Function at 0x4ad5c0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fcb90
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
mov al, byte [esi + 0x46]
mov ebx, ecx
test al, al
mov dword [ebp - 4], edi
je 0x4ad603
mov eax, dword [esi + 0x38]
mov ecx, dword [ebx + 0x3f0]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 8]
jmp 0x4ad61d
mov edx, dword [esi + 0x38]
mov eax, dword [ebx + 0x3f0]
push 0x2f
mov eax, dword [eax + edx*4]
mov ecx, dword [eax + 8]
push ecx
call fcn.005c2c70
add esp, 8
cmp eax, edi
je 0x4add4b
mov edx, dword [0x6c826c]
mov dword [ebp + 8], edx
mov cl, byte [esi + 0x46]
mov byte [ebp - 4], 1
test cl, cl
jne 0x4ad63a
inc eax
push eax
lea eax, [ebp + 8]
push 0x6a21bc
push eax
call fcn.005d809b
add esp, 0xc
lea ecx, [ebp + 8]
push 0x5c
push 0x2f
call fcn.005d7a81
push 0x2d
push 0x3a
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x2a
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x3f
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x7c
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x3c
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x3e
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x22
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x2d
push 0x25
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x2f
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x26
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x21
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x40
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x27
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x2c
lea ecx, [ebp + 8]
call fcn.005d7a81
push 0x5f
push 0x3b
lea ecx, [ebp + 8]
call fcn.005d7a81
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], edi
mov word [ebp - 0x1c], di
mov ecx, dword [ebp + 8]
push edi
mov byte [ebp - 4], 2
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x3c], edi
mov word [ebp - 0x40], di
push ecx
lea ecx, [ebp - 0x44]
call fcn.00402880
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 3
cmp eax, edi
jne 0x4ad73f
lea eax, [ebp - 0x40]
push eax
call fcn.005c2c42
mov esi, eax
mov eax, dword [ebx + 0x298]
add esp, 4
cmp eax, edi
jne 0x4ad75a
lea eax, [ebx + 0x29c]
push eax
call fcn.005c2c42
mov edx, dword [ebp - 0x44]
add esp, 4
cmp edx, edi
mov ecx, edx
jne 0x4ad76f
lea ecx, [ebp - 0x40]
cmp word [ecx + esi*2 - 2], 0x5c
mov dword [ebp - 0x14], 0x6cc7bc
je 0x4ad785
mov dword [ebp - 0x14], 0x69e054
mov ecx, dword [ebx + 0x298]
cmp ecx, edi
jne 0x4ad795
lea ecx, [ebx + 0x29c]
cmp word [ecx + eax*2 - 2], 0x5c
mov edi, 0x6cc7bc
je 0x4ad7a7
mov edi, 0x69e054
test edx, edx
mov esi, edx
jne 0x4ad7b0
lea esi, [ebp - 0x40]
mov eax, dword [ebx + 0x298]
test eax, eax
jne 0x4ad7c0
lea eax, [ebx + 0x29c]
mov edx, str._s_s_s_s
test edx, edx
je 0x4ad942
test eax, eax
je 0x4ad942
test edi, edi
je 0x4ad942
test esi, esi
je 0x4ad942
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x4ad942
push eax
lea ecx, [ebp - 0x38]
call fcn.0040d700
push edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 4
call fcn.0040d700
push esi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
call fcn.0040d700
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 6
call fcn.0040d700
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00401070
push str._s_s_s_s
lea ecx, [ebp - 0x50]
call fcn.00401ec0
mov edi, dword [ebp - 0x38]
mov byte [ebp - 4], 8
test edi, edi
jne 0x4ad84a
lea edi, [ebp - 0x34]
mov esi, dword [ebp - 0x48]
lea ecx, [ebp - 0x2c]
call fcn.00401f40
push eax
call fcn.005c2c42
add esp, 4
lea ecx, [ebp - 0x5c]
mov ebx, eax
call fcn.00401f40
push eax
call fcn.005c2c42
add esp, 4
lea ecx, [ebp - 0x68]
add ebx, eax
call fcn.00401f40
push eax
call fcn.005c2c42
mov dword [ebp - 0x14], ebx
mov ebx, eax
push edi
add ebx, esi
call fcn.005c2c42
