Function at 0x4f5f90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5f18a2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5b4
push ebx
push ebp
push edi
mov ebp, ecx
push 1
call fcn.005bf75b
mov edi, eax
mov eax, dword [0x6707bc]
mov dword [esp + 0x20], eax
xor ecx, ecx
lea edx, [esp + 0x10]
mov dword [esp + 0x10], ecx
lea eax, [esp + 0x60]
push ecx
push ecx
push edx
mov dword [esp + 0x20], ecx
push ecx
lea ecx, [esp + 0x34]
push eax
lea edx, [esp + 0x70]
push ecx
mov ecx, dword [ebp + 0x40]
lea eax, [esp + 0x38]
push edx
push eax
push ecx
mov ecx, ebp
mov dword [esp + 0x5ec], 0
call fcn.004f8330
mov ebx, eax
mov eax, dword [esp + 0x5c]
test eax, eax
mov dword [esp + 0x1c], ebx
jne 0x4f6031
push 0x30
mov ecx, 0x6756e0
call fcn.00484ab0
lea ecx, [esp + 0x20]
mov dword [esp + 0x5c8], 0xffffffff
call fcn.005bc421
jmp 0x4f6d6a
mov eax, dword [ebp + 0x1c]
lea edx, [esp + 0x64]
push esi
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, ebp
lea esi, [ebp + 0x13c]
call fcn.004f73f0
mov ecx, dword [esp + 0x68]
push esi
add eax, ecx
mov ecx, dword [ebp + 0x98]
mov dword [esi], eax
mov eax, dword [ebp + 0x40]
sub eax, edi
lea edx, [ecx + 5]
imul eax, edx
mov edx, dword [esp + 0x74]
mov dword [ebp + 0x140], eax
lea eax, [eax + ecx + 5]
mov ecx, ebp
mov dword [ebp + 0x144], edx
mov dword [ebp + 0x148], eax
call fcn.005c50f9
lea eax, [ebx - 0x3e8]
cmp eax, 0x18
ja case.0x4f6098.1001
jmp dword [eax*4 + 0x4f6d84]
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
lea edi, [ebp + 0x9c]
mov ecx, edi
call fcn.004418a0
mov eax, dword [ebp + 0x154]
lea esi, [ebp + 0x14c]
push 0x649bc8
push eax
mov ecx, esi
call fcn.005bb0cc
mov eax, dword [esi + 8]
push 0x649bc4
push eax
mov ecx, esi
call fcn.005bb0cc
jmp 0x4f6279
mov eax, dword [ebp + 0x3c]
test eax, eax
je case.0x4f6098.1001
mov eax, dword [esp + 0x5d4]
test eax, eax
je case.0x4f6098.1001
lea ecx, [ebp + 0x9c]
mov dword [esp + 0x1c], ecx
call fcn.004418a0
mov ecx, dword [ebp + 0x3c]
xor edi, edi
mov edx, dword [ecx + 0x4c]
mov eax, dword [edx]
mov dword [esp + 0x20], eax
mov ecx, dword [ebp + 0x3c]
mov eax, edi
push 0
push eax
mov ecx, dword [ecx + 0x4c]
inc edi
add ecx, 0x14
call fcn.004f4110
mov esi, eax
test esi, esi
je 0x4f6186
mov edx, dword [esi]
mov ecx, dword [esp + 0x20]
push 0
push edx
call fcn.00462300
test eax, eax
je 0x4f611f
mov eax, dword [eax + 0x14]
cmp ebx, 0x3fb
jne 0x4f615b
shr eax, 0x12
jmp 0x4f615e
shr eax, 0x13
and eax, 1
test eax, eax
je 0x4f611f
mov eax, dword [ebp + 0x3c]
push esi
mov ecx, dword [eax + 0x4c]
add ecx, 0x14
mov edx, dword [ecx]
call dword [edx + 0x14]
lea ecx, [ebp + 0x14c]
push eax
mov eax, dword [ecx + 8]
push eax
call fcn.005bb0cc
jmp 0x4f611f
mov esi, dword [esp + 0x1c]
push ebp
push 0x104
mov ecx, esi
call fcn.005bcb8a
push 5
mov ecx, esi
call fcn.005bd7ed
jmp case.0x4f6098.1001
mov eax, dword [ebp + 0x3c]
test eax, eax
