Function at 0x4c9520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x74
mov eax, dword [0x67f864]
xor eax, esp
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x78]
push ebx
push ebp
push esi
push edi
xor edi, edi
push edi
mov dword [esp + 0x20], eax
push 0x28
push 2
lea eax, [edi + 0x28]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x20], edi
call fcn.00432080
mov esi, eax
add esp, 0xc
cmp esi, edi
mov dword [esp + 0x40], edi
jne 0x4c9578
lea eax, [edi + 0x64]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.005ce60a
add esp, 0x74
ret
movzx eax, word [esp + 0x8c]
cmp eax, edi
mov dword [esp + 0x18], edi
jle 0x4ca030
xor edx, edx
mov ebp, edx
mov ecx, dword [esp + 0x1c]
fld qword [0x651118]
movzx ebx, word [ecx + ebp*2]
fld qword [0x651080]
cmp bx, 0x8000
jae 0x4c965f
movzx ecx, bx
fstp st(1)
cmp ecx, edx
fstp st(0)
mov word [esp + 0x60], dx
mov word [esp + 0x62], dx
mov word [esp + 0x64], dx
mov word [esp + 0x66], dx
mov word [esp + 0x68], dx
mov edi, 4
je 0x4c960b
jmp 0x4c95e0
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*4]
add edx, edx
sub ecx, edx
mov word [esp + edi*2 + 0x60], cx
sub edi, 1
test eax, eax
mov ecx, eax
jne 0x4c95e0
cmp edi, 4
jne 0x4c9610
mov edi, 3
add edi, 1
cmp edi, 5
jge 0x4c9c47
lea esp, [esp]
mov eax, dword [esi + 0x18]
movzx ebx, word [esp + edi*2 + 0x60]
lea ecx, [esp + 0x48]
add eax, 1
push ecx
push eax
lea edx, [esp + 0x38]
mov eax, esi
call fcn.00432240
add esp, 8
test eax, eax
je 0x4c9652
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x48]
add eax, edx
je 0x4c9652
mov word [eax], bx
add edi, 1
cmp edi, 5
jl 0x4c9620
jmp 0x4c9c47
lea eax, [ebx + 0xc7]
cmp ax, 0x63
ja 0x4c967c
mov ecx, 0x5f9c
fstp st(1)
sub ecx, ebx
fstp st(0)
push ecx
jmp 0x4c9c3d
lea eax, [ebx + 0x1a]
cmp ax, 2
ja 0x4c990c
mov ax, word [ecx + ebp*2 + 4]
mov cx, word [ecx + ebp*2 + 2]
add ebp, 2
xor edi, edi
cmp bx, 0xffe6
mov word [esp + 0x38], ax
mov word [esp + 0x3a], cx
fld dword [esp + 0x38]
mov dword [esp + 0x20], edx
mov dword [esp + 0x18], ebp
jne 0x4c9707
mov eax, dword [0x690770]
cmp eax, edx
je 0x4c9722
cmp eax, 2
jne 0x4c96e1
cmp dword [0x690768], edx
je 0x4c96d5
fstp st(1)
fld1
fdivrp st(2)
fmulp st(1)
jmp 0x4c9726
fstp st(2)
fxch st(1)
fld1
fdivrp st(2)
fmulp st(1)
jmp 0x4c9726
cmp dword [0x690768], edx
je 0x4c96f7
fstp st(1)
fld qword [0x650d88]
fdivrp st(2)
fmulp st(1)
jmp 0x4c9726
fstp st(2)
fxch st(1)
fld qword [0x650d88]
fdivrp st(2)
fmulp st(1)
jmp 0x4c9726
cmp bx, 0xffe7
fstp st(2)
fstp st(0)
jne 0x4c9726
cmp dword [0x690784], edx
je 0x4c9726
fmul qword [0x650d50]
