Function at 0x4ac1b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb4
mov eax, dword [0x991fc0]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
push esi
mov esi, dword [esp + 0xc0]
xor bl, bl
mov byte [esp + 8], 1
mov eax, dword [esi + 0x14]
cmp byte [eax + 0x1e], bl
sete byte [esp + 9]
mov cl, byte [eax + 0x1e]
mov byte [esp + 0xa], cl
cmp byte [eax + 0x1e], bl
jne 0x4ac200
mov ecx, dword [eax + 0xa4]
and ecx, 0x801
cmp ecx, 1
jne 0x4ac200
mov cl, cl
jmp 0x4ac202
xor cl, cl
mov byte [esp + 0xb], cl
mov cl, byte [eax + 0x64]
mov byte [esp + 0xc], cl
cmp byte [eax + 0x2b], bl
je 0x4ac21b
cmp byte [eax + 0x28], bl
jne 0x4ac21b
xor cl, cl
jmp 0x4ac21d
mov cl, 1
mov byte [esp + 0xd], cl
cmp byte [eax + 0x54], bl
sete byte [esp + 0xe]
cmp byte [eax + 0x52], bl
sete byte [esp + 0xf]
cmp byte [eax + 0x7c], bl
jne 0x4ac24b
cmp byte [eax + 0x7d], bl
je 0x4ac247
test dword [esi + 0x10c], 0x400
je 0x4ac24b
xor cl, cl
jmp 0x4ac24d
mov cl, 1
mov byte [esp + 0x10], cl
cmp byte [eax + 0x75], bl
sete byte [esp + 0x11]
cmp byte [eax + 0x76], bl
sete byte [esp + 0x12]
cmp byte [eax + 0x77], bl
sete byte [esp + 0x13]
cmp byte [eax + 0x7b], bl
sete byte [esp + 0x14]
cmp byte [eax + 0x79], bl
sete byte [esp + 0x15]
cmp byte [eax + 0x78], bl
sete byte [esp + 0x16]
cmp byte [eax + 0x7a], bl
sete byte [esp + 0x17]
movzx ecx, byte [eax + 7]
mov byte [esp + 0x18], cl
cmp byte [eax + 7], bl
sete byte [esp + 0x19]
movzx ecx, byte [eax + 8]
mov byte [esp + 0x1a], cl
cmp byte [eax + 8], bl
sete byte [esp + 0x1b]
movzx ecx, byte [eax + 9]
mov byte [esp + 0x1c], cl
cmp byte [eax + 9], bl
sete byte [esp + 0x1d]
movzx ecx, byte [eax + 0x2b]
mov byte [esp + 0x1e], cl
cmp byte [eax + 0x2b], bl
jne 0x4ac2d5
test byte [eax + 0xa8], 8
lea edx, [eax + 0xa8]
je 0x4ac2e9
mov ecx, dword [eax + 0xa8]
lea edx, [eax + 0xa8]
and ecx, 0x50
cmp cl, 0x50
jne 0x4ac2ed
xor cl, cl
jmp 0x4ac2ef
mov cl, 1
mov byte [esp + 0x1f], cl
mov cl, byte [eax + 0x28]
mov byte [esp + 0x20], cl
mov ecx, dword [edx]
cmp byte [eax + 0x28], bl
jne 0x4ac306
test cl, 0x10
je 0x4ac30f
test cl, 0x40
jne 0x4ac30f
mov cl, 1
jmp 0x4ac311
xor cl, cl
mov byte [esp + 0x21], cl
cmp byte [eax + 0x28], bl
sete byte [esp + 0x22]
cmp byte [eax + 0x28], bl
jne 0x4ac32b
test byte [edx], 0x10
jne 0x4ac32b
mov cl, 1
jmp 0x4ac32d
xor cl, cl
mov byte [esp + 0x23], cl
mov cl, byte [eax + 0x29]
mov byte [esp + 0x24], cl
cmp byte [eax + 0x29], bl
jne 0x4ac34c
test byte [eax + 0xa8], 0x40
lea edx, [eax + 0xa8]
je 0x4ac35f
test byte [eax + 0xa8], 0x10
