Function at 0x45fbd4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66836c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2ad8
call fcn.00667624
push ebx
push esi
push edi
push 4
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
cmp dword [ebp - 0x14], 0xffffffff
jne 0x45fc1a
mov eax, 2
jmp 0x460886
push 4
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
lea ecx, [ebp - 0x24f8]
call fcn.0040b004
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x24f8]
call fcn.0040b1a4
push 0x100
lea eax, [ebp - 0x25f8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0xc]
lea eax, [ebp - 0x25f8]
push eax
mov ecx, dword [0x6f4a3c]
add ecx, 0x61c
call fcn.0040a934
mov dword [ebp - 0x25fc], eax
mov eax, dword [ebp - 0x25fc]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x2600], ecx
cmp dword [ebp - 0x2600], 0
jne 0x45fd00
lea eax, [ebp - 0x25f8]
push eax
push 0x3a
call fcn.004d0914
add esp, 8
push 0x3a
call fcn.00456eb4
add esp, 4
cmp dword [0x6e65c4], 1
jl 0x45fcd9
lea eax, [ebp - 0x25f8]
push eax
push 0x69d4a4
push 0x69d490
mov ecx, dword [0x6d7970]
push ecx
call fcn.00457c74
add esp, 0x10
mov dword [ebp - 0x2adc], 0x3a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24f8]
call fcn.0040b354
mov eax, dword [ebp - 0x2adc]
jmp 0x460886
lea ecx, [ebp - 0x2790]
call fcn.004a9494
mov byte [ebp - 4], 1
push 1
lea eax, [ebp - 0x26e8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
lea eax, [ebp - 0x270c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
lea eax, [ebp - 0x2708]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 1
lea eax, [ebp - 0x26e6]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
lea ecx, [ebp - 0x279c]
call fcn.0040b384
lea eax, [ebp - 0x279c]
push eax
mov ecx, dword [ebp + 8]
call fcn.00460f24
lea eax, [ebp - 0x279c]
push eax
lea ecx, [ebp - 0x2790]
call fcn.004397f4
lea eax, [ebp - 0x24e8]
push eax
mov ecx, dword [ebp + 8]
call fcn.00460f24
push 0xc
lea eax, [ebp - 0x26f8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 0x10
lea eax, [ebp - 0x26c0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
lea eax, [ebp - 0x2704]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx ax, byte [ebp - 0x26e8]
mov word [ebp - 0x24f8], ax
mov eax, dword [ebp - 0x270c]
mov dword [ebp - 0x24f4], eax
mov eax, dword [ebp - 0x2708]
mov dword [ebp - 0x24f0], eax
lea ecx, [ebp - 0x2790]
call fcn.00413e34
push eax
lea ecx, [ebp - 0x24dc]
call fcn.0041b9f4
lea eax, [ebp - 0x26f8]
push eax
lea ecx, [ebp - 0x24d0]
call fcn.0041b9f4
lea eax, [ebp - 0x26c0]
push eax
lea ecx, [ebp - 0x24c4]
call fcn.004144a4
mov al, byte [ebp - 0x26e6]
mov byte [ebp - 0x24ec], al
push 0x7f
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0xc]
push 0x7f
lea eax, [ebp - 0x24ac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0xc]
movzx eax, byte [ebp - 0x26e8]
cmp eax, 1
jne 0x45ff5c
mov word [ebp - 0x27a0], 1
jmp 0x45fe99
mov ax, word [ebp - 0x27a0]
add ax, 1
mov word [ebp - 0x27a0], ax
movzx eax, word [ebp - 0x27a0]
cmp eax, 0x20
jge 0x45fec6
push 0x7f
movzx eax, word [ebp - 0x27a0]
shl eax, 7
lea ecx, [ebp + eax - 0x24ac]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
call dword [eax + 0xc]
jmp 0x45fe87
mov word [ebp - 0x27a0], 0
jmp 0x45fee3
mov ax, word [ebp - 0x27a0]
add ax, 1
mov word [ebp - 0x27a0], ax
movzx eax, word [ebp - 0x27a0]
cmp eax, 0x20
jge 0x45ff10
push 0x7f
movzx eax, word [ebp - 0x27a0]
shl eax, 7
lea ecx, [ebp + eax - 0x14ac]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
