Function at 0x4f8220
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x58c0c2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x148
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x34], esi
xor ebp, ebp
mov dword [esp + 0x160], ebp
call fcn.004b7f80
mov dword [esp + 0x50], ebp
mov dword [esp + 0x64], ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0x160], 2
call fcn.0041ef40
push 0x74
push ecx
lea eax, [esp + 0x170]
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
mov byte [esp + 0x16c], 3
mov byte [esp + 0x23], 0
call fcn.00401ed0
push ebp
call fcn.00416df0
mov edi, eax
cmp edi, ebp
mov dword [esp + 0x38], edi
jne 0x4f830a
push 0x74
push ecx
lea edx, [esp + 0x170]
mov ecx, esp
mov dword [esp + 0x78], esp
push edx
call fcn.00401ed0
push 7
call fcn.00416df0
mov edi, eax
cmp edi, ebp
mov dword [esp + 0x38], edi
jne 0x4f830a
lea ecx, [esp + 0x94]
mov dword [esi], 0xbb9
mov byte [esp + 0x160], 2
call fcn.0042bdc0
lea ecx, [esp + 0x64]
mov byte [esp + 0x160], 1
call fcn.0042bdc0
lea ecx, [esp + 0x50]
mov byte [esp + 0x160], 0
call fcn.0042bdc0
jmp 0x4f9079
mov eax, dword [edi + 0x1c]
cmp eax, ebp
je 0x4f835d
mov dword [edi + 0x1c], ebp
cmp edi, ebp
mov dword [esi], eax
je 0x4f8322
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
lea ecx, [esp + 0x94]
mov byte [esp + 0x160], 2
call fcn.0042bdc0
lea ecx, [esp + 0x64]
mov byte [esp + 0x160], 1
call fcn.0042bdc0
lea ecx, [esp + 0x50]
mov byte [esp + 0x160], 0
call fcn.0042bdc0
jmp 0x4f9079
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x18], ebp
mov ecx, dword [esi + 8]
lea edx, [esp + 0x2c]
push ecx
push edx
lea ecx, [esp + 0xcc]
call fcn.004f7d80
mov esi, eax
lea eax, [esp + 0x1c]
mov byte [esp + 0x160], 7
cmp eax, esi
je 0x4f83aa
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4f839e
push eax
lea ecx, [esp + 0x20]
call fcn.00411610
mov esi, dword [esi]
cmp esi, ebp
mov dword [esp + 0x1c], esi
je 0x4f83aa
inc dword [esi]
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x160], 6
cmp eax, ebp
je 0x4f83c4
push eax
lea ecx, [esp + 0x30]
call fcn.00411610
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x2c]
push ecx
push 0x5ccbf4
push edx
call fcn.00412140
push 0x5ccbf0
push eax
lea eax, [esp + 0x38]
mov bl, 8
push eax
mov byte [esp + 0x16c], bl
call fcn.004120c0
mov esi, eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x160], 9
cmp ecx, esi
je 0x4f8421
mov eax, dword [esp + 0x18]
cmp eax, ebp
je 0x4f8415
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
mov esi, dword [esi]
cmp esi, ebp
mov dword [esp + 0x18], esi
je 0x4f8421
inc dword [esi]
mov eax, dword [esp + 0x30]
mov byte [esp + 0x160], bl
cmp eax, ebp
je 0x4f843a
push eax
lea ecx, [esp + 0x34]
call fcn.00411610
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x30], ebp
cmp eax, ebp
mov byte [esp + 0x160], 6
je 0x4f8458
push eax
lea ecx, [esp + 0x30]
call fcn.00411610
mov dword [esp + 0x10], ebp
mov edx, dword [edi]
mov ecx, edi
mov byte [esp + 0x160], 0xa
mov dword [esp + 0x30], 1
call dword [edx + 0x34]
test al, al
jne 0x4f9098
mov eax, dword [edi]
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
call dword [eax + 0x40]
push 0x20
lea ecx, [esp + 0x14]
call fcn.004134e0
push 0x20
lea ecx, [esp + 0x14]
call fcn.004134a0
push 0x5d33ec
lea ecx, [esp + 0x70]
call fcn.00411a30