lea edx, [eax + 0xa8]
jne 0x4ac35f
mov cl, 1
jmp 0x4ac361
xor cl, cl
mov byte [esp + 0x25], cl
movzx ecx, byte [eax + 0x2a]
mov byte [esp + 0x26], cl
movzx ecx, byte [eax + 1]
mov byte [esp + 0x27], cl
movzx ecx, byte [eax + 2]
mov byte [esp + 0x28], cl
movzx ecx, byte [eax + 3]
mov byte [esp + 0x29], cl
movzx ecx, byte [eax + 4]
mov byte [esp + 0x2a], cl
movzx ecx, byte [eax + 5]
mov byte [esp + 0x2b], cl
movzx ecx, byte [eax + 6]
mov byte [esp + 0x2c], cl
movzx ecx, byte [eax + 0x25]
mov byte [esp + 0x2d], cl
cmp byte [eax + 0x25], bl
sete byte [esp + 0x2e]
movzx ecx, byte [eax + 0x26]
mov byte [esp + 0x2f], cl
cmp byte [eax + 0xb], bl
sete byte [esp + 0x30]
cmp byte [eax + 0x21], bl
sete byte [esp + 0x31]
movzx ecx, byte [eax + 0xb]
mov byte [esp + 0x32], cl
cmp byte [eax + 0x20], bl
sete byte [esp + 0x33]
mov edx, dword [edx]
shr edx, 0xb
cmp byte [eax + 0x20], bl
not dl
sete cl
and dl, cl
mov byte [esp + 0x34], dl
cmp byte [eax + 0x22], bl
je 0x4ac3f6
cmp byte [eax + 0x1e], bl
jne 0x4ac3f6
mov cl, 1
jmp 0x4ac3f8
xor cl, cl
mov byte [esp + 0x35], cl
cmp byte [eax + 0x23], bl
je 0x4ac40a
cmp byte [eax + 0x1e], bl
jne 0x4ac40a
mov cl, 1
jmp 0x4ac40c
xor cl, cl
mov byte [esp + 0x36], cl
cmp byte [eax + 0x22], bl
sete byte [esp + 0x37]
cmp byte [eax + 0x23], bl
mov byte [esp + 0x39], 1
sete byte [esp + 0x38]
cmp byte [eax + 0x22], bl
jne 0x4ac436
test dword [eax + 0xa4], 0x400
je 0x4ac44b
cmp byte [eax + 0x1e], bl
jne 0x4ac44b
test dword [eax + 0xa4], 0x200
jne 0x4ac44b
mov cl, 1
jmp 0x4ac44d
xor cl, cl
mov byte [esp + 0x3a], cl
cmp byte [eax + 0x23], bl
jne 0x4ac462
test dword [eax + 0xa4], 0x400
je 0x4ac477
cmp byte [eax + 0x1e], bl
jne 0x4ac477
test dword [eax + 0xa4], 0x200
jne 0x4ac477
mov cl, 1
jmp 0x4ac479
xor cl, cl
mov byte [esp + 0x3b], cl
cmp byte [eax + 0x22], bl
jne 0x4ac492
test dword [eax + 0xa4], 0x400
jne 0x4ac492
mov cl, 1
jmp 0x4ac494
xor cl, cl
mov byte [esp + 0x3c], cl
cmp byte [eax + 0x23], bl
jne 0x4ac4ad
test dword [eax + 0xa4], 0x400
jne 0x4ac4ad
mov cl, 1
jmp 0x4ac4af
xor cl, cl
mov byte [esp + 0x3d], cl
mov ecx, dword [eax + 0xa4]
shr ecx, 0xa
not cl
and cl, 1
mov byte [esp + 0x3e], cl
movzx ecx, byte [eax + 0x1c]
mov byte [esp + 0x3f], cl
movzx ecx, byte [eax + 0x1d]
mov byte [esp + 0x40], cl
cmp byte [eax + 0x36], bl
sete byte [esp + 0x41]
movzx ecx, byte [eax + 0x66]
mov byte [esp + 0x42], cl
movzx ecx, byte [eax + 0x67]
mov byte [esp + 0x43], cl
cmp byte [eax + 0x65], bl
sete byte [esp + 0x44]
cmp byte [eax + 0x66], bl
sete byte [esp + 0x45]
