Function at 0x2ca74d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa0]
cmp eax, dword [ecx + 8]
jbe 0x2ca81d1
sub esp, 0x120
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
lea eax, [0x2cb6080]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0x90], eax
test byte [eax], al
lea ecx, [eax + 0xac]
mov dword [esp], ecx
lea ecx, [esp + 0x8c]
mov dword [esp + 4], ecx
call fcn.02b45dc0
mov eax, dword [esp + 0x128]
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
test ecx, ecx
jne 0x2ca755d
nop
mov edx, dword [0x30f65d4]
lea ecx, [0x2da7f40]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x48], edx
nop
mov eax, dword [ecx + 0x1c]
mov dword [esp], edx
lea ebx, [0x2d11680]
mov dword [esp + 4], ebx
lea ebx, [0x311e790]
mov dword [esp + 8], ebx
call eax
mov eax, dword [esp + 0x10]
lea ecx, [0x2d1a280]
cmp dword [esp + 0xc], ecx
je 0x2ca7594
xor eax, eax
mov ecx, dword [esp + 0x128]
mov edx, dword [ecx + 8]
test edx, edx
je 0x2ca768e
mov ebx, dword [ecx + 0x1c]
test ebx, ebx
je 0x2ca7634
mov ebp, dword [edx]
mov edx, dword [edx + 4]
cmp edx, 4
jne 0x2ca75cb
cmp dword [ebp], 0x70747468
jne 0x2ca75cb
mov esi, 1
jmp 0x2ca75e8
cmp edx, 5
jne 0x2ca75e6
cmp dword [ebp], 0x70747468
jne 0x2ca75e6
cmp byte [ebp + 4], 0x73
xchg esi, ebx
sete bl
xchg esi, ebx
jmp 0x2ca75e8
xor esi, esi
mov dword [esp + 0x5c], eax
xchg esi, eax
mov byte [esp + 0x2f], al
xchg esi, eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x60], ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x2ca76e8
lea edi, [esp + 0xf0]
xor eax, eax
call fcn.02b3eb14
lea ecx, [0x2d35740]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [esp + 0xf0]
mov dword [esp + 8], ecx
call fcn.02aed2a0
jmp 0x2ca7f62
nop
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x24]
test eax, eax
je 0x2ca7647
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
lea eax, [0x2d17160]
mov dword [esp], eax
call fcn.02aeb620
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x18
lea ecx, [0x2d46e14]
mov dword [eax], ecx
mov dword [esp + 0x12c], 0
lea ecx, [0x2da439c]
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], eax
add esp, 0x120
ret
nop
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x24]
test eax, eax
je 0x2ca76a1
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
lea eax, [0x2d17160]
mov dword [esp], eax
call fcn.02aeb620
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x2d455c2]
mov dword [eax], ecx
mov dword [esp + 0x12c], 0
lea ecx, [0x2da439c]
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], eax
add esp, 0x120
ret
mov ebx, dword [ecx + 0x20]
test ebx, ebx
je 0x2ca77c6
je 0x2ca7704
lea edi, [0x2d268a0]
cmp dword [ebx + 4], edi
je 0x2ca77c6
lea eax, [0x2d36bc0]
mov dword [esp], eax
call fcn.02aeb620
mov edi, dword [esp + 4]
mov dword [esp + 0x4c], edi
mov eax, dword [0x311e9a0]
test eax, eax
jne 0x2ca7732
mov esi, dword [esp + 0x128]
call fcn.02b3eef0
jmp 0x2ca774f
lea eax, [0x2d36bc0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov eax, dword [esp + 0x128]
mov dword [esp + 8], eax
call fcn.02af0c20
lea eax, [0x2d235e0]
mov dword [esp], eax
call fcn.02aeb620
mov eax, dword [esp + 4]
mov dword [eax], 0
mov word [eax + 8], 0
mov dword [eax + 4], 0
mov ecx, dword [esp + 0x128]
mov edx, dword [ecx + 0x24]
mov ebx, dword [ecx + 0x20]
mov dword [eax], ebx
mov ebx, dword [0x311e9a0]
test ebx, ebx
jne 0x2ca7792
mov dword [eax + 4], edx
jmp 0x2ca77a0
lea edi, [eax + 4]
mov ebx, eax
mov eax, edx
call fcn.02b3e880
mov eax, ebx
lea edx, [0x2da7ba4]
mov ebx, dword [esp + 0x4c]
mov dword [ebx + 0x20], edx
mov edx, dword [0x311e9a0]
test edx, edx
jne 0x2ca77bc
mov dword [ebx + 0x24], eax
jmp 0x2ca77c4
lea edi, [ebx + 0x24]
call fcn.02b3e880
mov ecx, ebx
mov dword [esp + 0x4c], ecx
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.02ca7400
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
jne 0x2ca77f9
movzx eax, byte [esp + 0x2f]
test al, al
mov eax, dword [esp + 0x4c]
jmp 0x2ca78a9
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [0x30f74b4]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
cmp dword [0x30f74b0], ecx
jne 0x2ca7862
mov dword [esp + 0x64], eax
mov dword [esp + 0x78], esi
mov dword [esp + 0x80], ebp
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.02ae3610
movzx eax, byte [esp + 0xc]
test al, al
jne 0x2ca787e
mov eax, dword [esp + 0x64]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], ebp
mov dword [esp + 0x134], esi
add esp, 0x120
ret
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.02ca82a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