jmp 0x4c9726
fstp st(2)
fstp st(0)
sub esp, 8
fstp qword [esp]
lea edx, [esp + 0x74]
push str._.7g
push edx
call fcn.005cf40e
lea eax, [esp + 0x7c]
push 0x65
push eax
call fcn.005d07a0
add esp, 0x18
neg eax
sbb eax, eax
neg eax
mov dword [esp + 0x54], eax
je 0x4c9762
push 0xb
mov eax, esi
call fcn.004c94d0
add esp, 4
xor ebp, ebp
mov al, byte [esp + ebp + 0x6c]
test al, al
je 0x4c985e
cmp byte [0x683b6e], al
jne 0x4c9786
push 0xa
mov eax, esi
call fcn.004c94d0
jmp 0x4c984f
test edi, edi
je 0x4c9792
cmp al, 0x2b
je 0x4c9852
cmp al, 0x30
jl 0x4c97c0
cmp al, 0x39
jg 0x4c97c0
cmp al, 0x30
jne 0x4c97a6
test edi, edi
jne 0x4c9852
movsx cx, al
sub cx, 0x30
mov eax, esi
push ecx
call fcn.004c94d0
add esp, 4
xor edi, edi
jmp 0x4c9852
cmp al, 0x2d
jne 0x4c97d2
push 0x1005
mov eax, esi
call fcn.004c94d0
jmp 0x4c984f
cmp al, 0x65
jne 0x4c9852
cmp bx, 0xffe8
je 0x4c9817
cmp bx, 0xffe7
jne 0x4c97f3
mov edx, dword [0x690784]
add edx, 0x100
push edx
jmp 0x4c9805
cmp bx, 0xffe6
jne 0x4c980f
mov eax, dword [0x690770]
add eax, 0x200
push eax
mov eax, esi
call fcn.004c94d0
add esp, 4
mov dword [esp + 0x20], 1
push 0x1002
mov eax, esi
call fcn.004c94d0
add esp, 4
push 1
mov eax, esi
call fcn.004c94d0
add esp, 4
push 0
mov eax, esi
call fcn.004c94d0
add esp, 4
push 0x1004
mov eax, esi
call fcn.004c94d0
mov edi, 1
add esp, 4
add ebp, 1
cmp ebp, 0x14
jl 0x4c9764
cmp dword [esp + 0x54], 0
je 0x4c9894
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x5c]
add eax, 1
push ecx
push eax
lea edx, [esp + 0x60]
mov eax, esi
call fcn.00432240
add esp, 8
test eax, eax
je 0x4c9894
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
add eax, edx
je 0x4c9894
mov word [eax], 0xc
cmp dword [esp + 0x20], 0
jne 0x4c9c47
cmp bx, 0xffe7
jne 0x4c98ef
mov eax, dword [esi + 0x18]
mov ecx, dword [0x690784]
lea edx, [esp + 0x2c]
push edx
add eax, 1
add ecx, 0x100
push eax
lea edx, [esp + 0x54]
mov eax, esi
movzx edi, cx
call fcn.00432240
add esp, 8
test eax, eax
je 0x4c9c47
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x2c]
add eax, ecx
je 0x4c9c47
mov word [eax], di
jmp 0x4c9c47
cmp bx, 0xffe6
jne 0x4c9c47
mov edx, dword [0x690770]
add edx, 0x200
push edx
jmp 0x4c9c3d
cmp bx, 0xffe4
fstp st(1)
fstp st(0)
jne 0x4c99f5
movzx eax, word [ecx + ebp*2 + 2]
cmp ax, 0xfff8
jne 0x4c9934
push 0xd
mov eax, esi
call fcn.004c94d0
add esp, 4
jmp 0x4c9969
cmp ax, 0xfff5
jne 0x4c9948
push 0xe
mov eax, esi
call fcn.004c94d0
add esp, 4
jmp 0x4c9969
cmp edi, 0xc
jge 0x4c9958
mov edi, 0xc
mov dword [esp + 0x14], edi
jmp 0x4c996d
cmp edi, 0x14
jge 0x4ca0a7