cmp byte [eax + 0x67], bl
sete byte [esp + 0x46]
movzx ecx, byte [eax + 0x68]
mov byte [esp + 0x47], cl
cmp byte [eax + 0x68], bl
je 0x4ac51b
cmp byte [eax + 0x67], bl
jne 0x4ac51b
mov cl, 1
jmp 0x4ac51d
xor cl, cl
mov byte [esp + 0x48], cl
cmp byte [eax + 0xa], bl
je 0x4ac540
cmp byte [eax + 0x7c], bl
jne 0x4ac53c
cmp byte [eax + 0x7d], bl
je 0x4ac540
test dword [esi + 0x10c], 0x400
jne 0x4ac540
mov cl, 1
jmp 0x4ac542
xor cl, cl
mov byte [esp + 0x49], cl
movzx ecx, byte [eax + 0xa]
mov byte [esp + 0x4a], cl
cmp byte [eax + 0xa], bl
sete byte [esp + 0x4b]
movzx ecx, byte [eax]
mov byte [esp + 0x4c], cl
movzx ecx, byte [eax + 0xc]
mov byte [esp + 0x4d], cl
cmp byte [eax + 0xc], bl
sete byte [esp + 0x4e]
movzx ecx, byte [eax + 0xd]
mov byte [esp + 0x4f], cl
mov ecx, dword [eax + 0xa8]
shr ecx, 0xe
not cl
and cl, 1
mov byte [esp + 0x50], cl
cmp byte [eax + 0x40], bl
sete byte [esp + 0x51]
cmp byte [eax + 0x41], bl
sete byte [esp + 0x52]
movzx ecx, byte [eax + 0x73]
mov byte [esp + 0x53], cl
movzx ecx, byte [eax + 0x36]
mov byte [esp + 0x54], cl
cmp byte [eax + 0x37], bl
jne 0x4ac5b5
cmp byte [eax + 0x3f], bl
jne 0x4ac5b5
xor cl, cl
jmp 0x4ac5b7
mov cl, 1
mov byte [esp + 0x55], cl
movzx ecx, byte [eax + 0x7f]
mov byte [esp + 0x56], cl
movzx ecx, byte [eax + 0x3d]
mov byte [esp + 0x57], cl
cmp byte [eax + 0x3e], bl
jne 0x4ac5d9
cmp byte [eax + 0x3f], bl
jne 0x4ac5d9
xor cl, cl
jmp 0x4ac5db
mov cl, 1
mov byte [esp + 0x58], cl
cmp byte [eax + 0x3d], bl
sete byte [esp + 0x59]
movzx ecx, byte [eax + 0x7e]
mov byte [esp + 0x5a], cl
cmp byte [eax + 0x13], bl
sete byte [esp + 0x5b]
cmp byte [eax + 0x14], bl
sete byte [esp + 0x5c]
cmp byte [eax + 0x15], bl
sete byte [esp + 0x5d]
movzx ecx, byte [eax + 0xe]
mov byte [esp + 0x5e], cl
movzx ecx, byte [eax + 0x16]
mov byte [esp + 0x5f], cl
movzx ecx, byte [eax + 0x17]
mov byte [esp + 0x60], cl
cmp byte [eax + 0x10], bl
je 0x4ac638
cmp byte [eax + 0x82], bl
je 0x4ac638
cmp byte [eax + 0x83], bl
je 0x4ac638
mov cl, 1
jmp 0x4ac63a
xor cl, cl
mov byte [esp + 0x61], cl
mov cl, byte [eax + 0x50]
mov byte [esp + 0x62], cl
cmp byte [eax + 0x51], bl
jne 0x4ac657
test byte [eax + 0xa4], 0x40
jne 0x4ac657
xor cl, cl
jmp 0x4ac659
mov cl, 1
mov byte [esp + 0x63], cl
mov cl, byte [eax + 0x55]
mov byte [esp + 0x64], cl
cmp byte [eax + 0x52], bl
jne 0x4ac679
test dword [eax + 0xa4], 0x1000040
jne 0x4ac679
xor cl, cl
jmp 0x4ac67b
mov cl, 1
mov byte [esp + 0x65], cl
movzx ecx, byte [eax + 0x52]
mov byte [esp + 0x66], cl
movzx ecx, byte [eax + 0x53]
