Function at 0x4f0600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x360
push ebx
xor ebx, ebx
push ebp
push esi
push edi
push 0x1c0
lea eax, [esp + 0x1b4]
push ebx
mov edi, 0xc
push eax
mov word [esp + 0x17c], bx
mov word [esp + 0x17e], bx
mov byte [esp + 0x180], 2
mov byte [esp + 0x181], bl
mov byte [esp + 0x182], bl
mov byte [esp + 0x183], bl
mov word [esp + 0x184], bx
mov word [esp + 0x186], di
mov byte [esp + 0x188], 3
mov byte [esp + 0x189], bl
mov byte [esp + 0x18a], 1
mov byte [esp + 0x18b], bl
mov word [esp + 0x18c], bx
mov word [esp + 0x18e], 0x1c
mov byte [esp + 0x190], 5
mov byte [esp + 0x191], bl
mov byte [esp + 0x192], 2
mov byte [esp + 0x193], bl
mov word [esp + 0x194], bx
mov word [esp + 0x196], 0x20
mov byte [esp + 0x198], 2
mov byte [esp + 0x199], bl
mov byte [esp + 0x19a], 3
mov byte [esp + 0x19b], bl
mov word [esp + 0x19c], bx
mov word [esp + 0x19e], 0x2c
mov byte [esp + 0x1a0], 4
mov byte [esp + 0x1a1], bl
mov byte [esp + 0x1a2], 0xa
mov byte [esp + 0x1a3], bl
mov word [esp + 0x1a4], bx
mov word [esp + 0x1a6], 0x30
mov byte [esp + 0x1a8], 4
mov byte [esp + 0x1a9], bl
mov byte [esp + 0x1aa], 0xa
mov byte [esp + 0x1ab], 1
mov word [esp + 0x1ac], bx
mov word [esp + 0x1ae], 0x34
mov byte [esp + 0x1b0], 3
mov byte [esp + 0x1b1], bl
mov byte [esp + 0x1b2], 5
mov byte [esp + 0x1b3], bl
mov word [esp + 0x1b4], 0xff
mov word [esp + 0x1b6], bx
mov byte [esp + 0x1b8], 0x11
mov byte [esp + 0x1b9], bl
mov byte [esp + 0x1ba], bl
mov byte [esp + 0x1bb], bl
call fcn.004cb810
add esp, 0xc
call fcn.004e9c20
mov esi, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd4]
xor eax, eax
xor ecx, ecx
lea edx, [eax + eax*2]
mov dword [esp + 0x18], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 0xd4], edx
jmp 0x4f080c
mov eax, dword [esp + 0x18]
xor ecx, ecx
lea edx, [eax + eax*2]
mov edi, 0xc
mov dword [esp + 0x164], ecx
mov dword [esp + 0xd4], edx
jmp 0x4f080c
mov ecx, dword [esp + 0x164]
mov edi, 0xc
cmp eax, ebx
mov eax, ecx
jne 0x4f0d1c
sub eax, ebx
je 0x4f0be3
sub eax, 1
je 0x4f0a3b
sub eax, 1
jne 0x4f13ad
mov word [esp + 0x34], bx
mov word [esp + 0x36], bx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x170], eax
mov byte [esp + 0x38], 2
mov byte [esp + 0x39], bl
mov byte [esp + 0x3a], bl
mov byte [esp + 0x3b], bl
mov edx, dword [esp + 0x38]
mov dword [esp + 0x174], edx
mov word [esp + 0x14c], bx
mov word [esp + 0x14e], di
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x178], eax
mov byte [esp + 0x150], 5
mov byte [esp + 0x151], bl
mov byte [esp + 0x152], 2
mov byte [esp + 0x153], bl
mov edx, dword [esp + 0x150]
mov dword [esp + 0x17c], edx
mov word [esp + 0x44], bx
mov word [esp + 0x46], 0x10
mov eax, dword [esp + 0x44]
mov dword [esp + 0x180], eax
mov byte [esp + 0x48], 5
mov byte [esp + 0x49], bl
mov byte [esp + 0x4a], 2
mov byte [esp + 0x4b], 1
mov edx, dword [esp + 0x48]
mov dword [esp + 0x184], edx
mov word [esp + 0xe0], bx
mov word [esp + 0xe2], 0x14
mov eax, dword [esp + 0xe0]
mov byte [esp + 0xe4], 3
mov byte [esp + 0xe5], bl
mov byte [esp + 0xe6], 1
mov byte [esp + 0xe7], bl
mov edx, dword [esp + 0xe4]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], edx
mov word [esp + 0x54], bx
mov word [esp + 0x56], 0x24
mov eax, dword [esp + 0x54]
mov byte [esp + 0x58], 3
mov byte [esp + 0x59], bl
mov byte [esp + 0x5a], 1
mov byte [esp + 0x5b], 1
mov edx, dword [esp + 0x58]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], edx
mov word [esp + 0x12c], bx
mov word [esp + 0x12e], 0x34
mov eax, dword [esp + 0x12c]
mov byte [esp + 0x130], 2
mov byte [esp + 0x131], bl
mov byte [esp + 0x132], 3
mov byte [esp + 0x133], bl
mov edx, dword [esp + 0x130]
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], edx
mov word [esp + 0x64], bx
mov word [esp + 0x66], 0x40
mov eax, dword [esp + 0x64]
mov byte [esp + 0x68], 4
mov byte [esp + 0x69], bl
mov byte [esp + 0x6a], 0xa
mov byte [esp + 0x6b], bl
mov edx, dword [esp + 0x68]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], edx
mov word [esp + 0xf0], bx
mov word [esp + 0xf2], 0x44
mov eax, dword [esp + 0xf0]
mov byte [esp + 0xf4], 4
mov byte [esp + 0xf5], bl
mov byte [esp + 0xf6], 0xa
mov byte [esp + 0xf7], 1
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], edx
mov esi, 0x48
lea ebp, [esi - 0x40]
jmp 0x4f13ad
mov word [esp + 0x74], bx
mov word [esp + 0x76], bx
mov eax, dword [esp + 0x74]
mov dword [esp + 0x170], eax
mov byte [esp + 0x78], 2
mov byte [esp + 0x79], bl
mov byte [esp + 0x7a], bl
mov byte [esp + 0x7b], bl
mov edx, dword [esp + 0x78]
mov dword [esp + 0x174], edx
mov word [esp + 0x168], bx
mov word [esp + 0x16a], di
mov eax, dword [esp + 0x168]
mov byte [esp + 0x16c], 5
mov byte [esp + 0x16d], bl
mov byte [esp + 0x16e], 2
mov byte [esp + 0x16f], bl
mov edx, dword [esp + 0x16c]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], edx
mov word [esp + 0x84], bx
mov word [esp + 0x86], 0x10
mov eax, dword [esp + 0x84]
mov byte [esp + 0x88], 3
mov byte [esp + 0x89], bl
mov byte [esp + 0x8a], 1
mov byte [esp + 0x8b], bl
mov edx, dword [esp + 0x88]
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
mov word [esp + 0x100], bx
mov word [esp + 0x102], 0x20
mov eax, dword [esp + 0x100]
mov byte [esp + 0x104], 2
mov byte [esp + 0x105], bl
mov byte [esp + 0x106], 3
mov byte [esp + 0x107], bl
mov edx, dword [esp + 0x104]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], edx
mov word [esp + 0x94], bx
mov word [esp + 0x96], 0x2c
mov eax, dword [esp + 0x94]
mov byte [esp + 0x98], 4
mov byte [esp + 0x99], bl
mov byte [esp + 0x9a], 0xa
mov byte [esp + 0x9b], bl
mov edx, dword [esp + 0x98]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], edx
mov word [esp + 0x13c], bx
mov word [esp + 0x13e], 0x30
mov eax, dword [esp + 0x13c]
mov byte [esp + 0x140], 4
mov byte [esp + 0x141], bl
mov byte [esp + 0x142], 0xa
mov byte [esp + 0x143], 1
mov edx, dword [esp + 0x140]
mov esi, 0x34
jmp 0x4f139a
mov word [esp + 0xa4], bx
mov word [esp + 0xa6], bx
mov eax, dword [esp + 0xa4]
mov byte [esp + 0xa8], 2
mov byte [esp + 0xa9], bl
mov byte [esp + 0xaa], bl
mov byte [esp + 0xab], bl
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], edx
mov word [esp + 0x110], bx
mov word [esp + 0x112], di
mov eax, dword [esp + 0x110]
mov byte [esp + 0x114], 2
mov byte [esp + 0x115], bl
mov byte [esp + 0x116], 3
mov byte [esp + 0x117], bl
mov edx, dword [esp + 0x114]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], edx
mov word [esp + 0xb4], bx
mov word [esp + 0xb6], 0x18
mov eax, dword [esp + 0xb4]
mov byte [esp + 0xb8], 4
mov byte [esp + 0xb9], bl
mov byte [esp + 0xba], 0xa
mov byte [esp + 0xbb], bl
mov edx, dword [esp + 0xb8]
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
mov word [esp + 0x15c], bx
mov word [esp + 0x15e], 0x1c
mov eax, dword [esp + 0x15c]