mov ecx, dword [ebp - 0x14]
add ebx, ecx
lea esi, [eax + ebx + 5]
lea edi, [esi + esi]
push edi
call fcn.005db66d
mov edx, eax
add esp, 0xc
test edx, edx
mov dword [ebp - 0x20], edx
je 0x4ad906
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x5c]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x68]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x38]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x50]
call fcn.00401f40
push eax
mov eax, dword [ebp - 0x20]
push esi
push eax
call fcn.005c2bd2
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.005c2c42
add esp, 0x20
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 7
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
call fcn.00401070
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 4
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.00401070
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4ad94c
lea eax, [ebp - 0x1c]
push eax
call fcn.005c2c42
mov edi, eax
mov eax, dword [ebp + 0x14]
add esp, 4
test eax, eax
je 0x4ad96b
push eax
call fcn.005c2c42
add esp, 4
mov esi, eax
jmp 0x4ad96d
xor esi, esi
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4ad97f
push eax
call fcn.005c2c42
add esp, 4
jmp 0x4ad981
xor eax, eax
lea ebx, [eax + esi]
lea edx, [ebx + edi]
cmp edx, 0x104
jle 0x4ada96
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4ad9d8
mov esi, eax
push esi
call fcn.005c2c42
add esp, 4
cmp eax, 0x32
jbe 0x4ad9d8
mov eax, dword [ebp + 0x18]
mov word [esi + 0x60], 0
test eax, eax
je 0x4ad9c4
push eax
call fcn.005c2c42
add esp, 4
mov esi, eax
jmp 0x4ad9c6
xor esi, esi
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.005c2c42
mov ebx, eax
add esp, 4
add ebx, esi
jmp 0x4ad984
mov esi, dword [ebp + 0x18]
test esi, esi
je 0x4ada20
push esi
call fcn.005c2c42
add esp, 4
cmp eax, 0xa
jbe 0x4ada20
mov eax, dword [ebp + 0x14]
mov word [esi + 0x10], 0
test eax, eax
je 0x4ada09
mov edx, eax
push edx
call fcn.005c2c42
add esp, 4
mov esi, eax
jmp 0x4ada0b
xor esi, esi
mov eax, dword [ebp + 0x18]
push eax
call fcn.005c2c42
mov ebx, eax
add esp, 4
add ebx, esi
jmp 0x4ad984
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4ada2a
lea eax, [ebp - 0x1c]
push 0x5c
push eax
call fcn.005c2b92
xor esi, esi
add esp, 8
cmp eax, esi
je 0x4ada66
mov word [eax], si
mov eax, dword [ebp - 0x20]
cmp eax, esi
jne 0x4ada48
lea eax, [ebp - 0x1c]
push 0x5c
push eax
call fcn.005c2b92
add esp, 8
cmp eax, esi
je 0x4ada5d
mov word [eax + 2], si
jmp 0x4ada7c
mov eax, dword [ebp - 0x20]
cmp eax, esi
jne 0x4ada70
jmp 0x4ada6d
mov eax, dword [ebp - 0x20]
cmp eax, esi
jne 0x4ada70
lea eax, [ebp - 0x1c]
mov word [eax + edi*2 - 4], si
mov word [eax + edi*2 - 2], 0x5c
mov eax, dword [ebp - 0x20]
cmp eax, esi
jne 0x4ada86
lea eax, [ebp - 0x1c]
push eax
call fcn.005c2c42
add esp, 4
mov edi, eax
jmp 0x4ad984
mov eax, dword [0x6cce44]
test eax, eax
je 0x4adab5
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4adaa9
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4adad2
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4adabf
lea eax, [ebp - 0x1c]
push 1
push eax
call fcn.00487560
add esp, 8
test eax, eax
jne 0x4add8b
mov eax, dword [ebp - 0x20]
xor edi, edi
cmp eax, edi
jne 0x4adade
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], edi
mov word [ebp - 0x28], di
call fcn.00401f50
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
cmp eax, edi
jne 0x4adaff
lea eax, [ebp - 0x28]
push eax
call fcn.005c2c42
mov ecx, dword [ebp - 0x2c]
add esp, 4
cmp ecx, edi
mov edx, ecx
jne 0x4adb14
lea edx, [ebp - 0x28]
cmp word [edx + eax*2 - 2], 0x5c
je 0x4adbb5
mov edx, 0x69e054
test edx, edx
je 0x4adbb5
push edx
call fcn.005c2c42
add esp, 4
test eax, eax
je 0x4adbb2
mov eax, dword [ebp - 0x2c]
cmp eax, edi
je 0x4adb4e
push eax
call fcn.005c2c42
add esp, 4
