Function at 0x4fedbc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff08
push ebx
xor edx, edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x4ffab3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
add eax, 0x2c
push eax
mov eax, dword [ebp - 0x1c]
add eax, 0x16d
push eax
mov eax, dword [ebp - 0x1c]
add eax, 0x24
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x15d]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x4c]
call fcn.0050881c
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x171]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa4], 0
je 0x4fee6a
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
call fcn.0053d530
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
call fcn.00525948
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
call fcn.00525998
add eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x54]
add dword [ebp - 0x7c], eax
jmp 0x4fee7b
push 0
lea eax, [ebp - 0x60]
push eax
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0041a618
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x16d]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x4c]
push eax
call sub.user32.dll_IsIconic
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x25], al
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa4], 0
je 0x4feec7
cmp byte [ebp - 0x25], 0
jne 0x4feec7
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
call fcn.00525998
add eax, eax
add eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x58]
add dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp dword [eax + 0x38], 0
jne 0x4fef15
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa4], 0
je 0x4fef01
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
call fcn.005493ac
mov edx, dword [ebp - 0x94]
mov dword [edx + 0x38], eax
jmp 0x4fef15
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
call fcn.00549360
mov edx, dword [ebp - 0x94]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0xa4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x4c]
xor ecx, ecx
call fcn.005258a4
mov ebx, eax
mov dl, 1
mov eax, dword [ebp - 0x1c]
call fcn.004fe1b4
add ebx, eax
add ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x50], ebx
cmp byte [ebp - 0x25], 0
je 0x4fef64
mov eax, dword [ebp - 0x50]
inc eax
sub eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x80]
sub ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
call fcn.0041a618
jmp 0x4fef80
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x80]
sub ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
call fcn.0041a618
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
cmp byte [eax + 0x2d], 0
je 0x4ffa9d
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0x15c], 1
mov byte [ebp - 0x2c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 0x80]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x1c]
call fcn.0055e2a8
test al, al
je 0x4ffa93
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa4], 0
je 0x4ff005
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x88]
cmp word [eax + 0x34], 1
je 0x4ff009
xor eax, eax
jmp 0x4ff00b
mov al, 1
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x4ff078
mov eax, dword [ebp - 0x1c]
call fcn.004fe5f4
and eax, 0x7f
push eax
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xa8]
xor edx, edx
xor eax, eax
call fcn.0041a5f0
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff00ff
mov ecx, dword [0x5a6b88]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x1c]
call fcn.0053fbac
jmp 0x4ff0c1
mov eax, dword [ebp - 0x1c]
call fcn.004fe5f4
and eax, 0x7f
push eax
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xa8]
xor edx, edx
xor eax, eax
call fcn.0041a5f0
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
push eax
push 0
push 0
push 0
mov edx, dword [0x5a6b88]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
xor ecx, ecx
call fcn.00541420
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004fe920
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004fe8b8
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
pop ecx
call fcn.00557d34
cmp byte [ebp - 0x1d], 0
jne 0x4ff0f4
push ebp
call fcn.004fe9b0
pop ecx
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0xa4], 0
je 0x4ffa37
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x74]
sub edx, eax
jl 0x4ff191
inc edx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 0x78]
call fcn.0042daa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x70]
sub edx, eax
jl 0x4ff186
inc edx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x6c]
mov byte [eax + edx*4 + 3], 0xff
inc dword [ebp - 0x6c]
dec dword [ebp - 0x9c]
jne 0x4ff16d
inc dword [ebp - 0x78]
dec dword [ebp - 0x98]
jne 0x4ff142
mov eax, dword [ebp - 0x1c]
call fcn.004fe5f4
test al, al
je 0x4ff1bc
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x138]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0xa4]
mov dword [edx + 0x24], eax
jmp 0x4ff1d9
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x13c]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0xa4]
mov dword [edx + 0x24], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
cmp dword [eax + 0x24], 0
je 0x4ffa37
cmp byte [ebp - 0x1d], 0
je 0x4ff481
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
movsx eax, word [eax + 0x9a]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041a618
lea eax, [ebp - 0xb8]
push eax
imul eax, dword [ebp - 0x84], 0xd
mov edx, dword [ebp - 0xa0]
mov edx, dword [edx + 0x8c]
movsx eax, word [edx + eax*4 + 0x32]
push eax
lea eax, [ebp - 0xc8]
push eax
imul eax, dword [ebp - 0x84], 0xd
mov edx, dword [ebp - 0xa0]
mov edx, dword [edx + 0x8c]
movsx ecx, word [edx + eax*4 + 0x30]
imul eax, dword [ebp - 0x84], 0xd
mov edx, dword [ebp - 0xa0]
mov edx, dword [edx + 0x8c]
movsx edx, word [edx + eax*4 + 0x2e]
imul eax, dword [ebp - 0x84], 0xd
mov ebx, dword [ebp - 0xa0]
mov ebx, dword [ebx + 0x8c]
movsx eax, word [ebx + eax*4 + 0x2c]
call fcn.0041a618
lea eax, [ebp - 0xc8]
push eax
push 0xff
lea eax, [ebp - 0xd8]
push eax
mov ecx, 0xff
mov edx, 0xff
mov eax, 0xff
call fcn.0041a618
lea eax, [ebp - 0xd8]
push eax
push 1
lea eax, [ebp - 0xe8]
push eax
mov ecx, 1
mov edx, 1
mov eax, 1
call fcn.0041a618
lea eax, [ebp - 0xe8]
push eax
push 0
push 0
mov eax, dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x80]