je case.0x4f6098.1001
mov eax, dword [esp + 0x5d4]
test eax, eax
je case.0x4f6098.1001
mov ecx, dword [ebp + 0x90]
and ecx, 0xfffffffc
cmp ecx, 4
jne case.0x4f6098.1001
lea edi, [ebp + 0x9c]
mov ecx, edi
mov dword [esp + 0x1c], edi
call fcn.004418a0
mov edx, dword [ebp + 0x88]
mov ecx, dword [ebp + 0x3c]
push 0
push 0
mov eax, dword [edx]
mov ecx, dword [ecx + 0x4c]
push eax
add ecx, 0x14
call fcn.004f4200
lea esi, [eax + 0x18]
push esi
call fcn.00492830
add esi, eax
push esi
call fcn.00492830
add esi, eax
add esp, 8
lea edx, [esp + 0x1dc]
mov esi, dword [esi]
mov byte [esp + 0x1dc], 0
push 0x3e8
push edx
mov eax, dword [esi + 0x1c]
push 0x8074
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov al, byte [esp + 0x1dc]
lea esi, [esp + 0x1dc]
test al, al
je 0x4f6279
lea ebx, [ebp + 0x14c]
mov eax, dword [ebx + 8]
push esi
push eax
mov ecx, ebx
call fcn.005bb0cc
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov al, byte [esi + ecx + 1]
lea esi, [esi + ecx + 1]
test al, al
jne 0x4f6251
mov edi, dword [esp + 0x1c]
push ebp
push 0x104
mov ecx, edi
call fcn.005bcb8a
push 5
mov ecx, edi
call fcn.005bd7ed
jmp case.0x4f6098.1001
mov eax, dword [ebp + 0x3c]
test eax, eax
je case.0x4f6098.1001
mov eax, dword [esp + 0x5d4]
test eax, eax
je case.0x4f6098.1001
mov ecx, dword [ebp + 0x90]
and ecx, 0xfffffffc
cmp ecx, 4
jne case.0x4f6098.1001
lea ebx, [ebp + 0x9c]
mov ecx, ebx
mov dword [esp + 0x1c], ebx
call fcn.004418a0
mov edx, dword [ebp + 0x88]
mov ecx, dword [ebp + 0x3c]
push 0
push 0
mov eax, dword [edx]
mov ecx, dword [ecx + 0x4c]
push eax
add ecx, 0x14
call fcn.004f4200
lea esi, [eax + 0x18]
push esi
call fcn.00492830
add esi, eax
push esi
call fcn.00492830
add esi, eax
add esp, 8
mov esi, dword [esi]
push 0
push 0
push 0x8070
mov edx, dword [esi + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edx
call esi
mov edi, eax
test edi, edi
je 0x4f636f
push 0
push 0
push 0x8071
push edi
call esi
xor esi, esi
mov dword [esp + 0x20], eax
test eax, eax
jle 0x4f636f
lea ebx, [ebp + 0x14c]
lea eax, [esp + 0x2c]
mov byte [esp + 0x2c], 0
push eax
push esi
push 0x8072
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, ebx
call fcn.005bb0cc
mov eax, dword [esp + 0x20]
inc esi
cmp esi, eax
jl 0x4f633b
mov ebx, dword [esp + 0x1c]
push ebp
push 0x104
mov ecx, ebx
call fcn.005bcb8a
push 5
mov ecx, ebx
call fcn.005bd7ed
jmp case.0x4f6098.1001
cmp ebx, 0x3f0
jne 0x4f63a0
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
mov eax, dword [esp + 0x28]
test eax, eax
je case.0x4f6098.1001
mov esi, dword [eax + 0x10]
test esi, esi
je case.0x4f6098.1001
lea ebx, [ebp + 0x9c]
mov ecx, ebx
mov dword [esp + 0x1c], ebx
call fcn.004418a0
mov edx, dword [0x6707bc]
mov dword [esp + 0x10], edx
mov al, byte [esi]
xor edi, edi
test al, al
mov byte [esp + 0x5cc], 1
je 0x4f649c
lea ebx, [ebp + 0x14c]
mov eax, dword [esp + 0x20]
cmp eax, 0x3ee
