb 0x46d9e7
call fcn.0044b7ad
mov ecx, dword [ebp]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
call eax
cmp ebp, dword [esi + 8]
jb 0x46d9fb
call fcn.0044b7ad
add ebp, 4
jmp 0x46d830
mov ecx, dword [esp + 0xa4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x9c
ret