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
movzx eax, word [ecx + ebp*2 + 4]
cmp ax, 0x80
jb 0x4c99ad
cmp ax, 0x82
jbe 0x4c999a
cmp edi, 0xc
jge 0x4c998d
mov dword [esp + 0x14], 0xc
jmp 0x4c999a
cmp edi, 0x14
jge 0x4ca0a7
mov ebp, dword [esp + 0x18]
movzx eax, ax
movzx ecx, word [eax*4 + 0x629698]
add cx, 0x100
push ecx
jmp 0x4c99df
cmp ax, 2
jbe 0x4c99cf
cmp edi, 0xc
jge 0x4c99c2
mov dword [esp + 0x14], 0xc
jmp 0x4c99cf
cmp edi, 0x14
jge 0x4ca0a7
mov ebp, dword [esp + 0x18]
movzx edx, ax
movzx eax, word [edx*4 + 0x6298a4]
add ax, 0x200
push eax
mov eax, esi
call fcn.004c94d0
add esp, 4
add ebp, 2
mov dword [esp + 0x18], ebp
jmp 0x4c9c47
cmp bx, 0xfed4
jbe 0x4c9a46
mov ecx, 0x629f38
mov eax, 0xffff
cmp ax, bx
je 0x4c9a29
movzx eax, word [ecx + 4]
add ecx, 4
cmp ax, dx
jne 0x4c9a06
cmp edi, 0xc
jge 0x4c9a38
mov dword [esp + 0x14], 0xc
jmp 0x4c9c47
cmp word [ecx], dx
je 0x4c9a17
movzx ecx, word [ecx + 2]
push ecx
jmp 0x4c9c3d
cmp edi, 0x14
jge 0x4ca0a7
jmp 0x4c9c47
movzx eax, bx
add eax, 0xffff0130
cmp eax, 3
ja case.0x4c9a53.65232
jmp dword [eax*4 + 0x4ca0f8]
mov dword [esp + 0x28], 0x49
jmp 0x4c9a8d
mov dword [esp + 0x28], 0x4a
jmp 0x4c9a8d
cmp edi, 0xc
jge 0x4c9a7e
mov edi, 0xc
mov dword [esp + 0x14], edi
jmp 0x4c9a8d
cmp edi, 0x14
jge 0x4ca0a7
mov edi, dword [esp + 0x14]
xor edx, edx
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
cmp eax, edx
jne 0x4c9aaf
cmp edi, 0xc
jl 0x4c9c78
cmp edi, 0x14
jge 0x4ca0a7
mov edi, dword [esp + 0x14]
xor edx, edx
cmp edi, edx
jne 0x4ca0a7
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov cx, 0xff9c
sub cx, word [edi + edx*2 + 2]
add edx, 1
movzx ecx, cx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], edx
call fcn.004cd1b0
test eax, eax
je 0x4c9c78
mov edi, dword [eax + 0xac]
lea ecx, [esp + 0x3c]
mov eax, edi
call fcn.004cd170
cmp word [esp + 0x3c], 2
jne 0x4c9c6b
xor ecx, ecx
mov eax, edi
call fcn.004cd1b0
cmp dword [0x690780], 0
mov edi, eax
je 0x4c9c6b
push 2
lea ecx, [esp + 0x38]
mov eax, 2
call fcn.004cce40
add esp, 4
test eax, eax
je 0x4ca058
mov edx, dword [0x691ca8]
mov eax, dword [esp + 0x34]
lea eax, [eax + edx + 4]
mov dword [eax], edi
mov ecx, dword [0x690780]
mov dword [eax + 4], ecx
mov ebp, dword [esp + 0x34]
test ebp, ebp
mov eax, dword [0x691ca8]
jne 0x4c9b5d
xor ecx, ecx
jmp 0x4c9b6d
cmp word [eax + ebp + 2], 0
ja 0x4c9b69
xor ecx, ecx
jmp 0x4c9b6d
mov ecx, dword [eax + ebp + 4]
mov edi, dword [ecx + 0xb0]
test edi, edi
je 0x4c9bc7
movzx ebx, word [edi + eax + 2]
test bx, bx
lea edi, [edi + eax + 4]
je 0x4c9bc7
mov eax, dword [edi]