jne 0x4f6426
lea ecx, [esp + 0x2c]
mov eax, edi
push ecx
push eax
inc edi
call fcn.00502570
add esp, 8
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x14]
call fcn.005bc5aa
push 0x65eec4
lea ecx, [esp + 0x14]
call fcn.005bc7fd
jmp 0x4f646a
cmp eax, 0x3e8
jne 0x4f6461
push esi
call fcn.0052eec9
push esi
mov edi, eax
call fcn.00492830
add esp, 8
lea ecx, [ebp + 0x160]
add esi, eax
push edi
call fcn.00491be0
lea eax, [esp + 0x2c]
push eax
push edi
call fcn.00502570
add esp, 8
lea ecx, [esp + 0x2c]
push ecx
jmp 0x4f640d
lea ecx, [esp + 0x10]
call fcn.005bc3ac
push esi
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [ebx + 8]
lea edx, [esp + 0x10]
push edx
push eax
mov ecx, ebx
call fcn.005bb0f8
push esi
call fcn.00492830
add esi, eax
add esp, 4
cmp byte [esi], 0
jne 0x4f63ec
mov ebx, dword [esp + 0x1c]
push ebp
push 0x104
mov ecx, ebx
call fcn.005bcb8a
push 5
mov ecx, ebx
call fcn.005bd7ed
mov byte [esp + 0x5cc], 0
lea ecx, [esp + 0x10]
jmp 0x4f6d50
lea ecx, [ebp + 0x9c]
mov dword [esp + 0x1c], ecx
call fcn.004418a0
mov eax, dword [0x6707bc]
mov dword [esp + 0x10], eax
mov byte [esp + 0x5cc], 2
xor edi, edi
lea ebx, [ebp + 0x14c]
mov esi, 0x66bff0
lea ecx, [esp + 0x2c]
push ecx
push edi
call fcn.00502570
add esp, 8
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc5aa
push 0x65eec4
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [esi + 4]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x10]
push ecx
push eax
mov ecx, ebx
call fcn.005bb0f8
mov eax, dword [esi]
lea ecx, [ebp + 0x160]
push eax
call fcn.00491be0
add esi, 8
inc edi
cmp esi, 0x66c070
jl 0x4f64f0
mov esi, dword [esp + 0x1c]
push ebp
push 0x104
mov ecx, esi
call fcn.005bcb8a
push 5
mov ecx, esi
call fcn.005bd7ed
mov byte [esp + 0x5cc], 0
lea ecx, [esp + 0x10]
jmp 0x4f6d50
lea ecx, [esp + 0x2c]
call fcn.004918b0
mov eax, dword [esp + 0x14]
mov byte [esp + 0x5cc], 3
test eax, eax
mov ebx, 0x3c
je 0x4f65a3
cmp dword [esp + 0x18], ebx
jne 0x4f65a3
push ebx
jmp 0x4f65c3
lea edx, [esp + 0x1a0]
push edx
push ebx
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
push ebx
lea eax, [esp + 0x1a4]
push eax
lea ecx, [esp + 0x34]
call fcn.00492170
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
neg eax
sbb eax, eax
push 0
and eax, edx
push 0
push 0x101
push eax
lea ecx, [esp + 0x88]
call fcn.005b96aa
lea ecx, [esp + 0x78]
mov byte [esp + 0x5cc], 4
call fcn.005b97a2
cmp eax, 1
jne 0x4f665b
lea ecx, [esp + 0x1a0]
push ecx
lea ecx, [esp + 0x7c]
call fcn.005b97ea
cmp dword [esp + 0x18], ebx
jne 0x4f663c
mov esi, dword [esp + 0x14]
mov ecx, 0xf
lea edi, [esp + 0x1a0]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
mov eax, edx
setne al
cmp eax, 1
jne 0x4f665b
mov edx, dword [ebp + 0x40]
lea ecx, [esp + 0x14]
lea eax, [esp + 0x1a0]
push ecx
push edx
mov ecx, ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
call fcn.004f9a30
lea ecx, [esp + 0x78]