call dword [eax + 0xc]
jmp 0x45fed1
mov word [ebp - 0x27a0], 0
jmp 0x45ff2d
mov ax, word [ebp - 0x27a0]
add ax, 1
mov word [ebp - 0x27a0], ax
movzx eax, word [ebp - 0x27a0]
cmp eax, 8
jge 0x45ff5a
push 0x7f
movzx eax, word [ebp - 0x27a0]
shl eax, 7
lea ecx, [ebp + eax - 0x4ac]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
call dword [eax + 0xc]
jmp 0x45ff1b
jmp 0x45ff84
push 0x7f
lea eax, [ebp - 0x14ac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0xc]
push 0x7f
lea eax, [ebp - 0x4ac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0xc]
mov dword [ebp - 0x27a4], 0
movzx eax, byte [ebp - 0x26e8]
cmp eax, 4
jne 0x45ffae
push 4
lea eax, [ebp - 0x27a4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx eax, byte [ebp - 0x26e8]
cmp eax, 9
jne 0x45ffce
push 2
lea eax, [ebp - 0x24f6]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
mov eax, dword [ebp - 0x2600]
push eax
call fcn.004c45a4
add esp, 4
mov dword [ebp - 0x27a8], eax
mov eax, dword [ebp - 0x25fc]
mov dword [ebp - 0x24b0], eax
push 0x40400000
lea eax, [ebp - 0x24f8]
push eax
mov ecx, dword [ebp - 0x27a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x27a8]
call dword [edx + 0xc]
mov dword [ebp - 0x27ac], eax
cmp dword [ebp - 0x27ac], 0
jne 0x460087
mov eax, dword [ebp - 0x27a8]
push eax
mov ecx, dword [ebp - 0x2600]
push ecx
call fcn.004c4604
add esp, 8
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0x14]
mov dword [ebp - 0x2ad8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2790]
call fcn.004a9734
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24f8]
call fcn.0040b354
mov eax, dword [ebp - 0x2ad8]
jmp 0x460886
lea eax, [ebp - 0x27b0]
push eax
push 0x40400000
push 0xffff
lea ecx, [ebp - 0x24f8]
push ecx
mov edx, dword [ebp - 0x2600]
push edx
mov eax, dword [ebp - 0x27a8]
push eax
call fcn.004d1174
add esp, 0x18
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4600f3
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2ad4], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2790]
call fcn.004a9734
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24f8]
call fcn.0040b354
mov eax, dword [ebp - 0x2ad4]
jmp 0x460886
mov eax, dword [ebp - 0x27b0]
mov ecx, dword [ebp - 0x2704]
mov dword [eax + 0x8c], ecx
mov eax, dword [ebp - 0x27b0]
movzx ecx, byte [eax + 0xa8]
cmp ecx, 4
jne 0x460129
mov eax, dword [ebp - 0x27b0]
mov ecx, dword [ebp - 0x27a4]
mov dword [eax + 0x190], ecx
push 1
mov eax, dword [ebp - 0x27b0]
add eax, 0xa9
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 1
lea eax, [ebp - 0x27b1]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx eax, byte [ebp - 0x27b1]
test eax, eax
je 0x460245
push 2
lea eax, [ebp - 0x27b8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx eax, word [ebp - 0x27b8]
push eax
call fcn.0045ca74
add esp, 4
movzx eax, word [ebp - 0x27b8]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x27bc], eax
mov eax, dword [ebp - 0x27bc]
push eax
mov ecx, dword [0x6f1854]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
call dword [eax + 8]
lea ecx, [ebp - 0x27c8]
call fcn.004150e4
mov byte [ebp - 4], 2
movzx eax, word [ebp - 0x27b8]
push eax
mov ecx, dword [0x6f1854]
push ecx
lea ecx, [ebp - 0x27c8]
call fcn.004aefb4
lea eax, [ebp - 0x27c8]
push eax
lea ecx, [ebp - 0x2ad0]
call fcn.004151b4
mov dword [ebp - 0x2ae0], eax
mov ecx, dword [ebp - 0x2ae0]
mov dword [ebp - 0x2ae4], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x2ae4]
push edx