mov edx, dword [esp + 0x28]
xor ecx, ecx
cmp edx, dword [eax]
sete cl
test ecx, ecx
je 0x4c9bb1
mov eax, dword [eax + 0xac]
lea ecx, [esp + 0x54]
push ecx
push 0
mov ecx, ebp
call fcn.004cd090
add esp, 8
test eax, eax
jne 0x4c9bc1
add ebx, 0xffff
add edi, 4
test bx, bx
jne 0x4c9b85
jmp 0x4c9bc7
mov ebx, dword [edi]
test ebx, ebx
jne 0x4c9bfd
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x24]
push edx
push 0
push 1
push 0
push 0
xor eax, eax
mov edx, ebp
call fcn.00440390
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x4ca058
push 0
push 4
push ebx
call fcn.00440d10
add esp, 0xc
jmp 0x4c9c06
lea edi, [esp + 0x34]
call fcn.004cce70
push ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x44], 1
call fcn.004ccf50
add esp, 4
test eax, eax
je 0x4ca058
mov eax, dword [ebx]
lea ecx, [esp + 0x20]
call fcn.004cd170
mov eax, dword [esp + 0x20]
add eax, 0xffff
or eax, 0x6000
push eax
mov eax, esi
call fcn.004c94d0
add esp, 4
mov ecx, dword [esp + 0x18]
movzx eax, word [esp + 0x8c]
add ecx, 1
cmp ecx, eax
mov dword [esp + 0x18], ecx
jge 0x4c9c85
mov edi, dword [esp + 0x14]
mov ebp, ecx
xor edx, edx
jmp 0x4c9590
mov dword [esp + 0x14], 0x27
jmp 0x4ca0a7
mov dword [esp + 0x14], 0xc
jmp 0x4ca0a7
cmp dword [esp + 0x40], 0
je 0x4ca029
cmp dword [esp + 0x14], 0
jne 0x4ca0a7
mov eax, dword [esi + 0x18]
add eax, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x4c9cbc
mov ecx, dword [0x691ca8]
movzx ebp, word [eax + ecx + 2]
jmp 0x4c9cbe
xor ebp, ebp
test bp, bp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x24], 0
je 0x4ca030
movzx eax, bp
add eax, eax
add eax, eax
mov dword [esp + 0x20], eax
mov edi, edi
mov edx, dword [esp + 0x44]
mov eax, dword [edx]
mov ecx, dword [0x691ca8]
lea edx, [eax + ecx + 4]
movzx eax, word [esp + 0x24]
mov ebx, dword [edx + eax*4]
lea edi, [edx + eax*4]
xor ecx, ecx
test eax, eax
mov dword [esp + 0x30], 1
mov dword [esp + 0x48], edi
mov dword [esp + 0x28], ecx
jle 0x4c9d21
cmp dword [edx + ecx*4], ebx
je 0x4c9d1d
add ecx, 1
cmp ecx, eax
jl 0x4c9d11
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x3c], 0
mov dword [esp + 0x18], 0
jle 0x4c9e7d
mov eax, dword [esp + 0x24]
or eax, 0x6000
mov dword [esp + 0x4c], eax
cmp dword [esp + 0x18], 0
jl 0x4c9e34
mov edx, dword [esp + 0x18]
mov ecx, dword [esi + 8]
mov eax, edx
sar eax, cl
mov ecx, dword [esi + 4]
and ecx, edx
imul ecx, dword [esi]
cmp eax, dword [esi + 0xc]
mov dword [esp + 0x40], eax
mov dword [esp + 0x2c], ecx
jl 0x4c9dcf
mov ebp, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov eax, ebp
mov dword [esp + 0x34], edx