mov esi, eax
jmp 0x4adb50
xor esi, esi
push 0x69e054
call fcn.005c2c42
add eax, esi
lea eax, [eax + eax + 2]
push eax
call fcn.005db66d
mov esi, eax
add esp, 8
cmp esi, edi
je 0x4adbb2
mov eax, dword [ebp - 0x2c]
cmp eax, edi
je 0x4adb8d
push eax
push esi
call fcn.005c2dda
push 0x69e054
push esi
call fcn.005c2db0
add esp, 0x10
jmp 0x4adb9b
push 0x69e054
push esi
call fcn.005c2dda
add esp, 8
lea ecx, [ebp - 0x2c]
call fcn.00401070
push esi
mov dword [ebp - 0x2c], esi
call fcn.005c2c42
add esp, 4
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
cmp ecx, edi
jne 0x4adbbc
lea ecx, [ebp - 0x28]
add ecx, 6
push 0x5c
push ecx
call fcn.005c30af
add esp, 8
mov esi, eax
cmp esi, edi
je 0x4add7f
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x4adbde
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], edi
mov word [ebp - 0x34], di
call fcn.00401f50
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 4], 0xa
cmp ecx, edi
jne 0x4adbff
lea ecx, [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jne 0x4adc09
lea eax, [ebp - 0x28]
mov edx, esi
sub edx, eax
sar edx, 1
mov word [ecx + edx*2], di
mov eax, dword [ebp - 0x38]
cmp eax, edi
jne 0x4adc1d
lea eax, [ebp - 0x34]
push 1
push eax
call fcn.00487560
add esp, 8
cmp eax, edi
jne 0x4add5e
mov eax, dword [ebp - 0x38]
cmp eax, edi
jne 0x4adc3a
lea eax, [ebp - 0x34]
push 1
push eax
call fcn.00487740
add esp, 8
cmp eax, edi
jne 0x4add5e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [0x6c826c]
mov dword [ebp + 0x18], eax
push edi
lea ecx, [ebp + 0x10]
push edi
push ecx
push 0x400
push esi
push edi
push 0x1100
mov byte [ebp - 4], 0xb
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov edx, dword [ebp + 0x10]
mov eax, dword [0x6cdd3c]
push edx
lea ecx, [ebp + 0x18]
push eax
push ecx
call fcn.005d809b
mov edx, dword [ebp + 0x10]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [0x6c826c]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp - 0x20]
mov bl, 0xc
cmp eax, edi
mov byte [ebp - 4], bl
jne 0x4adcb0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
call fcn.005df326
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp + 0x18]
push esi
push ecx
push edx
lea eax, [ebp + 0x14]
push str._s__s_error__ld_n
push eax
mov byte [ebp - 4], 0xd
call fcn.005d809b
mov ecx, dword [0x6ccf64]
add esp, 0x14
cmp ecx, edi
je 0x4adcec
mov edx, dword [ebp + 0x14]
push 1
push edx
call fcn.0049c760
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call fcn.005df266
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xb
call fcn.005df266
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.005df266
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 9
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.00401070
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.00401070
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0
call fcn.005df266
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x14
add esi, 2
push 0x5c
push esi
call fcn.005c30af
add esp, 8
lea ecx, [ebp - 0x38]
mov esi, eax
mov byte [ebp - 4], 9
call fcn.00401070
jmp 0x4adbcc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
mov eax, dword [ebp - 0x20]
xor ebx, ebx
cmp eax, ebx
jne 0x4add97
lea eax, [ebp - 0x1c]
mov ecx, 0x69eb64
test ecx, ecx
je 0x4adef1
cmp eax, ebx
je 0x4adef1
mov edi, dword [ebp + 0x14]
cmp edi, ebx
je 0x4adef1
mov esi, dword [ebp + 0x18]
cmp esi, ebx
je 0x4adef1
push eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x34], bx
call fcn.00401f50
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xe
call fcn.0040d700
push esi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xf
call fcn.0040d700
mov esi, dword [ebp + 0x10]
mov byte [ebp - 4], 0x10
mov ecx, esi
call fcn.00401070
push 0x69eb64
lea ecx, [ebp - 0x68]
call fcn.00401ec0