mov byte [esp + 0x5cc], 3
call fcn.005bcb4c
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5cc], 0
mov dword [esp + 0x2c], 0x5f7940
call fcn.00491ab0
jmp case.0x4f6098.1001
cmp ebx, 0x3f9
jne 0x4f6699
mov edi, 0x65d92c
jmp 0x4f66ac
xor eax, eax
cmp ebx, 0x3f7
setne al
dec eax
and eax, 0x65d938
mov edi, eax
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4f66bc
or eax, 0xffffffff
jmp 0x4f66c5
push eax
call fcn.0052eec9
add esp, 4
mov ecx, dword [ebp + 0x148]
mov edx, dword [esi]
push 0x65d6f0
push edi
push ebp
push eax
push ecx
push edx
mov ecx, 0x6756e0
call fcn.00474100
jmp case.0x4f6098.1001
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
push 0
lea ecx, [esp + 0x7c]
call fcn.00453a30
mov eax, dword [esp + 0x18]
mov byte [esp + 0x5cc], 5
test eax, eax
mov esi, eax
jle 0x4f6723
push eax
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x190]
call fcn.00492170
lea ecx, [esp + 0x78]
call fcn.005bcf16
cmp eax, 1
jne 0x4f6777
mov eax, dword [esp + 0x198]
mov edx, dword [esp + 0x190]
cmp eax, esi
jne 0x4f6757
mov esi, dword [esp + 0x14]
mov edi, eax
neg edi
sbb edi, edi
mov ecx, eax
and edi, edx
xor ebx, ebx
repe cmpsb byte [esi], byte es:[edi]
je 0x4f6777
mov ecx, eax
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x40]
neg ecx
sbb ecx, ecx
and ecx, edx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], ecx
push edx
push eax
mov ecx, ebp
call fcn.004f9a30
lea ecx, [esp + 0x188]
mov byte [esp + 0x5cc], 9
mov dword [esp + 0x188], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x14c]
mov byte [esp + 0x5cc], 8
call fcn.005d12e5
lea ecx, [esp + 0x110]
mov byte [esp + 0x5cc], 7
call fcn.005d12e5
lea ecx, [esp + 0xd4]
mov byte [esp + 0x5cc], 6
call fcn.005d12e5
lea ecx, [esp + 0x78]
mov byte [esp + 0x5cc], 0
call fcn.005bcb4c
jmp case.0x4f6098.1001
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
mov ecx, dword [0x6707bc]
mov dword [esp + 0x10], ecx
push 0
push 0
push 0
push 0x65f998
lea edx, [esp + 0x20]
push 0x65f984
mov bl, 0xa
push edx
push 0
mov ecx, 0x6756e0
mov byte [esp + 0x5e8], bl
call fcn.0043f470
cmp eax, 1
jne 0x4f68d7
lea ecx, [esp + 0x2c]
call fcn.004918b0
lea eax, [esp + 0x10]
mov byte [esp + 0x5cc], 0xb
push eax
call fcn.005002a0
add esp, 4
test eax, eax
jne 0x4f6873
mov ecx, dword [esp + 0x10]
push ecx
call dword [0x675fd4]
test eax, eax
jne 0x4f6873
push 0x66c1f0
call fcn.004ff630
add esp, 4
jmp 0x4f68bf
lea edx, [esp + 0x10]
push 0xffffffffffffffff
push edx
lea ecx, [esp + 0x34]
call fcn.00491e70
cmp eax, 0xffffffff
jne 0x4f6897
push 0x66c1d4
call fcn.004ff630
add esp, 4
jmp 0x4f68bf
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov ecx, eax
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x40]
lea edx, [esp + 0x14]
neg ecx
sbb ecx, ecx
push edx
and ecx, edi
push eax
mov dword [esp + 0x1c], ecx
mov ecx, ebp
call fcn.004f9a30