mov eax, dword [ebp - 0x27b0]
mov ecx, dword [eax + 0x18c]
add ecx, 0x24
call fcn.004608a4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2ad0]
call fcn.00415224
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x27c8]
call fcn.00415124
mov eax, dword [ebp - 0x27b0]
movzx ecx, byte [eax + 0xa8]
cmp ecx, 1
jne 0x460483
mov ecx, dword [ebp - 0x27b0]
call fcn.00439214
mov dword [ebp - 0x27cc], eax
mov byte [ebp - 0x27cd], 0
push 1
lea eax, [ebp - 0x27cd]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
mov dword [ebp - 0x27d4], 0
jmp 0x4602a2
mov eax, dword [ebp - 0x27d4]
add eax, 1
mov dword [ebp - 0x27d4], eax
movzx eax, byte [ebp - 0x27cd]
cmp dword [ebp - 0x27d4], eax
jae 0x460483
push 1
lea eax, [ebp - 0x27d5]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx eax, byte [ebp - 0x27d5]
cmp eax, 0xff
je 0x4602f6
mov al, byte [ebp - 0x27d5]
push eax
mov ecx, dword [ebp - 0x27b0]
push ecx
mov edx, dword [0x6f1844]
mov eax, dword [edx]
mov ecx, dword [0x6f1844]
call dword [eax + 0x78]
mov al, byte [ebp - 0x27d5]
push eax
mov ecx, dword [ebp - 0x27cc]
call fcn.004ac4e4
mov dword [ebp - 0x27dc], eax
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x10
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x44
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 2
mov eax, dword [ebp - 0x27dc]
add eax, 0x14
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x3c
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x40
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 2
mov eax, dword [ebp - 0x27dc]
add eax, 0x16
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x18
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 0x28
mov eax, dword [ebp - 0x27dc]
add eax, 0x48
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x30
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x34
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 2
mov eax, dword [ebp - 0x27dc]
add eax, 0x20
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 2
mov eax, dword [ebp - 0x27dc]
add eax, 0x22
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x24
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 2
mov eax, dword [ebp - 0x27dc]
add eax, 0x28
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 2
mov eax, dword [ebp - 0x27dc]
add eax, 0x2a
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27dc]
add eax, 0x2c
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
jmp 0x460293
push 1
mov eax, dword [ebp - 0x27b0]
add eax, 0x90
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 1
mov eax, dword [ebp - 0x27b0]
add eax, 0x91
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 1
mov eax, dword [ebp - 0x27b0]
add eax, 0x92
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 1
mov eax, dword [ebp - 0x27b0]
add eax, 0x93
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
lea eax, [ebp - 0x279c]
push eax
mov ecx, dword [ebp + 8]
call fcn.00460f24
lea eax, [ebp - 0x279c]
push eax
mov ecx, dword [ebp - 0x27b0]
call fcn.00460924
push 4
mov eax, dword [ebp - 0x27b0]
add eax, 0xc0
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 0xc
mov eax, dword [ebp - 0x27b0]
add eax, 0xe0
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27b0]
add eax, 0xf8
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 0xc
mov eax, dword [ebp - 0x27b0]
add eax, 0xfc
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
mov eax, dword [ebp - 0x27b0]
add eax, 0x128
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 4