test ecx, ecx
jne 0x2ca7afc
movzx edx, byte [esp + 0x2f]
test dl, dl
je 0x2ca7a0b
mov dword [esp + 0x68], eax
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
jne 0x2ca78c0
xor ecx, ecx
jmp 0x2ca78ec
mov dword [esp], edx
mov dword [esp + 4], ecx
lea eax, [0x2d5a124]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.02ba7a80
cmp dword [esp + 0x10], 0xffffffff
sete al
xor eax, 1
mov ecx, eax
mov eax, dword [esp + 0x68]
test cl, cl
je 0x2ca79a3
nop
mov ecx, dword [eax + 0x20]
mov edx, dword [eax + 0x24]
test ecx, ecx
je 0x2ca790b
mov eax, dword [ecx + 0x10]
mov dword [esp], edx
call eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.02ae8ee0
mov eax, dword [esp + 8]
lea ecx, [0x2d0e5c0]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
lea eax, [0x2d4851e]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
lea eax, [esp + 0x84]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.02b9a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
add esp, 0x120
ret
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 0x18]
test ecx, ecx
jne 0x2ca7b1c
nop
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test ecx, ecx
je 0x2ca79c4
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
lea eax, [0x2d17160]
mov dword [esp], eax
call fcn.02aeb620
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1c
lea ecx, [0x2d48b41]
mov dword [eax], ecx
mov dword [esp + 0x12c], 0
lea ecx, [0x2da439c]
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], eax
add esp, 0x120
ret
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test ecx, ecx
je 0x2ca7a1d
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
lea eax, [0x2d4873a]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.02ae8ee0
mov eax, dword [esp + 8]
lea ecx, [0x2d0e5c0]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.02ae8ee0
mov eax, dword [esp + 8]
lea ecx, [0x2d0e5c0]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
lea eax, [0x2d3f7a7]
mov dword [esp], eax
mov dword [esp + 4], 5
lea eax, [esp + 0x94]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.02b9a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
add esp, 0x120
ret
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], edx
mov dword [esp + 0x134], ebx
add esp, 0x120
ret
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x14]
mov ebx, dword [esp + 0x48]
mov dword [esp], ebx
call edx
mov dword [esp], 0
call fcn.02ae5a90
movzx eax, byte [esp + 8]
test al, al
jne 0x2ca7f05
lea eax, [0x2d3bd00]
mov dword [esp], eax
call fcn.02aeb620
mov edi, dword [esp + 4]
mov eax, dword [0x311e9a0]
test eax, eax
jne 0x2ca7b7e
mov ecx, dword [esp + 0x6c]
mov dword [edi], ecx
mov edx, dword [esp + 0x5c]
mov dword [edi + 8], edx
mov ebx, dword [esp + 0x128]
mov dword [edi + 0xc], ebx
jmp 0x2ca7ba8
mov eax, dword [esp + 0x6c]
call fcn.02b3e880
lea ecx, [edi + 8]
mov edx, edi
mov edi, ecx
mov eax, dword [esp + 0x5c]
call fcn.02b3e880
lea edi, [edx + 0xc]
mov eax, dword [esp + 0x128]
call fcn.02b3e880
mov edi, edx
mov dword [esp + 0x58], edi
xor eax, eax
lea edi, [esp + 0xbc]
call fcn.02b3eb1a
mov ecx, dword [esp + 0x124]
mov dword [esp], ecx
mov edx, dword [esp + 0x58]
mov dword [esp + 4], edx
call fcn.02ca8b40
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
lea edi, [esp + 0xbc]
lea esi, [esp + 8]
call fcn.02b3eff4
lea edi, [esp + 0xa4]
lea esi, [esp + 0xbc]
call fcn.02b3eff4
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x2ca7eb8
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
lea edi, [esp + 8]
lea esi, [esp + 0xa4]
call fcn.02b3eff4
call fcn.02caab80
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
test ecx, ecx
jne 0x2ca7e49
mov dword [esp + 0x70], eax
mov ecx, dword [eax]
test ecx, ecx
je 0x2ca7ca2
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.02caa2f0
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
mov dword [esp], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
call ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
jmp 0x2ca7cbe
mov dword [esp], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
call fcn.02cb0d70
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
test ecx, ecx
je 0x2ca7dfa
mov dword [esp + 0x44], ecx
mov dword [esp + 0x7c], edx
lea eax, [0x2d0f3e0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.02ae91f0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x2ca7d40
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
call fcn.02ca9f60
movzx eax, byte [esp + 8]
test al, al
je 0x2ca7d6d
mov eax, dword [esp + 0x70]