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5cc], bl
mov dword [esp + 0x2c], 0x5f7940
call fcn.00491ab0
mov byte [esp + 0x5cc], 0
lea ecx, [esp + 0x10]
jmp 0x4f6d50
mov ecx, dword [esp + 0x5d4]
mov eax, 1
cmp ecx, eax
jne case.0x4f6098.1001
mov ecx, dword [ebp + 0x90]
and ecx, 0xfffffffc
cmp ecx, 4
jne case.0x4f6098.1001
cmp dword [ebp + 0x74], eax
jne case.0x4f6098.1001
mov edx, dword [ebp + 0x40]
push 0
push edx
mov ecx, ebp
call fcn.004f9a30
jmp case.0x4f6098.1001
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
mov eax, dword [0x6707bc]
mov dword [esp + 0x10], eax
push 0
push 0
push 0x65fc48
push 0x65fc30
lea ecx, [esp + 0x20]
push 0x65fc1c
mov bl, 0xc
push ecx
push 0
mov ecx, 0x6756e0
mov byte [esp + 0x5e8], bl
call fcn.0043f470
cmp eax, 1
jne 0x4f6a0a
lea ecx, [esp + 0x2c]
call fcn.004918b0
mov edx, dword [esp + 0x10]
mov byte [esp + 0x5cc], 0xd
push edx
call dword [0x675fa0]
cmp eax, 3
je 0x4f69a6
push 0x66c1bc
call fcn.004ff630
add esp, 4
jmp 0x4f69f2
lea eax, [esp + 0x10]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x34]
call fcn.00491e70
cmp eax, 0xffffffff
jne 0x4f69ca
push 0x66c1a0
call fcn.004ff630
add esp, 4
jmp 0x4f69f2
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov ecx, eax
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x40]
lea edx, [esp + 0x14]
neg ecx
sbb ecx, ecx
push edx
and ecx, edi
push eax
mov dword [esp + 0x1c], ecx
mov ecx, ebp
call fcn.004f9a30
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5cc], bl
mov dword [esp + 0x2c], 0x5f7940
call fcn.00491ab0
mov byte [esp + 0x5cc], 0
lea ecx, [esp + 0x10]
jmp 0x4f6d50
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
push 0
lea ecx, [esp + 0x7c]
call fcn.0044b0c0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ecx
push edx
lea ecx, [esp + 0xdc]
mov byte [esp + 0x5d4], 0xe
call fcn.00492170
lea ecx, [esp + 0x78]
call fcn.005bcf16
cmp eax, 1
jne 0x4f6a8e
mov eax, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
mov ecx, eax
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x40]
lea edx, [esp + 0x14]
neg ecx
sbb ecx, ecx
push edx
and ecx, edi
push eax
mov dword [esp + 0x1c], ecx
mov ecx, ebp
call fcn.004f9a30
lea ecx, [esp + 0x124]
mov byte [esp + 0x5cc], 0x11
call fcn.005ba2cc
lea ecx, [esp + 0xe8]
mov byte [esp + 0x5cc], 0x10
call fcn.005b9cc5
lea ecx, [esp + 0xd4]
mov byte [esp + 0x5cc], 0xf
mov dword [esp + 0xd4], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x78]
mov byte [esp + 0x5cc], 0
call fcn.005bcb4c
jmp case.0x4f6098.1001
mov eax, dword [ebp + 0x3c]
test eax, eax
je case.0x4f6098.1001
mov ecx, dword [esp + 0x5d4]
test ecx, ecx
je case.0x4f6098.1001
mov ecx, dword [ebp + 0x90]
shr ecx, 2
cmp ecx, 1
jl case.0x4f6098.1001
mov edx, dword [ebp + 0x88]
push 0
push 0
mov ecx, dword [edx]
push ecx
mov ecx, dword [eax + 0x4c]
add ecx, 0x14
call fcn.004f4200
lea esi, [eax + 0x18]
push esi
call fcn.00492830
add esi, eax