lea edx, [esp + 0x6c]
push ebp
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x168], 0xb
call fcn.00412910
test al, al
jne 0x4f84e7
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x4f84d8
mov eax, dword [eax + 8]
cmp eax, ebp
je 0x4f84d8
dec eax
jmp 0x4f84da
xor eax, eax
cmp eax, ebp
sete al
test al, al
jne 0x4f84e7
xor bl, bl
jmp 0x4f84e9
mov bl, 1
mov eax, dword [esp + 0x6c]
mov byte [esp + 0x160], 0xa
cmp eax, ebp
je 0x4f8503
push eax
lea ecx, [esp + 0x70]
call fcn.00411610
test bl, bl
mov dword [esp + 0x6c], ebp
jne case.default.0x4f85df
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.LANGUAGE
call fcn.00411a30
lea eax, [esp + 0x14]
push eax
call fcn.004f91c0
cmp eax, ebp
jne case.default.0x4f85df
push ebp
lea ecx, [esp + 0xb6]
push ebp
push ecx
push 0x5b
lea ecx, [esp + 0x20]
call fcn.00412cd0
test al, al
je 0x4f85d1
push ebp
lea edx, [esp + 0xae]
push ebp
push edx
push 0x5d
lea ecx, [esp + 0x20]
call fcn.00412cd0
test al, al
je 0x4f85d1
push 1
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0xb8]
push ebp
lea ecx, [esp + 0x28]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00412a60
mov ecx, dword [esp + 0xac]
and ecx, 0xffff
test al, al
je case.default.0x4f85df
push ecx
push ebp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
call fcn.005002f0
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov byte [esp + 0x174], 0xc
call fcn.00401ed0
lea ecx, [esp + 0x20]
mov byte [esp + 0x170], 0xa
call fcn.00412940
mov eax, dword [esp + 0x30]
dec eax
cmp eax, 3
ja case.default.0x4f85df
jmp dword [eax*4 + 0x4f91a4]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.ATTR
call fcn.00411a30
lea ecx, [esp + 0x14]
push ecx
call fcn.004f91c0
cmp eax, ebp
je case.0x4f85df.3
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
push ebp
lea edx, [esp + 0x74]
push ebp
push edx
push 0x2c
lea ecx, [esp + 0x20]
mov byte [esp + 0x170], 0xe
call fcn.00412cd0
mov esi, dword [esp + 0x70]
and esi, 0xffff
test al, al
je 0x4f8d9a
push esi
lea eax, [esp + 0x78]
push ebp
push eax
lea ecx, [esp + 0x1c]
call fcn.00413050
mov edi, eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x160], 0xf
cmp ecx, edi
je 0x4f867d
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x4f8671
push eax
lea ecx, [esp + 0x28]
call fcn.00411610
mov edi, dword [edi]
cmp edi, ebp
mov dword [esp + 0x24], edi
je 0x4f867d
inc dword [edi]
mov eax, dword [esp + 0x74]
mov byte [esp + 0x160], 0xe
cmp eax, ebp
je 0x4f8697
push eax
lea ecx, [esp + 0x78]
call fcn.00411610
inc esi
push 0xffff
lea edx, [esp + 0x7c]
push esi
push edx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x80], ebp
call fcn.00413050
mov esi, eax
lea eax, [esp + 0x20]
mov byte [esp + 0x160], 0x10
cmp eax, esi
je 0x4f86e3
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x4f86d7
push eax
lea ecx, [esp + 0x24]
call fcn.00411610
mov esi, dword [esi]
cmp esi, ebp
mov dword [esp + 0x20], esi
je 0x4f86e3
inc dword [esi]
mov eax, dword [esp + 0x78]
mov byte [esp + 0x160], 0xe
cmp eax, ebp
je 0x4f86fd
push eax
lea ecx, [esp + 0x7c]
call fcn.00411610
push 0x20
lea ecx, [esp + 0x28]
mov dword [esp + 0x7c], ebp
call fcn.004134e0
push 0x20
lea ecx, [esp + 0x28]
call fcn.004134a0
push 0x20
lea ecx, [esp + 0x24]
call fcn.004134e0
push 0x20
lea ecx, [esp + 0x24]
call fcn.004134a0
push ecx