mov byte [esp + 0x67], cl
mov ecx, dword [eax + 0xa4]
shr ecx, 0x14
and cl, 1
mov byte [esp + 0x68], cl
mov ecx, dword [eax + 0xa4]
shr ecx, 0x15
and cl, 1
mov byte [esp + 0x69], cl
mov ecx, dword [eax + 0xa4]
shr ecx, 0xa
and cl, 1
mov byte [esp + 0x6a], cl
mov ecx, dword [eax + 0xa4]
shr ecx, 5
and cl, 1
mov byte [esp + 0x6b], cl
cmp byte [eax + 0x10], bl
je 0x4ac6f0
cmp byte [eax + 0x82], bl
je 0x4ac6ec
cmp byte [eax + 0x83], bl
jne 0x4ac6f0
cmp byte [eax + 0x84], bl
jne 0x4ac6f0
mov cl, 1
jmp 0x4ac6f2
xor cl, cl
mov byte [esp + 0x6c], cl
cmp byte [eax + 0x10], bl
je 0x4ac70f
cmp byte [eax + 0x82], bl
je 0x4ac70f
cmp byte [eax + 0x84], bl
je 0x4ac70f
mov cl, 1
jmp 0x4ac711
xor cl, cl
mov byte [esp + 0x6d], cl
cmp byte [eax + 0xf], bl
je 0x4ac726
cmp byte [eax + 0x81], bl
je 0x4ac726
mov cl, 1
jmp 0x4ac728
xor cl, cl
mov byte [esp + 0x6e], cl
mov cl, byte [eax + 0x82]
mov byte [esp + 0x6f], cl
cmp byte [eax + 0xf], bl
je 0x4ac747
cmp byte [eax + 0x81], bl
jne 0x4ac747
mov cl, 1
jmp 0x4ac749
xor cl, cl
mov byte [esp + 0x70], cl
cmp byte [eax + 0x13], bl
je 0x4ac763
cmp byte [eax + 0x7e], bl
jne 0x4ac763
cmp byte [eax + 0x85], bl
jne 0x4ac763
mov cl, 1
jmp 0x4ac765
xor cl, cl
mov byte [esp + 0x71], cl
cmp byte [eax + 0x13], bl
je 0x4ac777
cmp byte [eax + 0x7e], bl
je 0x4ac777
mov cl, 1
jmp 0x4ac779
xor cl, cl
mov byte [esp + 0x72], cl
cmp byte [eax + 0x13], bl
je 0x4ac78e
cmp byte [eax + 0x85], bl
je 0x4ac78e
mov cl, 1
jmp 0x4ac790
xor cl, cl
mov byte [esp + 0x73], cl
cmp byte [eax + 0x14], bl
je 0x4ac7a2
cmp byte [eax + 0x7e], bl
je 0x4ac7a2
mov cl, 1
jmp 0x4ac7a4
xor cl, cl
mov byte [esp + 0x74], cl
cmp byte [eax + 0x14], bl
je 0x4ac7b9
cmp byte [eax + 0x85], bl
je 0x4ac7b9
mov cl, 1
jmp 0x4ac7bb
xor cl, cl
mov byte [esp + 0x75], cl
cmp byte [eax + 0x85], bl
jne 0x4ac7d0
cmp byte [eax + 0x7e], bl
je 0x4ac7d0
mov cl, 1
jmp 0x4ac7d2
xor cl, cl
mov byte [esp + 0x76], cl
movzx ecx, byte [eax + 0x15]
mov byte [esp + 0x77], cl
movzx ecx, byte [eax + 0x40]
mov byte [esp + 0x78], cl
movzx ecx, byte [eax + 0x41]
mov byte [esp + 0x79], cl
movzx ecx, byte [eax + 0x2f]
mov byte [esp + 0x7a], cl
cmp byte [eax + 0x31], bl
je 0x4ac804
cmp byte [eax + 0x73], bl
jne 0x4ac804
mov cl, 1
jmp 0x4ac806
xor cl, cl
mov byte [esp + 0x7b], cl
cmp byte [eax + 0x31], bl
je 0x4ac818
cmp byte [eax + 0x73], bl
je 0x4ac818
mov cl, 1
jmp 0x4ac81a
xor cl, cl
mov byte [esp + 0x7c], cl
mov cl, byte [eax + 0x30]
mov byte [esp + 0x7d], cl
cmp byte [eax + 0x32], bl
je 0x4ac833
cmp byte [eax + 0x73], bl
jne 0x4ac833