lea esi, [eax + 0xc]
lea edi, [esp + 0xd4]
call fcn.02b3efea
mov eax, dword [esp + 0x124]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0xd4]
call fcn.02b3efea
call fcn.02cab9b0
jmp 0x2ca7d6d
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0xc], edx
call fcn.02ca8490
movzx eax, byte [esp + 0x10]
test al, al
je 0x2ca7dbb
mov edx, dword [0x30f13d4]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.02ca82a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0xc]
test ecx, ecx
je 0x2ca7b1c
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], ebp
add esp, 0x120
ret
mov eax, dword [esp + 0x44]
lea ecx, [0x2da4a90]
cmp eax, ecx
jne 0x2ca7dd4
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
jmp 0x2ca7dda
mov ecx, eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], edx
add esp, 0x120
ret
test byte [eax], al
mov ecx, dword [0x311e9a0]
test ecx, ecx
jne 0x2ca7e12
mov ecx, dword [esp + 0x128]
mov dword [eax + 0x44], ecx
jmp 0x2ca7e25
lea edi, [eax + 0x44]
mov ecx, eax
mov eax, dword [esp + 0x128]
call fcn.02b3e880
mov eax, ecx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
add esp, 0x120
ret
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], edx
mov eax, dword [esp + 0x124]
mov dword [esp], eax
mov eax, dword [esp + 0x128]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.02caa2f0
nop
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test ecx, ecx
je 0x2ca7e8d
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov dword [esp + 0x12c], 0
mov eax, dword [esp + 0x80]
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x134], eax
add esp, 0x120
ret
nop
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test ecx, ecx
je 0x2ca7ee5
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], edx
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], edx
mov dword [esp + 0x134], ebx
add esp, 0x120
ret
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test ecx, ecx
je 0x2ca7f1b
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x48]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
add esp, 0x120
ret
lea eax, [esp + 0xf0]
mov dword [esp], eax
call fcn.02aed4f0
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x2ca806b
mov ecx, dword [esp + 0xf4]
mov edx, dword [eax]
mov dword [esp + 0x74], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x40], eax
mov ebx, dword [ecx]
mov dword [esp + 0x50], ebx
mov ecx, dword [ecx + 4]
mov dword [esp + 0x34], ecx
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.02c7a840
movzx eax, byte [esp + 8]
test al, al
je 0x2ca7fb6
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x50]
xor eax, eax
jmp 0x2ca8089
nop
mov eax, dword [esp + 0x128]
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test ecx, ecx
je 0x2ca7fd0
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
call ecx
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.02ae8ee0
mov eax, dword [esp + 8]
lea ecx, [0x2d0e5c0]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
lea eax, [0x2d4d100]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x84]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.02b9a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
add esp, 0x120
ret
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x60]
movzx esi, byte [esp + 0x2f]
jmp 0x2ca76e8
inc eax
cmp eax, edx
jge 0x2ca7f53
lea ebp, [ebx + eax*8]
mov ecx, dword [ebp + 4]
mov ebp, dword [ebp]
xor esi, esi
jmp 0x2ca809f
inc esi
cmp esi, ecx
jge 0x2ca8088
jae 0x2ca81c9
movzx edi, byte [ebp + esi]
xchg edi, eax
cmp al, 0x20
xchg edi, eax
jb 0x2ca80c1
xchg edi, eax
cmp al, 0x7f
xchg edi, eax
jne 0x2ca809e
xchg edi, eax
cmp al, 0x20
xchg edi, eax
je 0x2ca809e
xchg edi, eax
cmp al, 9
xchg edi, eax
je 0x2ca809e
nop
mov eax, dword [esp + 0x128]
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
test edx, edx
je 0x2ca80f4
mov dword [esp + 0x38], ecx
mov dword [esp + 0x54], ebp
mov ecx, dword [edx + 0x10]
mov dword [esp], eax
call ecx
mov ecx, dword [esp + 0x38]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.02ae8ee0
mov eax, dword [esp + 8]
lea ecx, [0x2d0e5c0]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.02ae8ee0
mov eax, dword [esp + 8]
lea ecx, [0x2d0e5c0]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
lea eax, [0x2d50c47]
mov dword [esp], eax
mov dword [esp + 4], 0x32
lea eax, [esp + 0x94]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.02b9a950
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
add esp, 0x120
ret
mov eax, esi
call fcn.02b3e900
nop
call fcn.02b3d440
jmp fcn.02ca74d0