mov ecx, dword [esp + 0x28]
mov eax, esp
mov dword [esp + 0x2c], esp
mov dword [eax], ecx
mov eax, dword [esp + 0x28]
cmp eax, ebp
je 0x4f8744
inc dword [eax]
mov ecx, 0x5dd650
call fcn.004b7b90
cmp eax, 0x10d
jne 0x4f8c6a
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x68]
mov al, byte [esp + 0x17]
dec ecx
mov edx, dword [edi + 4]
push ecx
mov dword [esp + 0x80], edx
mov edx, dword [esp + 0x40]
mov byte [esp + 0x84], al
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x28]
dec edx
mov eax, esp
mov dword [esp + 0x8c], edx
mov dword [esp + 0x2c], esp
mov dword [eax], ecx
mov eax, dword [esp + 0x28]
cmp eax, ebp
je 0x4f87a1
inc dword [eax]
lea edx, [esp + 0xcc]
mov ecx, 0x5dd650
push edx
call fcn.004b79c0
mov ecx, eax
mov byte [esp + 0x160], 0x11
call fcn.00521ec0
lea ecx, [esp + 0xc8]
mov dword [esp + 0x8c], eax
mov byte [esp + 0x160], 0xe
call fcn.005217d0
lea eax, [esp + 0xb4]
lea edx, [esp + 0x20]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00401ed0
lea eax, [esp + 0x118]
mov ecx, 0x5dd650
push eax
call fcn.004b79c0
mov ecx, eax
mov byte [esp + 0x164], 0x12
call fcn.00522030
mov esi, eax
mov ecx, dword [esi + 0xc]
lea edx, [esi + 4]
mov dword [esp + 0x9c], ecx
push edx
lea ecx, [esp + 0x98]
mov byte [esp + 0x164], 0x13
call fcn.00404a90
mov eax, dword [esi + 8]
mov byte [esp + 0x160], 0x12
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xb8]
mov ecx, dword [esi]
cmp eax, ebp
mov dword [esp + 0x90], ecx
je 0x4f886e
push eax
lea ecx, [esp + 0xbc]
call fcn.00411610
lea ecx, [esp + 0x110]
mov dword [esp + 0xb8], ebp
mov byte [esp + 0x160], 0xe
call fcn.005217d0
mov edx, dword [esp + 0x7c]
sub esp, 0x24
mov eax, esp
mov dword [esp + 0x4c], esp
mov dword [eax], edx
mov cl, byte [esp + 0xa4]
mov byte [eax + 4], cl
mov edx, dword [esp + 0xa8]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0xac]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0xb0]
lea ecx, [esp + 0xb4]
mov dword [eax + 0x10], edx
push ecx
lea ecx, [eax + 0x14]
call fcn.004dccf0
lea ecx, [edi + 0x3c]
call fcn.004f9990
mov eax, dword [esp + 0x20]
mov byte [esp + 0x160], 0xd
cmp eax, ebp
je 0x4f88f2
push eax
lea ecx, [esp + 0x24]
call fcn.00411610
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0xa
je case.default.0x4f85df
push eax
lea ecx, [esp + 0x28]
call fcn.00411610
jmp case.default.0x4f85df
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.FORM
call fcn.00411a30
lea edx, [esp + 0x14]
push edx
call fcn.004f91c0
cmp eax, ebp
je 0x4f89d2
mov esi, dword [esp + 0x3c]
cmp esi, ebp
je 0x4f89a0
mov al, byte [esp + 0x17]
mov edx, dword [esp + 0x34]
mov byte [esp + 0x58], al
mov eax, dword [esp + 0x68]
mov ecx, dword [edx + 4]
dec eax
mov dword [esp + 0x5c], eax
lea eax, [esi - 1]
sub esp, 0x14
mov dword [esp + 0x74], eax
mov eax, esp
mov dword [esp + 0x68], ecx
mov dword [esp + 0x3c], esp
mov dword [eax], ecx
mov cl, byte [esp + 0x6c]
mov byte [eax + 4], cl
mov ecx, dword [esp + 0x70]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0x10], ecx
mov eax, dword [esp + 0x78]
cmp eax, ebp
je 0x4f8998
inc dword [eax]
lea ecx, [edx + 0x24]
call fcn.004f9670
mov eax, dword [esp + 0x64]
cmp eax, ebp
je 0x4f89b2
push eax
lea ecx, [esp + 0x68]
call fcn.00411610
mov eax, dword [esp + 0x10]
cmp eax, ebp
mov dword [esp + 0x64], eax
je 0x4f89c0