mov cl, 1
jmp 0x4ac835
xor cl, cl
mov byte [esp + 0x7e], cl
cmp byte [eax + 0x32], bl
je 0x4ac847
cmp byte [eax + 0x73], bl
je 0x4ac847
mov cl, 1
jmp 0x4ac849
xor cl, cl
mov byte [esp + 0x7f], cl
movzx ecx, byte [eax + 0x39]
mov byte [esp + 0x80], cl
movzx ecx, byte [eax + 0x3b]
mov byte [esp + 0x81], cl
movzx ecx, byte [eax + 0x3a]
mov byte [esp + 0x82], cl
movzx ecx, byte [eax + 0x3c]
mov byte [esp + 0x83], cl
movzx ecx, byte [eax + 0x3f]
mov byte [esp + 0x84], cl
cmp byte [eax + 0x3f], bl
je 0x4ac899
test dword [esi + 0x10c], 0x1000
jne 0x4ac899
mov cl, 1
jmp 0x4ac89b
xor cl, cl
mov byte [esp + 0x85], cl
cmp byte [eax + 0x3f], bl
je 0x4ac8b7
test dword [esi + 0x10c], 0x1000
je 0x4ac8b7
mov cl, 1
jmp 0x4ac8b9
xor cl, cl
mov byte [esp + 0x86], cl
movzx ecx, byte [eax + 0x1f]
mov byte [esp + 0x87], cl
cmp byte [eax + 0x1f], bl
sete byte [esp + 0x88]
movzx ecx, byte [eax + 0x20]
mov byte [esp + 0x89], cl
mov ecx, dword [eax + 0xa8]
shr ecx, 0xb
and cl, 1
mov byte [esp + 0x8a], cl
cmp byte [eax + 0x6a], bl
sete byte [esp + 0x8b]
cmp byte [eax + 0x6b], bl
sete byte [esp + 0x8c]
cmp byte [eax + 0x6d], bl
sete byte [esp + 0x8d]
movzx ecx, byte [eax + 0x6a]
mov byte [esp + 0x8e], cl
movzx ecx, byte [eax + 0x6d]
mov byte [esp + 0x8f], cl
movzx ecx, byte [eax + 0x6b]
mov byte [esp + 0x90], cl
cmp byte [eax + 0x52], bl
jne 0x4ac94b
test dword [eax + 0xa4], 0x1000040
jne 0x4ac94b
mov cl, 1
jmp 0x4ac94d
xor cl, cl
mov byte [esp + 0x91], cl
cmp byte [eax + 0x53], bl
sete byte [esp + 0x92]
cmp byte [eax + 0x53], bl
jne 0x4ac974
test dword [eax + 0xa4], 0x100000
jne 0x4ac974
mov cl, 1
jmp 0x4ac976
xor cl, cl
mov byte [esp + 0x93], cl
movzx ecx, byte [eax + 0x54]
mov byte [esp + 0x94], cl
movzx ecx, byte [eax + 0x89]
mov byte [esp + 0x95], cl
movzx ecx, byte [eax + 0x8a]
mov byte [esp + 0x96], cl
movzx ecx, byte [eax + 0x2d]
mov byte [esp + 0x97], cl
cmp byte [eax + 0x11], bl
sete byte [esp + 0x98]
cmp byte [esi + 0x44], 5
movzx ecx, byte [eax + 0x86]
mov byte [esp + 0x99], cl
jne 0x4ac9db
test byte [esi + 0x148], 3
jne 0x4ac9db
mov cl, 1
jmp 0x4ac9dd
xor cl, cl
mov byte [esp + 0x9a], cl
movzx ecx, byte [eax + 0x1b]
mov byte [esp + 0x9b], cl
movzx ecx, byte [eax + 0xb6]
mov byte [esp + 0x9c], cl
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x9d], cl
cmp byte [eax + 0x60], bl
sete byte [esp + 0x9e]
mov ecx, dword [eax + 0xa4]
shr ecx, 0xb
and cl, 1
mov byte [esp + 0x9f], cl
mov ecx, dword [eax + 0xa4]
shr ecx, 8
and cl, 1
mov byte [esp + 0xa0], cl
movzx ecx, byte [eax + 0x6f]