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 0x11
cmp eax, ebx
je 0x4ade1a
mov dword [ebp + 0x14], eax
jmp 0x4ade20
lea edx, [ebp - 0x34]
mov dword [ebp + 0x14], edx
mov edi, dword [ebp - 0x60]
lea ecx, [ebp - 0x5c]
call fcn.00401f40
push eax
call fcn.005c2c42
add esp, 4
lea ecx, [ebp - 0x50]
mov ebx, eax
call fcn.00401f40
push eax
call fcn.005c2c42
mov dword [ebp + 0x18], ebx
mov ebx, eax
mov eax, dword [ebp + 0x14]
add ebx, edi
push eax
call fcn.005c2c42
mov ecx, dword [ebp + 0x18]
add ebx, ecx
lea ebx, [eax + ebx + 4]
lea eax, [ebx + ebx]
push eax
call fcn.005db66d
mov edi, eax
add esp, 0xc
test edi, edi
mov dword [esi], edi
je 0x4adebf
lea ecx, [ebx + ebx]
xor eax, eax
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x5c]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x50]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x38]
call fcn.00401f40
push eax
lea ecx, [ebp - 0x68]
call fcn.00401f40
push eax
mov eax, dword [esi]
push ebx
push eax
call fcn.005c2bd2
mov ecx, dword [esi]
push ecx
call fcn.005c2c42
add esp, 0x1c
mov dword [esi + 8], eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x10
call fcn.00401070
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xf
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xe
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.00401070
jmp 0x4adef4
mov esi, dword [ebp + 0x10]
mov eax, dword [esi]
test eax, eax
jne 0x4adefd
lea eax, [esi + 4]
push 0x6a1dfc
push eax
call fcn.005c3495
add esp, 8
test eax, eax
je 0x4add27
mov edx, 0x6a1dfc
test edx, edx
je 0x4adef4
mov eax, 0x69e054
test eax, eax
je 0x4adef4
push eax
push edx
call fcn.005c314f
add esp, 8
test eax, eax
je 0x4adef4
mov eax, dword [esi]
push 0x6a1dfc
push eax
call fcn.005c3495
add esp, 8
mov edi, eax
xor ebx, ebx
test edi, edi
je 0x4adf6b
push 0x6a1dfc
inc ebx
call fcn.005c2c42
lea eax, [edi + eax*2]
push 0x6a1dfc
push eax
call fcn.005c3495
add esp, 0xc
mov edi, eax
jmp 0x4adf47
test ebx, ebx
je 0x4adef4
mov ecx, dword [esi]
push ecx
lea ecx, [ebp - 0x50]
call fcn.0040d700
push 0x6a1dfc
mov byte [ebp - 4], 0x12
call fcn.005c2c42
push 0x69e054
mov edi, eax
call fcn.005c2c42
add esp, 8
cmp eax, edi
jbe 0x4adff6
mov ecx, esi
call fcn.00401070
lea ecx, [ebp - 0x50]
call fcn.00401f40
push eax
call fcn.005c2c42
push 0x6a1dfc
mov esi, eax
call fcn.005c2c42
push 0x69e054
mov edi, eax
call fcn.005c2c42
sub eax, edi
imul eax, ebx
add esi, eax
lea edx, [esi + esi + 2]
push edx
call fcn.005db66d
mov esi, dword [ebp + 0x10]
add esp, 0x10
test eax, eax
mov dword [esi], eax
jne 0x4adff6
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 3
call fcn.00401070
jmp 0x4adef4
mov ebx, dword [esi]
lea ecx, [ebp - 0x50]
call fcn.00401f40
push 0x6a1dfc
push eax
mov dword [ebp + 0x18], eax
call fcn.005c3495
add esp, 8
test eax, eax
mov dword [ebp + 0x14], eax
je 0x4ae088
mov esi, dword [ebp + 0x18]
mov edi, ebx
sub eax, esi
push 0x69e054
sar eax, 1
shl eax, 1
mov ecx, eax
add ebx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005c2c42
mov ecx, eax
mov esi, 0x69e054
shl ecx, 1
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x69e054
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005c2c42
push 0x6a1dfc
lea ebx, [ebx + eax*2]
call fcn.005c2c42
mov ecx, dword [ebp + 0x14]
push 0x6a1dfc
lea eax, [ecx + eax*2]
push eax
mov dword [ebp + 0x18], eax
call fcn.005c3495
add esp, 0x14
jmp 0x4ae011
mov esi, dword [ebp + 0x18]
push esi
call fcn.005c2c42
mov ecx, eax
mov edi, ebx
shl ecx, 1
mov edx, ecx
mov eax, dword [ebp + 0x18]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005c2c42
mov esi, dword [ebp + 0x10]
lea ebx, [ebx + eax*2]
mov word [ebx], 0
mov ecx, dword [esi]
push ecx
call fcn.005c2c42
add esp, 0xc
lea ecx, [ebp - 0x50]
mov dword [esi + 8], eax
mov byte [ebp - 4], 3
call fcn.00401070
jmp 0x4adef1