lea eax, [ebp - 0x27e0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
mov word [ebp - 0x27e4], 0
mov eax, dword [ebp - 0x27e0]
and eax, 0x100
je 0x46064d
push 2
lea eax, [ebp - 0x27e4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx eax, word [ebp - 0x27e4]
cmp eax, 0x1e
jl 0x46064d
lea eax, [ebp - 0x25f8]
push eax
push 0x3a
call fcn.004d0914
add esp, 8
push 0x3a
call fcn.00456eb4
add esp, 4
cmp dword [0x6e65c4], 1
jl 0x460617
lea eax, [ebp - 0x25f8]
push eax
push 0x69d4a4
push 0x69d490
mov ecx, dword [0x6d7970]
push ecx
call fcn.00457c74
add esp, 0x10
mov dword [ebp - 0x2ab4], 0x3a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2790]
call fcn.004a9734
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24f8]
call fcn.0040b354
mov eax, dword [ebp - 0x2ab4]
jmp 0x460886
lea ecx, [ebp - 0x2854]
call fcn.00439614
mov eax, dword [ebp - 0x27b0]
movzx ecx, byte [eax + 0xa9]
push ecx
mov edx, dword [ebp - 0x27b0]
push edx
mov eax, dword [0x6f4a3c]
mov ecx, dword [eax + 0x4e8]
push ecx
mov edx, dword [0x6f1848]
mov eax, dword [edx]
mov ecx, dword [0x6f1848]
call dword [eax + 0x24]
push eax
lea ecx, [ebp - 0x2854]
call fcn.00439694
mov ecx, dword [ebp - 0x27b0]
call fcn.0045d9c4
mov ecx, dword [eax]
mov dword [ebp - 0x2860], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x285c], edx
mov eax, dword [eax + 8]
mov dword [ebp - 0x2858], eax
push 0
push 0
lea eax, [ebp - 0x2860]
push eax
lea ecx, [ebp - 0x2854]
push ecx
call fcn.0049d3d4
add esp, 0x10
mov eax, dword [ebp - 0x27e0]
and eax, 0x18
push eax
mov ecx, dword [ebp - 0x27b0]
push ecx
call fcn.004c4124
add esp, 8
mov eax, dword [ebp - 0x27b0]
mov ecx, dword [ebp - 0x27e0]
mov dword [eax + 0x134], ecx
push 0xa
lea eax, [ebp - 0x24dc]
push eax
mov ecx, dword [ebp - 0x27b0]
push ecx
call fcn.004d8a84
add esp, 0xc
mov eax, dword [ebp - 0x27e0]
and eax, 0x100
je 0x46074c
movzx eax, word [ebp - 0x27e4]
mov ecx, dword [0x6f4a3c]
mov edx, dword [ebp - 0x27b0]
mov dx, word [edx + 0xa4]
mov word [ecx + eax*2 + 0x748], dx
call fcn.004bc834
push 1
lea eax, [ebp - 0x2861]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
movzx eax, byte [ebp - 0x2861]
test eax, eax
je 0x46083b
push 4
lea eax, [ebp - 0x2868]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 8]
push 0x200
lea eax, [ebp - 0x2a68]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0xc]
lea eax, [ebp - 0x2a68]
push eax
call fcn.0066760a
add esp, 4
add eax, 0x14
push eax
call fcn.0044a154
add esp, 4
mov dword [ebp - 0x2a6c], eax
mov eax, dword [ebp - 0x2a6c]
mov ecx, dword [ebp - 0x2868]
mov dword [eax + 0xc], ecx
lea eax, [ebp - 0x2a68]
push eax
mov ecx, dword [ebp - 0x2a6c]
add ecx, 0x12
push ecx
call fcn.006675e4
add esp, 8
mov eax, dword [ebp - 0x2a6c]
mov ecx, dword [ebp - 0x27b0]
mov dx, word [ecx + 0xa4]
mov word [eax + 0x10], dx
mov eax, dword [ebp - 0x27b0]
mov ecx, dword [eax + 0x134]
or ecx, 0x80
mov edx, dword [ebp - 0x27b0]
mov dword [edx + 0x134], ecx
mov eax, dword [ebp - 0x2a6c]
push eax
mov ecx, dword [ebp - 0x2a6c]
push ecx
mov edx, dword [0x6f4a3c]
add edx, 0x6d4
push edx
call fcn.004383f4
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x27b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0x14]
mov dword [ebp - 0x2ab0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2790]
call fcn.004a9734
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24f8]
call fcn.0040b354
mov eax, dword [ebp - 0x2ab0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret