Function at 0x427b50
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4cf554
mov eax, dword fs:[0]
push eax
sub esp, 0x154
mov eax, dword [0x4fa36c]
xor eax, esp
mov dword [esp + 0x150], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4fa36c]
xor eax, esp
push eax
lea eax, [esp + 0x168]
mov dword fs:[0], eax
push 9
xor ebx, ebx
push str.QUICKLINK
lea esi, [esp + 0x20]
mov edi, ecx
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov dword [esp + 0x170], ebx
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
mov ecx, esi
push ecx
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x30], 8
mov ebp, eax
jb 0x427be4
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x427d77
push 3
push 0x4dab64
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 1
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov esi, eax
jb 0x427c57
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x427c7b
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0x4fd87c
push esi
mov ecx, edi
call eax
push 4
push str.NAME
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 2
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov esi, eax
jb 0x427cd5
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x427cf9
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0x4fd5f8
push esi
mov ecx, edi
call eax
push 8
push str.FILENAME
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 3
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov esi, eax
jb 0x427d53
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x427d77
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0x4fd860
push esi
mov ecx, edi
call eax
call fcn.0043f230
push 6
push str.ADVERT
lea esi, [esp + 0x3c]
mov byte [esp + 0x68], al
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 4
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
mov eax, esi
push eax
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov ebp, eax
jb 0x427dd9
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x42803b
mov eax, 7
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ebx
mov word [esp + 0x84], bx
mov dword [esp + 0x170], 5
push 4
push str.FILE
lea esi, [esp + 0x20]
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov byte [esp + 0x170], 6
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 5
cmp dword [esp + 0x30], 8
mov ebp, eax
jb 0x427e68
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x428016
mov edx, dword [edi]
mov edx, dword [edx + 0x14]
push ebp
lea eax, [esp + 0x68]
push eax
mov ecx, edi
call edx
push 0xffffffffffffffff
push ebx
push eax
lea eax, [esp + 0x8c]
mov byte [esp + 0x17c], 7
call fcn.004017c0
mov byte [esp + 0x170], 5
cmp dword [esp + 0x7c], 8
jb 0x427ec4
mov eax, dword [esp + 0x68]
push eax
call fcn.004a93cc
add esp, 4
push 4
push str.FILE
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x94]
cmp ecx, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
lea edx, [esp + 0x58]
jb 0x427f04
lea edx, [esp + 0x5c]
mov ecx, dword [esp + 0x38]
mov esi, 8
cmp dword [esp + 0x4c], esi
jae 0x427f17
lea ecx, [esp + 0x38]
cmp dword [esp + 0x98], esi
mov eax, dword [esp + 0x84]
jae 0x427f2e
lea eax, [esp + 0x84]
mov edx, dword [edx]
push edx
push ecx
call fcn.0042c3b0
add esp, 8
test eax, eax
setne byte [esp + 0x17]
cmp dword [esp + 0x4c], esi
jb 0x427f54
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x428002
lea eax, [esp + 0x9c]
call fcn.00428910
mov edx, dword [esp + 0x60]
lea ecx, [esp + 0x9c]
push ecx
push edx
push ebp
mov byte [esp + 0x17c], 8
call fcn.00427440
mov byte [esp + 0x23], al
add esp, 0xc
lea eax, [esp + 0x9c]
push eax
mov esi, 0x4fdb68
call fcn.00429870
cmp byte [esp + 0x17], bl
je 0x427fee
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0xd8]
mov byte [esp + 0x174], 9
call fcn.00433c00
test al, al
jne 0x427fdb
lea edx, [esp + 0x9c]
push edx
mov esi, 0x4fd8a8
call fcn.00429870
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x427fee
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x50], ebx
lea esi, [esp + 0x9c]
mov byte [esp + 0x170], 5
call fcn.00428980
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ebp
mov ecx, edi
call edx
mov ebp, eax
cmp ebp, ebx
jne 0x427e81
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x98], 8
jb 0x42803b
mov eax, dword [esp + 0x84]
push eax
call fcn.004a93cc
add esp, 4
push 5
push str.POPUP