inc dword [eax]
inc esi
mov dword [esp + 0x30], 4
mov dword [esp + 0x3c], esi
jmp case.default.0x4f85df
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je case.0x4f85df.2
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x68]
mov bl, byte [esp + 0x17]
dec eax
mov ecx, dword [edi + 4]
sub esp, 0x14
mov dword [esp + 0x74], eax
lea edx, [esi - 1]
mov eax, esp
mov dword [esp + 0x68], ecx
mov byte [esp + 0x6c], bl
mov dword [esp + 0x70], edx
mov dword [eax], ecx
mov cl, byte [esp + 0x6c]
mov byte [eax + 4], cl
mov edx, dword [esp + 0x70]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x74]
lea edx, [esp + 0x78]
mov dword [esp + 0x3c], esp
mov dword [eax + 0xc], ecx
push edx
lea ecx, [eax + 0x10]
call fcn.00401ed0
lea ecx, [edi + 0x24]
call fcn.004f9670
jmp 0x4f8a40
mov bl, byte [esp + 0x17]
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.INFLECTION
call fcn.00411a30
lea eax, [esp + 0x14]
push eax
call fcn.004f91c0
cmp eax, ebp
je 0x4f8aec
cmp esi, ebp
je 0x4f8ab6
mov eax, dword [esp + 0x3c]
mov ecx, dword [edi + 4]
sub esp, 0x14
mov dword [esp + 0x60], eax
lea edx, [esi - 1]
mov eax, esp
mov dword [esp + 0x54], ecx
mov byte [esp + 0x58], bl
mov dword [esp + 0x5c], edx
mov dword [eax], ecx
mov cl, byte [esp + 0x58]
mov dword [esp + 0x3c], esp
mov byte [eax + 4], cl
mov edx, dword [esp + 0x5c]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x60]
lea edx, [esp + 0x64]
mov dword [eax + 0xc], ecx
push edx
lea ecx, [eax + 0x10]
call fcn.00401ed0
lea ecx, [edi + 0xc]
call fcn.004f93b0
mov eax, dword [esp + 0x50]
cmp eax, ebp
je 0x4f8ac8
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov eax, dword [esp + 0x10]
cmp eax, ebp
mov dword [esp + 0x50], eax
je 0x4f8ad6
inc dword [eax]
inc esi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x68], esi
mov dword [esp + 0x30], 3
jmp case.default.0x4f85df
cmp esi, ebp
je 0x4f8b43
mov eax, dword [esp + 0x3c]
mov ecx, dword [edi + 4]
sub esp, 0x14
mov dword [esp + 0x60], eax
dec esi
mov eax, esp
mov dword [esp + 0x54], ecx
mov byte [esp + 0x58], bl
mov dword [esp + 0x5c], esi
mov dword [eax], ecx
mov cl, byte [esp + 0x58]
mov dword [esp + 0x3c], esp
mov byte [eax + 4], cl
mov edx, dword [esp + 0x5c]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x60]
lea edx, [esp + 0x64]
mov dword [eax + 0xc], ecx
push edx
lea ecx, [eax + 0x10]
call fcn.00401ed0
lea ecx, [edi + 0xc]
call fcn.004f93b0
jmp 0x4f8b43
mov edi, dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.POFS
call fcn.00411a30
lea eax, [esp + 0x14]
push eax
call fcn.004f91c0
cmp eax, ebp
je 0x4f8eae
xor ebx, ebx
push 9
lea ecx, [esp + 0xa4]
push ebx
push ecx
call fcn.004522f0
lea edx, [esp + 0x2c]
lea ecx, [esp + 0xa0]
push edx
mov byte [esp + 0x164], 0x14
call fcn.0046c9c0
push ebp
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x168], 0x15
call fcn.004124b0
xor ecx, ecx
cmp eax, 3
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x160], 0x14
sete cl
cmp eax, ebp
mov esi, ecx
je 0x4f8bc8
push eax
lea ecx, [esp + 0x30]
call fcn.00411610
cmp esi, ebp
mov dword [esp + 0x2c], ebp
jne 0x4f8c07
lea ecx, [esp + 0xa4]
mov byte [esp + 0x160], 0x17
call fcn.0042bdc0
lea ecx, [esp + 0xa0]
mov byte [esp + 0x160], 0xa
call fcn.0042bdc0
inc ebx
cmp ebx, 0x15
jge 0x4f8eae
jmp 0x4f8b68
mov byte [esp + 0x17], bl
mov byte [esp + 0x44], bl