mov byte [esp + 0xa1], cl
movzx ecx, byte [eax + 0x70]
mov byte [esp + 0xa2], cl
movzx ecx, byte [eax + 0x6c]
mov byte [esp + 0xa3], cl
movzx ecx, byte [eax + 0x71]
mov byte [esp + 0xa4], cl
cmp byte [eax + 0x71], bl
je 0x4aca7d
test dword [eax + 0xa8], 0x200
jne 0x4aca7d
mov cl, 1
jmp 0x4aca7f
xor cl, cl
mov byte [esp + 0xa5], cl
mov cl, byte [eax + 0x19]
mov byte [esp + 0xa6], cl
cmp byte [eax + 0x72], bl
jne 0x4aca9e
cmp byte [eax + 0x1a], bl
jne 0x4aca9e
xor cl, cl
jmp 0x4acaa0
mov cl, 1
mov byte [esp + 0xa7], cl
movzx ecx, byte [eax + 0x1a]
mov byte [esp + 0xa8], cl
movzx ecx, byte [eax + 0x21]
mov byte [esp + 0xa9], cl
movzx ecx, byte [eax + 0x69]
mov byte [esp + 0xaa], cl
cmp byte [eax + 0x69], bl
je 0x4acadd
test dword [eax + 0xa4], 0x2000000
jne 0x4acadd
mov cl, 1
jmp 0x4acadf
xor cl, cl
mov byte [esp + 0xab], cl
movzx ecx, byte [eax + 0x60]
mov byte [esp + 0xac], cl
movzx ecx, byte [eax + 0x27]
mov byte [esp + 0xad], cl
movzx ecx, byte [eax + 0x2c]
mov byte [esp + 0xae], cl
mov cl, byte [esi + 0x44]
test cl, cl
je 0x4acb1f
cmp cl, 3
je 0x4acb1f
cmp byte [eax + 0x87], bl
jne 0x4acb1f
mov cl, 1
jmp 0x4acb21
xor cl, cl
mov byte [esp + 0xaf], cl
mov cl, byte [eax + 0x80]
mov byte [esp + 0xb0], cl
cmp byte [eax + 0x42], bl
sete byte [esp + 0xb1]
cmp byte [eax + 0x43], bl
sete byte [esp + 0xb2]
cmp byte [eax + 0xb5], bl
sete byte [esp + 0xb3]
cmp byte [eax + 0xb7], bl
je 0x4acb71
test dword [esi + 0x10c], 0x8000
jne 0x4acb71
mov cl, 1
jmp 0x4acb73
xor cl, cl
mov byte [esp + 0xb4], cl
mov cl, byte [eax + 0x6e]
mov byte [esp + 0xb5], cl
cmp byte [eax + 0x6e], bl
je 0x4acb95
cmp byte [eax + 0x9b], bl
jne 0x4acb95
mov al, 1
jmp 0x4acb97
xor al, al
mov esi, dword [esi + 0x168]
mov byte [esp + 0xb6], al
xor eax, eax
cmp dword [esi], eax
cmove esi, eax
test esi, esi
je 0x4acc16
nop
cmp dword [esi + 0x18], eax
jne 0x4acbd6
mov esi, dword [esi]
cmp dword [esi], eax
je 0x4acc16
test esi, esi
jne 0x4acbb0
pop esi
pop ebx
mov ecx, dword [esp + 0xb0]
xor ecx, esp
call fcn.004eef15
add esp, 0xb4
ret
test esi, esi
je 0x4acc16
mov eax, dword [esi + 0x18]
nop dword [eax]
push 0x55c014
lea ecx, [esp + 0xc]
push ecx
push eax
call fcn.004b6fc0
mov esi, dword [esi]
add esp, 0xc
or al, bl
setne bl
cmp dword [esi], 0
je 0x4acc14
test esi, esi
je 0x4acc14
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x4acbe0
mov esi, dword [esi]
cmp dword [esi], eax
je 0x4acc14
test esi, esi
jne 0x4acc03
mov al, bl
mov ecx, dword [esp + 0xb8]
pop esi
pop ebx
xor ecx, esp
call fcn.004eef15
add esp, 0xb4
ret