push esi
call fcn.00492830
add esi, eax
add esp, 8
lea edx, [esp + 0x1dc]
mov esi, dword [esi]
mov byte [esp + 0x1dc], 0
push 0x3e8
push edx
mov eax, dword [esi + 0x1c]
push 0x8073
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov al, byte [esp + 0x1dc]
test al, al
je case.0x4f6098.1001
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4f6b9b
lea ecx, [esp + 0x1dc]
push ecx
push eax
call fcn.0052d867
add esp, 8
test eax, eax
je case.0x4f6098.1001
mov ecx, dword [ebp + 0x40]
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1e0]
push ecx
mov ecx, ebp
mov dword [esp + 0x1c], edx
call fcn.004f9a30
jmp case.0x4f6098.1001
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
push 0
lea ecx, [esp + 0x7c]
call fcn.00450aa0
mov eax, dword [esp + 0x14]
mov byte [esp + 0x5cc], 0x12
test eax, eax
je 0x4f6bf1
push eax
lea ecx, [esp + 0x114]
call fcn.005bc5aa
lea ecx, [esp + 0x78]
call fcn.005bcf16
cmp eax, 1
jne 0x4f6c37
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4f6c1c
mov edx, dword [esp + 0x110]
push edx
push eax
call fcn.0052d7b8
add esp, 8
test eax, eax
je 0x4f6c37
mov edx, dword [ebp + 0x40]
mov eax, dword [esp + 0x110]
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
push ecx
push edx
mov ecx, ebp
call fcn.004f9a30
lea ecx, [esp + 0x110]
mov byte [esp + 0x5cc], 0x14
call fcn.005bc421
lea ecx, [esp + 0xd4]
mov byte [esp + 0x5cc], 0x13
call fcn.005d1625
lea ecx, [esp + 0x78]
mov byte [esp + 0x5cc], 0
call fcn.005bcb4c
jmp case.0x4f6098.1001
cmp dword [esp + 0x5d4], 1
jne case.0x4f6098.1001
mov eax, dword [esp + 0x28]
test eax, eax
je case.0x4f6098.1001
mov esi, dword [eax + 0x10]
xor edi, edi
xor ebx, ebx
cmp esi, edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], edi
je 0x4f6cdd
push esi
mov dword [esp + 0x24], esi
call fcn.00492830
add esi, eax
add esp, 4
cmp byte [esi], 0
je 0x4f6cdd
push esi
mov dword [esp + 0x20], esi
call fcn.00492830
add esi, eax
add esp, 4
cmp byte [esi], 0
je 0x4f6cdd
push esi
mov edi, esi
call fcn.00492830
add esi, eax
add esp, 4
cmp byte [esi], 0x31
sete bl
mov eax, dword [0x6707bc]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
push 0
push ebx
push edi
push ecx
lea eax, [esp + 0x20]
push edx
push eax
push 0
mov ecx, 0x6756e0
mov byte [esp + 0x5e8], 0x15
call fcn.0043f470
cmp eax, 1
jne 0x4f6d44
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4f6d2c
mov ecx, dword [esp + 0x10]
push ecx
push eax
call fcn.0052d867
add esp, 8
test eax, eax
je 0x4f6d44
mov ecx, dword [ebp + 0x40]
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x14]
mov dword [esp + 0x14], edx
push eax
push ecx
mov ecx, ebp
call fcn.004f9a30
mov byte [esp + 0x5cc], 0
lea ecx, [esp + 0x10]
call fcn.005bc421
lea ecx, [esp + 0x24]
mov dword [esp + 0x5cc], 0xffffffff
call fcn.005bc421
pop esi
mov ecx, dword [esp + 0x5c0]
pop edi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5c0
ret 4