mov byte [esp + 0x160], 4
mov byte [esp + 0x161], bl
mov byte [esp + 0x162], 0xa
mov byte [esp + 0x163], 1
mov edx, dword [esp + 0x160]
mov esi, 0x20
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], edx
lea ebp, [esi - 0x1c]
jmp 0x4f13ad
sub eax, ebx
je 0x4f11f5
sub eax, 1
je 0x4f0f8a
sub eax, 1
jne 0x4f13ad
mov word [esp + 0xc4], bx
mov word [esp + 0xc6], bx
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x170], eax
mov byte [esp + 0xc8], 2
mov byte [esp + 0xc9], bl
mov byte [esp + 0xca], bl
mov byte [esp + 0xcb], bl
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x174], edx
mov word [esp + 0x1c], bx
mov word [esp + 0x1e], di
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x178], eax
mov byte [esp + 0x20], 5
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], 2
mov byte [esp + 0x23], bl
mov edx, dword [esp + 0x20]
mov dword [esp + 0x17c], edx
mov word [esp + 0x24], bx
mov word [esp + 0x26], 0x10
mov eax, dword [esp + 0x24]
mov dword [esp + 0x180], eax
mov byte [esp + 0x28], 5
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], 2
mov byte [esp + 0x2b], 1
mov edx, dword [esp + 0x28]
mov dword [esp + 0x184], edx
mov word [esp + 0x2c], bx
mov word [esp + 0x2e], 0x14
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x30], 3
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], 1
mov byte [esp + 0x33], bl
mov edx, dword [esp + 0x30]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], edx
mov word [esp + 0x3c], bx
mov word [esp + 0x3e], 0x24
mov eax, dword [esp + 0x3c]
mov byte [esp + 0x40], 3
mov byte [esp + 0x41], bl
mov byte [esp + 0x42], 1
mov byte [esp + 0x43], 1
mov edx, dword [esp + 0x40]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], edx
mov word [esp + 0x4c], bx
mov word [esp + 0x4e], 0x34
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x50], 2
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], 3
mov byte [esp + 0x53], bl
mov edx, dword [esp + 0x50]
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], edx
mov word [esp + 0x5c], bx
mov word [esp + 0x5e], 0x40
mov eax, dword [esp + 0x5c]
mov byte [esp + 0x60], 2
mov byte [esp + 0x61], bl
mov byte [esp + 0x62], 3
mov byte [esp + 0x63], 1
mov edx, dword [esp + 0x60]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], edx
mov word [esp + 0x6c], bx
mov word [esp + 0x6e], 0x4c
mov eax, dword [esp + 0x6c]
mov byte [esp + 0x70], 2
mov byte [esp + 0x71], bl
mov byte [esp + 0x72], 3
mov byte [esp + 0x73], 2
mov edx, dword [esp + 0x70]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], edx
mov word [esp + 0x7c], bx
mov word [esp + 0x7e], 0x58
mov eax, dword [esp + 0x7c]
mov byte [esp + 0x80], 4
mov byte [esp + 0x81], bl
mov byte [esp + 0x82], 0xa
mov byte [esp + 0x83], bl
mov edx, dword [esp + 0x80]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], edx
mov word [esp + 0x8c], bx
mov word [esp + 0x8e], 0x5c
mov eax, dword [esp + 0x8c]
mov byte [esp + 0x90], 4
mov byte [esp + 0x91], bl
mov byte [esp + 0x92], 0xa
mov byte [esp + 0x93], 1
mov edx, dword [esp + 0x90]
mov esi, 0x60
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], edx
lea ebp, [esi - 0x56]
jmp 0x4f13ad
mov word [esp + 0x9c], bx
mov word [esp + 0x9e], bx
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x170], eax
mov byte [esp + 0xa0], 2
mov byte [esp + 0xa1], bl
mov byte [esp + 0xa2], bl
mov byte [esp + 0xa3], bl