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 0xa
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
mov eax, esi
push eax
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov ebp, eax
jb 0x428094
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x4282d1
mov eax, 7
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ebx
mov word [esp + 0x84], bx
mov dword [esp + 0x170], 0xb
push 3
push 0x4dab64
lea esi, [esp + 0x20]
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov byte [esp + 0x170], 0xc
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0xb
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x428123
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x428147
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0x4fbddc
push esi
mov ecx, edi
call eax
push 6
push str.ACTIVE
lea esi, [esp + 0x20]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov byte [esp + 0x170], 0xd
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0xb
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x42819b
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x42820f
mov edx, dword [edi]
mov edx, dword [edx + 0x34]
lea eax, [esp + 0x80]
push eax
push esi
mov ecx, edi
call edx
push 1
push 0x4d8a90
lea esi, [esp + 0x20]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov eax, esi
lea esi, [esp + 0x80]
call fcn.0042c350
test eax, eax
sete al
cmp dword [esp + 0x30], 8
mov byte [0x4fbdf8], al
jb 0x42820f
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004a93cc
add esp, 4
push 6
push str.ACTION
lea esi, [esp + 0x20]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov byte [esp + 0x170], 0xe
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0xb
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x428263
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x4282ac
mov edx, dword [edi]
mov edx, dword [edx + 0x34]
lea eax, [esp + 0x80]
push eax
push esi
mov ecx, edi
call edx
cmp dword [esp + 0x98], 8
mov eax, dword [esp + 0x84]
jae 0x4282a2
lea eax, [esp + 0x84]
call fcn.0042c290
mov dword [0x4fbdfc], eax
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x98], 8
jb 0x4282d1
mov eax, dword [esp + 0x84]
push eax
call fcn.004a93cc
add esp, 4
push 5
push str.FORCE
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 0xf
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
mov eax, esi
push eax
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov ebp, eax
jb 0x42832a
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x42858c
mov eax, 7
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ebx
mov word [esp + 0x84], bx
mov dword [esp + 0x170], 0x10
push 4
push str.FILE
lea esi, [esp + 0x20]
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
call fcn.004018b0
mov byte [esp + 0x170], 0x11
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
mov eax, esi
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0x10
cmp dword [esp + 0x30], 8
mov ebp, eax
jb 0x4283b9
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x428567
mov edx, dword [edi]
mov edx, dword [edx + 0x14]
push ebp
lea eax, [esp + 0x68]
push eax
mov ecx, edi
call edx
push 0xffffffffffffffff
push ebx
push eax
lea eax, [esp + 0x8c]
mov byte [esp + 0x17c], 0x12
call fcn.004017c0
mov byte [esp + 0x170], 0x10
cmp dword [esp + 0x7c], 8
jb 0x428415
mov eax, dword [esp + 0x68]
push eax
call fcn.004a93cc
add esp, 4
push 4
push str.FILE
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x94]
cmp ecx, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], ecx
lea edx, [esp + 0x5c]
jb 0x428455
lea edx, [esp + 0x58]
mov ecx, dword [esp + 0x38]
mov esi, 8
cmp dword [esp + 0x4c], esi
jae 0x428468
lea ecx, [esp + 0x38]
cmp dword [esp + 0x98], esi
mov eax, dword [esp + 0x84]
jae 0x42847f
lea eax, [esp + 0x84]
mov edx, dword [edx]
push edx
push ecx
call fcn.0042c3b0
add esp, 8
test eax, eax
setne byte [esp + 0x17]
cmp dword [esp + 0x4c], esi
jb 0x4284a5
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x428553
lea eax, [esp + 0x9c]
call fcn.00428910
mov edx, dword [esp + 0x60]
lea ecx, [esp + 0x9c]
push ecx
push edx
push ebp
mov byte [esp + 0x17c], 0x13
call fcn.00427440
mov byte [esp + 0x23], al
add esp, 0xc
lea eax, [esp + 0x9c]
push eax
mov esi, 0x4fd898
call fcn.00429870
cmp byte [esp + 0x17], bl
je 0x42853f
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0xd8]
mov byte [esp + 0x174], 0x14