mov dword [esp + 0x30], 2
mov dword [esp + 0x68], ebp
mov dword [esp + 0x3c], ebp
lea ecx, [esp + 0xa4]
mov byte [esp + 0x160], 0x16
call fcn.0042bdc0
lea ecx, [esp + 0xa0]
mov byte [esp + 0x160], 0xa
call fcn.0042bdc0
cmp ebx, 0x15
jge 0x4f8eaa
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
call dword [edx + 0x34]
test al, al
jne 0x4f9098
mov edi, dword [esp + 0x38]
jmp 0x4f847b
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
cmp ecx, ebp
mov dword [eax], 0xbb9
je 0x4f8c82
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0x20]
mov byte [esp + 0x160], 0xd
cmp eax, ebp
je 0x4f8c9c
push eax
lea ecx, [esp + 0x24]
call fcn.00411610
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0xa
je 0x4f8cba
push eax
lea ecx, [esp + 0x28]
call fcn.00411610
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], ebp
cmp eax, ebp
mov byte [esp + 0x160], 6
je 0x4f8cd8
push eax
lea ecx, [esp + 0x14]
call fcn.00411610
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebp
cmp eax, ebp
mov byte [esp + 0x160], 5
je 0x4f8cf6
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
cmp eax, ebp
mov byte [esp + 0x160], 4
je 0x4f8d14
push eax
lea ecx, [esp + 0x20]
call fcn.00411610
mov eax, dword [esp + 0x94]
mov dword [esp + 0x1c], ebp
cmp eax, ebp
mov byte [esp + 0x160], 2
je 0x4f8d38
push eax
lea ecx, [esp + 0x98]
call fcn.00411610
mov eax, dword [esp + 0x64]
mov dword [esp + 0x94], ebp
cmp eax, ebp
mov byte [esp + 0x160], 1
je 0x4f8d59
push eax
lea ecx, [esp + 0x68]
call fcn.00411610
mov eax, dword [esp + 0x50]
mov dword [esp + 0x64], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0
je 0x4f8d77
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov eax, dword [esp + 0x168]
mov dword [esp + 0x50], ebp
cmp eax, ebp
mov dword [esp + 0x160], 0xffffffff
je 0x4f9186
jmp 0x4f9179
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
cmp ecx, ebp
mov dword [eax], 0xbb9
je 0x4f8db2
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0x20]
mov byte [esp + 0x160], 0xd
cmp eax, ebp
je 0x4f8dcc
push eax
lea ecx, [esp + 0x24]
call fcn.00411610
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0xa
je 0x4f8dea
push eax
lea ecx, [esp + 0x28]
call fcn.00411610
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], ebp
cmp eax, ebp
mov byte [esp + 0x160], 6
je 0x4f8e08
push eax
lea ecx, [esp + 0x14]
call fcn.00411610
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebp
cmp eax, ebp
mov byte [esp + 0x160], 5
je 0x4f8e26
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
cmp eax, ebp
mov byte [esp + 0x160], 4
je 0x4f8e44
push eax
lea ecx, [esp + 0x20]
call fcn.00411610
lea ecx, [esp + 0x94]
mov dword [esp + 0x1c], ebp
mov byte [esp + 0x160], 2
call fcn.0042bdc0
lea ecx, [esp + 0x64]
mov byte [esp + 0x160], 1
call fcn.0042bdc0
mov eax, dword [esp + 0x50]
mov byte [esp + 0x160], 0
cmp eax, ebp
je 0x4f8e87
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov eax, dword [esp + 0x168]
mov dword [esp + 0x50], ebp
cmp eax, ebp
mov dword [esp + 0x160], 0xffffffff
je 0x4f9186
jmp 0x4f9179
mov edi, dword [esp + 0x34]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x5cf6dc
call fcn.00411a30
lea eax, [esp + 0x14]
push eax
call fcn.004f91c0
cmp eax, ebp
je 0x4f8fa8
mov ecx, dword [esp + 0x38]
cmp ecx, ebp
je 0x4f8edf
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0x10]
mov byte [esp + 0x160], 6
cmp eax, ebp
je 0x4f8ef9
push eax
lea ecx, [esp + 0x14]
call fcn.00411610
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebp
cmp eax, ebp
mov byte [esp + 0x160], 5
je 0x4f8f17
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
cmp eax, ebp
mov byte [esp + 0x160], 4
je 0x4f8f35
push eax
lea ecx, [esp + 0x20]
call fcn.00411610
lea ecx, [esp + 0x94]
mov dword [esp + 0x1c], ebp
mov byte [esp + 0x160], 2
call fcn.0042bdc0
mov eax, dword [esp + 0x64]
mov byte [esp + 0x160], 1
cmp eax, ebp
je 0x4f8f67
push eax
lea ecx, [esp + 0x68]
call fcn.00411610
mov eax, dword [esp + 0x50]
mov dword [esp + 0x64], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0
je 0x4f8f85
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov eax, dword [esp + 0x168]
mov dword [esp + 0x50], ebp
cmp eax, ebp
mov dword [esp + 0x160], 0xffffffff
je 0x4f9186
jmp 0x4f9179
mov ecx, dword [esp + 0x38]
mov dword [edi], 0xbb9
cmp ecx, ebp
je 0x4f8fbc
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [esp + 0x10]
mov byte [esp + 0x160], 6
cmp eax, ebp
je 0x4f8fd6
push eax
lea ecx, [esp + 0x14]
call fcn.00411610
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebp
cmp eax, ebp
mov byte [esp + 0x160], 5
je 0x4f8ff4
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
cmp eax, ebp
mov byte [esp + 0x160], 4
je 0x4f9012
push eax
lea ecx, [esp + 0x20]
call fcn.00411610
mov eax, dword [esp + 0x94]
mov dword [esp + 0x1c], ebp
cmp eax, ebp
mov byte [esp + 0x160], 2
je 0x4f9036
push eax
lea ecx, [esp + 0x98]
call fcn.00411610
mov eax, dword [esp + 0x64]
mov dword [esp + 0x94], ebp
cmp eax, ebp
mov byte [esp + 0x160], 1
je 0x4f9057
push eax
lea ecx, [esp + 0x68]
call fcn.00411610
mov eax, dword [esp + 0x50]
mov dword [esp + 0x64], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0
je 0x4f9075
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov dword [esp + 0x50], ebp
mov eax, dword [esp + 0x168]
mov dword [esp + 0x160], 0xffffffff
cmp eax, ebp
je 0x4f9186
jmp 0x4f9179
mov ecx, dword [esp + 0x38]
cmp ecx, ebp
je 0x4f90a6
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0x10]
mov byte [esp + 0x160], 6
cmp eax, ebp
je 0x4f90c0
push eax
lea ecx, [esp + 0x14]
call fcn.00411610
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebp
cmp eax, ebp
mov byte [esp + 0x160], 5
je 0x4f90de
push eax
lea ecx, [esp + 0x1c]
call fcn.00411610
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebp
cmp eax, ebp
mov byte [esp + 0x160], 4
je 0x4f90fc
push eax
lea ecx, [esp + 0x20]
call fcn.00411610
mov eax, dword [esp + 0x94]
mov dword [esp + 0x1c], ebp
cmp eax, ebp
mov byte [esp + 0x160], 2
je 0x4f9120
push eax
lea ecx, [esp + 0x98]
call fcn.00411610
mov eax, dword [esp + 0x64]
mov dword [esp + 0x94], ebp
cmp eax, ebp
mov byte [esp + 0x160], 1
je 0x4f9141
push eax
lea ecx, [esp + 0x68]
call fcn.00411610
mov eax, dword [esp + 0x50]
mov dword [esp + 0x64], ebp
cmp eax, ebp
mov byte [esp + 0x160], 0
je 0x4f915f
push eax
lea ecx, [esp + 0x54]
call fcn.00411610
mov eax, dword [esp + 0x168]
mov dword [esp + 0x50], ebp
cmp eax, ebp
mov dword [esp + 0x160], 0xffffffff
je 0x4f9186
push eax
lea ecx, [esp + 0x16c]
call fcn.00411610
mov ecx, dword [esp + 0x158]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x154
ret 4