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x174], edx
mov word [esp + 0xac], bx
mov word [esp + 0xae], di
mov eax, dword [esp + 0xac]
mov dword [esp + 0x178], eax
mov byte [esp + 0xb0], 5
mov byte [esp + 0xb1], bl
mov byte [esp + 0xb2], 2
mov byte [esp + 0xb3], bl
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x17c], edx
mov word [esp + 0xbc], bx
mov word [esp + 0xbe], 0x10
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x180], eax
mov byte [esp + 0xc0], 3
mov byte [esp + 0xc1], bl
mov byte [esp + 0xc2], 1
mov byte [esp + 0xc3], bl
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x184], edx
mov word [esp + 0xcc], bx
mov word [esp + 0xce], 0x20
mov eax, dword [esp + 0xcc]
mov byte [esp + 0xd0], 2
mov byte [esp + 0xd1], bl
mov byte [esp + 0xd2], 3
mov byte [esp + 0xd3], bl
mov edx, dword [esp + 0xd0]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], edx
mov word [esp + 0xd8], bx
mov word [esp + 0xda], 0x2c
mov eax, dword [esp + 0xd8]
mov byte [esp + 0xdc], 2
mov byte [esp + 0xdd], bl
mov byte [esp + 0xde], 3
mov byte [esp + 0xdf], 1
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], edx
mov word [esp + 0xe8], bx
mov word [esp + 0xea], 0x38
mov eax, dword [esp + 0xe8]
mov byte [esp + 0xec], 2
mov byte [esp + 0xed], bl
mov byte [esp + 0xee], 3
mov byte [esp + 0xef], 2
mov edx, dword [esp + 0xec]
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], edx
mov word [esp + 0xf8], bx
mov word [esp + 0xfa], 0x44
mov eax, dword [esp + 0xf8]
mov byte [esp + 0xfc], 4
mov byte [esp + 0xfd], bl
mov byte [esp + 0xfe], 0xa
mov byte [esp + 0xff], bl
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], edx
mov word [esp + 0x108], bx
mov word [esp + 0x10a], 0x48
mov eax, dword [esp + 0x108]
mov byte [esp + 0x10c], 4
mov byte [esp + 0x10d], bl
mov byte [esp + 0x10e], 0xa
mov byte [esp + 0x10f], 1
mov edx, dword [esp + 0x10c]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], edx
mov esi, 0x4c
lea ebp, [esi - 0x44]
jmp 0x4f13ad
mov word [esp + 0x118], bx
mov word [esp + 0x11a], bx
mov eax, dword [esp + 0x118]
mov dword [esp + 0x170], eax
mov byte [esp + 0x11c], 2
mov byte [esp + 0x11d], bl
mov byte [esp + 0x11e], bl
mov byte [esp + 0x11f], bl
mov edx, dword [esp + 0x11c]
mov dword [esp + 0x174], edx
mov word [esp + 0x124], bx
mov word [esp + 0x126], di
mov eax, dword [esp + 0x124]
mov byte [esp + 0x128], 2
mov byte [esp + 0x129], bl
mov byte [esp + 0x12a], 3
mov byte [esp + 0x12b], bl
mov edx, dword [esp + 0x128]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], edx
mov word [esp + 0x134], bx
mov word [esp + 0x136], 0x18
mov eax, dword [esp + 0x134]
mov byte [esp + 0x138], 2
mov byte [esp + 0x139], bl
mov byte [esp + 0x13a], 3
mov byte [esp + 0x13b], 1
mov edx, dword [esp + 0x138]
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], edx
mov word [esp + 0x144], bx
mov word [esp + 0x146], 0x24
mov eax, dword [esp + 0x144]
mov byte [esp + 0x148], 2
mov byte [esp + 0x149], bl
mov byte [esp + 0x14a], 3
mov byte [esp + 0x14b], 2
mov edx, dword [esp + 0x148]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], edx
mov word [esp + 0x154], bx
mov word [esp + 0x156], 0x30
mov eax, dword [esp + 0x154]
mov byte [esp + 0x158], 4
mov byte [esp + 0x159], bl
mov byte [esp + 0x15a], 0xa
mov byte [esp + 0x15b], bl
mov edx, dword [esp + 0x158]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], edx