cdq
and edx, 3
add eax, edx
sar eax, 2
add ebp, eax
mov eax, dword [esp + 0x40]
cmp ebp, eax
jg 0x4c9d8e
lea ebp, [eax + 1]
lea ebx, [ebp*4]
mov eax, 1
lea edi, [esp + 0x34]
call fcn.0043ad90
test eax, eax
je 0x4c9dcf
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x34]
mov ecx, ebp
sub ecx, eax
add ecx, ecx
add ecx, ecx
push ecx
lea eax, [edx + eax*4]
push 0
push eax
call fcn.005d5de0
mov ecx, dword [esp + 0x40]
add esp, 0xc
mov dword [esi + 0x10], ecx
mov dword [esi + 0xc], ebp
mov ebp, dword [esp + 0x40]
cmp ebp, dword [esi + 0xc]
jge 0x4c9e34
mov eax, dword [esi + 0x10]
cmp dword [eax + ebp*4], 0
jne 0x4c9e12
mov ebx, dword [esi + 4]
movzx edx, word [esi + 0x14]
add ebx, 1
imul ebx, dword [esi]
push edx
call fcn.0043ace0
mov edi, eax
add esp, 4
test edi, edi
je 0x4c9e09
push ebx
push 0
push edi
call fcn.005d5de0
add esp, 0xc
mov eax, dword [esi + 0x10]
mov dword [eax + ebp*4], edi
mov eax, dword [esi + 0x10]
mov eax, dword [eax + ebp*4]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x4c9e34
mov ecx, dword [esp + 0x18]
cmp dword [esi + 0x18], ecx
jge 0x4c9e2c
mov dword [esi + 0x18], ecx
mov edx, dword [esp + 0x2c]
add eax, edx
jmp 0x4c9e3a
mov ecx, dword [esp + 0x18]
xor eax, eax
mov dx, word [esp + 0x4c]
cmp dx, word [eax]
jne 0x4c9e5a
movzx edi, word [esp + 0x24]
mov edx, dword [esp + 0x28]
cmp edx, edi
jge 0x4c9e6d
or edx, 0x6000
mov word [eax], dx
add ecx, 1
cmp ecx, dword [esp + 0x3c]
mov dword [esp + 0x18], ecx
jl 0x4c9d41
jmp 0x4c9e75
mov dword [esp + 0x30], 0
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x48]
sub dword [esp + 0x20], 4
add ebp, 0xffff
cmp dword [esp + 0x30], 0
mov dword [esp + 0x1c], ebp
je 0x4ca019
test bp, bp
je 0x4c9eae
mov eax, dword [esp + 0x20]
push eax
lea ecx, [edi + 4]
push ecx
push edi
call fcn.005cf840
add esp, 0xc
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x24]
mov ecx, dword [eax]
mov eax, dword [0x691ca8]
add edx, ebp
cmp dword [esp + 0x3c], 0
mov word [ecx + eax + 2], dx
mov dword [esp + 0x18], 0
jle 0x4ca01e
jmp 0x4c9ee0
cmp dword [esp + 0x18], 0
jl 0x4c9fd3
mov edx, dword [esp + 0x18]
mov ecx, dword [esi + 8]
mov eax, edx
sar eax, cl
mov ecx, dword [esi + 4]
and ecx, edx
imul ecx, dword [esi]
cmp eax, dword [esi + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ecx
jl 0x4c9f6e
mov ebp, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
mov eax, ebp
cdq
and edx, 3
add eax, edx
sar eax, 2
add ebp, eax
mov eax, dword [esp + 0x30]
cmp ebp, eax
mov dword [esp + 0x38], ecx
jg 0x4c9f2d
lea ebp, [eax + 1]
lea ebx, [ebp*4]
mov eax, 1
lea edi, [esp + 0x38]