call fcn.00433c00
test al, al
jne 0x42852c
lea edx, [esp + 0x9c]
push edx
mov esi, 0x4fd8b8
call fcn.00429870
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x42853f
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x50], ebx
lea esi, [esp + 0x9c]
mov byte [esp + 0x170], 0x10
call fcn.00428980
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ebp
mov ecx, edi
call edx
mov ebp, eax
cmp ebp, ebx
jne 0x4283d2
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x98], 8
jb 0x42858c
mov eax, dword [esp + 0x84]
push eax
call fcn.004a93cc
add esp, 4
push 9
push str.TIPADVERT
lea esi, [esp + 0x3c]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
call fcn.004018b0
mov dword [esp + 0x170], 0x15
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
mov eax, esi
push eax
mov ecx, edi
call edx
mov dword [esp + 0x170], 0xffffffff
cmp dword [esp + 0x4c], 8
mov ebp, eax
jb 0x4285e5
mov eax, dword [esp + 0x38]
push eax
call fcn.004a93cc
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], bx
je 0x4288e0
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], ebx
mov word [esp + 0x84], bx
mov dword [esp + 0x170], 0x16
mov edx, str.width
lea eax, [esp + 0x18]
mov dword [0x4fbd98], 0xffffffff
call fcn.00401740
mov byte [esp + 0x170], 0x17
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
lea eax, [esp + 0x18]
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0x16
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x428670
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x4286b9
mov edx, dword [edi]
mov edx, dword [edx + 0x34]
lea eax, [esp + 0x80]
push eax
push esi
mov ecx, edi
call edx
cmp dword [esp + 0x98], 8
mov eax, dword [esp + 0x84]
jae 0x4286af
lea eax, [esp + 0x84]
call fcn.0042c290
mov dword [0x4fbd98], eax
mov edx, str.height
lea eax, [esp + 0x18]
mov dword [0x4fbd9c], 0xffffffff
call fcn.00401740
mov byte [esp + 0x170], 0x18
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x18]
push ecx
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0x16
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x428706
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x42874f
mov edx, dword [edi]
mov edx, dword [edx + 0x34]
lea eax, [esp + 0x80]
push eax
push esi
mov ecx, edi
call edx
cmp dword [esp + 0x98], 8
mov eax, dword [esp + 0x84]
jae 0x428745
lea eax, [esp + 0x84]
call fcn.0042c290
mov dword [0x4fbd9c], eax
mov edx, 0x4daf94
lea eax, [esp + 0x18]
call fcn.00401740
mov byte [esp + 0x170], 0x19
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x18]
push ecx
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0x16
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x428792
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x4287b6
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0x4fbda4
push esi
mov ecx, edi
call eax
mov edx, str.time
lea eax, [esp + 0x18]
mov dword [0x4fbda0], 0xffffffff
call fcn.00401740
mov byte [esp + 0x170], 0x1a
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
lea eax, [esp + 0x18]
push eax
push ebp
mov ecx, edi
call edx
mov byte [esp + 0x170], 0x16
cmp dword [esp + 0x30], 8
mov esi, eax
jb 0x428803
mov eax, dword [esp + 0x1c]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], bx
je 0x42884c
mov edx, dword [edi]
mov edx, dword [edx + 0x34]
lea eax, [esp + 0x80]
push eax
push esi
mov ecx, edi
call edx
cmp dword [esp + 0x98], 8
mov eax, dword [esp + 0x84]
jae 0x428842
lea eax, [esp + 0x84]
call fcn.0042c290
mov dword [0x4fbda0], eax
push ebx
push 0x4d8004
mov esi, 0x4fbdc0
call fcn.004018b0
mov edx, str.gameid
lea eax, [esp + 0x64]
call fcn.00401740
mov byte [esp + 0x170], 0x1b
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x64]
push ecx
push ebp
mov ecx, edi
call edx
mov ebp, 8
mov byte [esp + 0x170], 0x16
cmp dword [esp + 0x7c], ebp
mov esi, eax
jb 0x4288a3
mov eax, dword [esp + 0x68]
push eax
call fcn.004a93cc
add esp, 4
cmp esi, ebx
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], ebx
mov word [esp + 0x68], bx
je 0x4288c7
mov edx, dword [edi]
mov eax, dword [edx + 0x34]
push 0x4fbdc0
push esi
mov ecx, edi
call eax
cmp dword [esp + 0x98], ebp
jb 0x4288e0
mov ecx, dword [esp + 0x84]
push ecx
call fcn.004a93cc
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x168]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x150]
xor ecx, esp
call fcn.004a9ce9
add esp, 0x160
ret