xor edx, edx
xor eax, eax
call fcn.0041a618
lea ecx, [ebp - 0xf8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.005418c0
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x80]
call fcn.005493ac
mov dword [ebp - 0x90], eax
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.0042d930
call fcn.00429320
push eax
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x80]
push eax
push 0
push 0
mov eax, dword [ebp - 0x90]
call fcn.0042d930
call fcn.00429320
push eax
call sub.gdi32.dll_BitBlt
push ebp
call fcn.004fe9b0
pop ecx
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
pop edx
call fcn.0042fbd4
dec eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
call dword [edx + 0x2c]
dec eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x74]
test eax, eax
jl 0x4ff471
inc eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x78], 0
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x90]
call fcn.0042daa0
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 0x78]
call fcn.0042daa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x70]
test eax, eax
jl 0x4ff466
inc eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x6c]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x6c]
cmp eax, dword [edx + ecx*4]
je 0x4ff45b
mov eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x6c]
mov byte [eax + edx*4 + 3], 0xff
inc dword [ebp - 0x6c]
dec dword [ebp - 0x9c]
jne 0x4ff433
inc dword [ebp - 0x78]
dec dword [ebp - 0x98]
jne 0x4ff3f3
mov eax, dword [ebp - 0x90]
call fcn.00403f34
jmp 0x4ffa37
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041a618
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x88]
movsx eax, word [eax + 0x30]
add eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x88]
movsx eax, word [eax + 0x30]
add eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x88]
movsx eax, word [eax + 0x30]
add eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x88]
movsx eax, word [eax + 0x30]
add eax, dword [ebp - 0x60]
pop edx
pop ecx
call fcn.0041a618
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x60]
push eax
push 1
lea eax, [ebp - 0xd8]
push eax
mov ecx, 1
mov edx, 1
mov eax, 1
call fcn.0041a618
lea eax, [ebp - 0xd8]
push eax
push 0
push 0
mov eax, dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0x80]
xor edx, edx
xor eax, eax
call fcn.0041a618
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.005418c0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x24]
call fcn.0055e270
test al, al
je 0x4ff5cb
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov eax, dword [eax + 0x94]
imul edx, dword [ebp - 0x24], 0x23
mov eax, dword [eax + edx*4 + 0x78]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x24]
call fcn.0055e270
test al, al
je 0x4ff717
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x24]
call fcn.005650f0
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x24]
call fcn.00565174
add eax, dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x24]
call fcn.00565044
mov ecx, eax
add ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
call fcn.0041a618
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0xd
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.004ebbe4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x24]
call fcn.00565174
add eax, dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x5c]
pop ecx
call fcn.0041a618
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0xa8]
mov edx, dword [ebp - 0x5c]
call fcn.0041a5f0
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0xe
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.004ebbe4
jmp 0x4ff87b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.005650f0
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.00565174
mov edx, 8
call fcn.0042fbd4
add eax, dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.00565044
mov edx, 8
call fcn.0042fbd4
mov ecx, eax
add ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
call fcn.0041a618
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0xd
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.004ebbe4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.00565174
add eax, dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x5c]
pop ecx
call fcn.0041a618
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0xa8]
mov edx, dword [ebp - 0x5c]
call fcn.0041a5f0
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0xe
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.004ebbe4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.00564fc0
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.005650f0
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x54]
mov edx, dword [edx + 0x18]
call fcn.00565044
add eax, dword [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, eax
sub edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x60]
pop ecx
call fcn.0041a618
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, eax
sub edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x78]
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 0x60]
call fcn.0041a5f0
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0x10
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.004ebbe4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x6c]
pop edx
pop ecx
call fcn.0041a618
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0xa8]
pop edx
call fcn.0041a5f0
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
push eax
push 0x11
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa4]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x38]
call fcn.004ebbe4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
call fcn.00554c34
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x18]
call fcn.00525bd0
test al, al
je 0x4ffa7d
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x178], 0
je 0x4ffa75
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x178]
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp eax, dword [ebp - 0x80]
je 0x4ffa7d
mov eax, dword [ebp - 0x1c]
call fcn.004fe7c4
mov dl, 1
mov eax, dword [ebp - 0x1c]
call fcn.004fe1b4
test eax, eax
je 0x4ffa93
mov eax, dword [ebp - 0x1c]
call fcn.004ffd20
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x54]
mov byte [eax + 0x2d], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ffaba
lea eax, [ebp - 0x64]
call fcn.00405508
ret