call fcn.0043ad90
test eax, eax
je 0x4c9f6e
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x38]
mov edx, ebp
sub edx, eax
add edx, edx
add edx, edx
push edx
lea edx, [ecx + eax*4]
push 0
push edx
call fcn.005d5de0
mov eax, dword [esp + 0x44]
add esp, 0xc
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], ebp
mov ebp, dword [esp + 0x30]
cmp ebp, dword [esi + 0xc]
jge 0x4c9fd3
mov eax, dword [esi + 0x10]
cmp dword [eax + ebp*4], 0
jne 0x4c9fb1
mov ebx, dword [esi + 4]
movzx ecx, word [esi + 0x14]
add ebx, 1
imul ebx, dword [esi]
push ecx
call fcn.0043ace0
mov edi, eax
add esp, 4
test edi, edi
je 0x4c9fa8
push ebx
push 0
push edi
call fcn.005d5de0
add esp, 0xc
mov edx, dword [esi + 0x10]
mov dword [edx + ebp*4], edi
mov eax, dword [esi + 0x10]
mov eax, dword [eax + ebp*4]
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x4c9fd3
mov edx, dword [esp + 0x18]
cmp dword [esi + 0x18], edx
jge 0x4c9fcb
mov dword [esi + 0x18], edx
mov ecx, dword [esp + 0x2c]
add ecx, eax
jmp 0x4c9fd9
mov edx, dword [esp + 0x18]
xor ecx, ecx
movzx eax, word [ecx]
mov edi, eax
and edi, 0xf000
cmp di, 0x6000
jne 0x4ca002
and eax, 0xfff
cmp word [esp + 0x24], ax
jae 0x4ca002
add eax, 0xffffffff
or eax, 0x6000
mov word [ecx], ax
add edx, 1
cmp edx, dword [esp + 0x3c]
mov dword [esp + 0x18], edx
jl 0x4c9ee0
mov ebp, dword [esp + 0x1c]
jmp 0x4ca01e
add dword [esp + 0x24], 1
test bp, bp
jne 0x4c9ce0
jmp 0x4ca030
cmp dword [esp + 0x14], 0
jne 0x4ca0a7
mov edi, dword [esi + 0x18]
mov ebp, dword [esp + 0x50]
add edi, 1
push 2
lea ebx, [edi + edi]
mov dword [ebp], 4
mov dword [ebp + 4], edi
call fcn.0043ace0
add esp, 4
test eax, eax
mov dword [ebp + 8], eax
jne 0x4ca062
mov dword [esp + 0x14], 0x64
jmp 0x4ca0a7
xor ebx, ebx
test edi, edi
mov ebp, eax
jle 0x4ca0a7
lea ebx, [ebx]
lea edx, [esp + 0x2c]
push edx
push ebx
lea edx, [esp + 0x58]
mov eax, esi
call fcn.00432240
add esp, 8
test eax, eax
je 0x4ca094
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x2c]
add eax, ecx
jmp 0x4ca096
xor eax, eax
mov dx, word [eax]
mov word [ebp], dx
add ebx, 1
add ebp, 2
cmp ebx, edi
jl 0x4ca070
mov ebx, dword [esi + 0x10]
xor edi, edi
cmp dword [esi + 0xc], edi
jle 0x4ca0c9
mov eax, dword [ebx + edi*4]
test eax, eax
je 0x4ca0c1
push eax
call fcn.005ce619
add esp, 4
add edi, 1
cmp edi, dword [esi + 0xc]
jl 0x4ca0b1
mov eax, dword [esi + 0x10]
push eax
call fcn.005ce619
add esp, 4
push esi
call fcn.005ce619
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x18]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005ce60a
add esp, 0x74
ret