mov word [esp + 0x10], bx
mov word [esp + 0x12], 0x34
mov eax, dword [esp + 0x10]
mov byte [esp + 0x14], 4
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 0xa
mov byte [esp + 0x17], 1
mov edx, dword [esp + 0x14]
mov esi, 0x38
mov ebp, 6
mov dword [esp + 0x19c], edx
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0xd4]
xor edi, edi
add eax, ecx
lea ecx, [eax + eax*8]
lea edx, [ecx*4 + 0x89f0ec]
mov dword [esp + 0x120], edx
xor ecx, ecx
cmp edi, ebx
lea eax, [esp + ebp*8 + 0x170]
jle 0x4f13fc
mov edx, ecx
shl edx, 4
add edx, esi
mov byte [eax + 7], cl
mov word [eax], bx
mov word [eax + 2], dx
mov byte [eax + 4], 3
mov byte [eax + 5], bl
mov byte [eax + 6], 5
add ecx, 1
add eax, 8
cmp ecx, edi
jl 0x4f13d6
mov edx, dword [esp + 0x120]
push edx
mov word [eax], 0xff
mov word [eax + 2], bx
mov byte [eax + 4], 0x11
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov eax, dword [0x7cf900]
mov ecx, dword [eax]
lea edx, [esp + 0x174]
push edx
push eax
mov eax, dword [ecx + 0x158]
call eax
add dword [esp + 0x120], 4
add edi, 1
cmp edi, 9
jl 0x4f13c9
mov eax, dword [esp + 0x164]
add eax, 1
mov dword [esp + 0x164], eax
cmp eax, 3
mov eax, dword [esp + 0x18]
jl 0x4f0800
add eax, 1
cmp eax, 2
mov dword [esp + 0x18], eax
jl 0x4f07d6
mov word [esp + 0x10], bx
mov word [esp + 0x12], bx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x14], 2
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bl
mov edx, dword [esp + 0x14]
mov word [esp + 0x10], bx
mov word [esp + 0x12], 0xc
mov eax, dword [esp + 0x10]
mov byte [esp + 0x14], 2
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 3
mov byte [esp + 0x17], bl
mov dword [esp + 0x170], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x174], edx
mov dword [esp + 0x178], eax
mov word [esp + 0x10], bx
mov word [esp + 0x12], 0x18
mov edx, dword [esp + 0x10]
mov byte [esp + 0x14], 4
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 0xa
mov byte [esp + 0x17], bl
mov eax, dword [esp + 0x14]
mov dword [esp + 0x17c], ecx
mov dword [esp + 0x180], edx
mov word [esp + 0x10], bx
mov word [esp + 0x12], 0x1c
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x184], eax
mov byte [esp + 0x14], 4
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 0xa
mov byte [esp + 0x17], 1
mov edx, dword [esp + 0x14]
mov word [esp + 0x10], bx
mov word [esp + 0x12], 0x20
mov eax, dword [esp + 0x10]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x18c], edx
mov byte [esp + 0x14], 1
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 5
mov byte [esp + 0x17], bl
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x190], eax
mov word [esp + 0x10], bx
mov word [esp + 0x12], 0x24
mov edx, dword [esp + 0x10]
mov byte [esp + 0x14], 1
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 5
mov byte [esp + 0x17], 1
mov eax, dword [esp + 0x14]
mov dword [esp + 0x198], edx
mov byte [esp + 0x14], 0x11
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bl
mov edx, dword [esp + 0x14]
mov dword [esp + 0x194], ecx
mov dword [esp + 0x19c], eax
mov eax, dword [0x7cf900]
mov dword [esp + 0x1a4], edx
push 0x8a03d0
mov word [esp + 0x14], 0xff
mov word [esp + 0x16], bx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x174]
mov dword [esp + 0x1a4], ecx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x158]
call eax
pop edi
xor eax, eax
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret