Function at 0x4c6ff0
Capabilities:
Parse pe header

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov dword [esp], eax
mov dword [esp + 0x24], edx
lea ecx, [eax + 0x18]
mov dword [esp + 4], ecx
lea esi, [esi]
push eax
push pe_nt_image_headers32
push 0
mov eax, dword [esp + 0x10]
push eax
call sub.msvcrt.dll_memset
mov esi, dword [esp + 0x10]
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 4]
mov ebp, dword [esi + 0x14]
mov dword [esp + 0x30], edx
mov dword [esp + 0x38], ecx
mov dword [esi + 0x9c], edx
mov dword [esi + 0x98], eax
mov dword [esi + 0x10], ecx
add esp, 0x10
mov bl, byte [ebp]
test bl, bl
je 0x4c72dd
cld
mov edi, 0x595239
mov ecx, 2
mov esi, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x4c730b
cmp bl, byte [0x59523c]
je 0x4c71e1
cmp bl, byte [0x59523e]
je 0x4c71e1
cmp bl, byte [0x595240]
je 0x4c71e1
cld
mov edi, 0x59522c
mov ecx, 3
mov esi, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x4c7361
cld
mov edi, 0x595230
mov ecx, 2
mov esi, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x4c725d
mov edi, 0x595233
mov ecx, 2
mov esi, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x4c725d
mov edi, 0x595236
mov ecx, 2
mov esi, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x4c725d
cmp bl, byte [0x595411]
je 0x4c73b7
cmp bl, byte [0x595413]
je 0x4c741a
cmp bl, byte [0x595415]
je 0x4c7464
cmp bl, 0x5f
je 0x4c7112
lea eax, [ebx - 0x61]
cmp al, 0x19
ja 0x4c7130
mov eax, dword [esp + 0x24]
mov edx, dword [esp]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edx
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004c6560
lea eax, [ebx - 0x41]
cmp al, 0x19
jbe 0x4c7112
lea eax, [ebx - 0x30]
cmp al, 9
jbe 0x4c74af
cmp bl, byte [0x5952ae]
je 0x4c74ca
cmp bl, byte [0x595417]
je 0x4c74e5
cmp bl, byte [0x595419]
jne 0x4c7645
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], bl
mov ebp, dword [esp + 0x10]
push ebp
call sub.msvcrt.dll_strlen
add esp, 0x10
mov ecx, dword [esp]
mov edi, dword [ecx + 0x14]
mov esi, dword [ecx + 8]
inc edi
mov ebx, dword [ecx + 0xc]
mov dword [ecx + 0x14], edi
mov byte [ecx + eax + 0x18], 0
inc ebx
inc esi
mov eax, dword [ecx + 0x14]
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], ebx
mov bl, byte [eax]
cmp bl, byte [0x595419]
je 0x4c71d2
cmp bl, byte [0x595270]
jne 0x4c77a0
push 0
mov eax, dword [esp + 4]
push eax
call fcn.004c4620
pop ebp
pop eax
jmp 0x4c7010
push 1
push ecx
call fcn.004c4620
pop eax
pop edx
jmp 0x4c7010
sub esp, 0xc
mov ebp, dword [esp + 0x10]
push ebp
call sub.msvcrt.dll_strlen
pop edi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], 0xa
mov esi, dword [esp + 0x10]
push esi
call sub.msvcrt.dll_strlen
pop ecx
pop ebx
mov ecx, dword [esp + 8]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
inc eax
mov edx, dword [ecx + 4]
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 0xc]
inc eax
inc edx
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x10]
mov dword [ecx + 8], 0
mov dword [ecx + 4], edx
push eax
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x9c]
push eax
mov eax, dword [esi + 0x98]
push eax
mov eax, dword [esp + 0x18]
push eax
push 0x58
mov ebp, dword [esp + 0x40]
push ebp
call fcn.004c4860
add esp, 0x20
add esp, 0x2c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
sub esp, 0xc
mov ebp, dword [esp + 0x10]
push ebp
call sub.msvcrt.dll_strlen
pop edi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], 0xa
mov esi, dword [esp + 0x10]
push esi
call sub.msvcrt.dll_strlen
pop ecx
pop ebx
mov ecx, dword [esp + 8]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
add eax, 2
mov edx, dword [ecx + 4]
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 0xc]
add eax, 2
inc edx
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x10]
mov dword [ecx + 8], 0
mov dword [ecx + 4], edx
push eax
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x9c]
push eax
mov eax, dword [esi + 0x98]
push eax
mov eax, dword [esp + 0x18]
push eax
push 0x59
mov ebp, dword [esp + 0x40]
push ebp
call fcn.004c4860
add esp, 0x20
xor eax, eax
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
push eax
push eax
push ecx
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x9c]
push eax
mov eax, dword [esi + 0x98]
push eax
mov eax, dword [esp + 0x18]
push eax
push 0x67
mov ebp, dword [esp + 0x40]
push ebp
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], 0xa
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
pop edx
pop ecx
mov ecx, dword [esp + 8]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 4]
inc eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], eax
mov eax, dword [ecx + 0x14]
add eax, 2
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 0xc]
add eax, 2
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x30]
push eax
jmp 0x4c722d
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], 0xa
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
pop edx
pop ecx
mov ecx, dword [esp + 8]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 4]
inc eax
mov dword [ecx + 8], 0
mov dword [ecx + 4], eax
mov eax, dword [ecx + 0x14]
add eax, 3
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 0xc]
add eax, 3
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x30]
push eax
jmp 0x4c72ad
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
sar edx, 0x1f
shr edx, 0x1e
add eax, edx
and eax, 3
sub edx, eax
mov eax, dword [esp]
add edx, 4
mov dword [eax + 0x18], 0x20202020
mov ecx, dword [esp + 4]
mov byte [ecx + 4], 0
mov byte [edx + eax + 0x18], 0
mov edi, dword [eax + 8]
mov esi, dword [eax + 0x14]
mov ebx, dword [eax + 0xc]
add edi, edx
inc esi
inc ebx
mov dword [eax + 0x14], esi
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
push edx
push edx
mov eax, dword [eax + 0x10]
push eax
mov esi, dword [esp + 0xc]
mov eax, dword [esi + 0x9c]
push eax
mov eax, dword [esi + 0x98]
push eax
push ecx
jmp 0x4c72c4
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], bl
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
pop edx
pop ecx
mov ecx, dword [esp + 8]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
inc eax
mov ebp, dword [esp + 0x30]
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 8]
inc eax
mov dword [ecx + 8], eax
mov eax, dword [ecx + 0xc]
inc eax
mov dword [ecx + 0xc], eax
push ebp
jmp 0x4c72ad
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], 0x20
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
pop edx
pop ecx
mov ecx, dword [esp + 8]
mov ebp, dword [ecx + 0x14]
mov edi, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
mov byte [ecx + eax + 0x18], 0
inc ebp
inc edi
inc esi
mov ebx, dword [esp + 0x30]
mov dword [ecx + 0x14], ebp
mov dword [ecx + 0xc], edi
mov dword [ecx + 8], esi
push ebx
jmp 0x4c72ad
mov esi, dword [esp]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ecx
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004c60a0
mov eax, dword [esp + 0x24]
mov edx, dword [esp]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edx
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004c5f90
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov ecx, dword [esp + 0xc]
mov byte [ecx + eax + 0x18], bl
mov eax, dword [esp + 0x10]
push eax
call sub.msvcrt.dll_strlen
add esp, 0x10
mov esi, dword [esp]
mov byte [esi + eax + 0x18], 0
mov eax, dword [esi + 0x14]
inc eax
mov dword [esi + 0x14], eax
mov eax, dword [esi + 8]
inc eax
mov dword [esi + 8], eax
mov eax, dword [esi + 0xc]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov bl, byte [eax]
cmp bl, byte [0x5952b0]
je 0x4c79e3
cmp bl, byte [0x595417]
je 0x4c78a8
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], bl
mov eax, dword [esp + 0x10]
push eax
call sub.msvcrt.dll_strlen
add esp, 0x10
mov ecx, dword [esp]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
inc eax
mov ebp, dword [ecx + 0xc]
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 8]
inc eax
inc ebp
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], ebp
mov edx, dword [esp]
mov eax, dword [edx + 0x14]
mov bl, byte [eax]
cmp bl, byte [0x595417]
je 0x4c7974
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], bl
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov ecx, dword [esp + 0xc]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
inc eax
mov ebp, dword [ecx + 0xc]
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 8]
inc eax
inc ebp
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], ebp
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 0x14]
mov dl, byte [edx]
mov byte [esi + eax + 0x18], dl
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
add esp, 0x10
mov byte [esi + eax + 0x18], 0
mov eax, dword [esi + 0x14]
inc eax
mov dword [esi + 0x14], eax
mov eax, dword [esi + 8]
inc eax
mov dword [esi + 8], eax
mov eax, dword [esi + 0xc]
inc eax
mov dword [esi + 0xc], eax
push eax
push eax
mov ebp, dword [esi + 0x10]
push ebp
mov eax, dword [esp + 0xc]
mov edi, dword [eax + 0x9c]
push edi
mov esi, dword [eax + 0x98]
push esi
mov ebx, dword [esp + 0x18]
push ebx
push 0x54
mov ecx, dword [esp + 0x40]
push ecx
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253
cld
mov edi, 0x59541b
mov ecx, 2
mov esi, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x4c77fc
cmp bl, byte [0x59541e]
je 0x4c7a5a
cmp bl, byte [0x59524f]
je 0x4c77e1
cmp bl, byte [0x59525b]
je 0x4c77e1
cmp bl, byte [0x595263]
je 0x4c77e1
cmp bl, byte [0x59526b]
je 0x4c77e1
cmp bl, byte [0x595270]
je 0x4c77e1
cmp bl, byte [0x595275]
je 0x4c77e1
cmp bl, byte [0x59527d]
je 0x4c77e1
cmp bl, byte [0x595282]
je 0x4c77e1
cmp bl, byte [0x59528a]
je 0x4c77e1
cmp bl, byte [0x59528f]
je 0x4c77e1
cmp bl, byte [0x595294]
je 0x4c77e1
cmp bl, byte [0x595296]
je 0x4c77e1
cmp bl, byte [0x595298]
je 0x4c77e1
cmp bl, byte [0x59529a]
je 0x4c77e1
cmp bl, byte [0x59529c]
je 0x4c77e1
cmp bl, byte [0x59529e]
je 0x4c77e1
cmp bl, byte [0x5952a0]
je 0x4c77e1
cmp bl, byte [0x5952a2]
je 0x4c77e1
cmp bl, byte [0x5952a4]
je 0x4c77e1
cmp bl, byte [0x5952a6]
je 0x4c77e1
cmp bl, byte [0x5952a8]
je 0x4c77e1
cmp bl, byte [0x5952aa]
je 0x4c77e1
cmp bl, byte [0x5952ac]
je 0x4c77e1
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov ecx, dword [esp + 0xc]
mov byte [ecx + eax + 0x18], bl
mov eax, dword [esp + 0x10]
push eax
call sub.msvcrt.dll_strlen
add esp, 0x10
mov esi, dword [esp]
jmp 0x4c75fa
cmp bl, byte [0x59528f]
je 0x4c7909
push eax
push eax
mov edx, dword [esp + 8]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x9c]
push eax
mov eax, dword [ecx + 0x98]
push eax
mov eax, dword [esp + 0x18]
push eax
push 0x4e
mov ebp, dword [esp + 0x40]
push ebp
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253
mov eax, dword [esp + 0x24]
mov edx, dword [esp]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], edx
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004c48a0
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], bl
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov ecx, dword [esp + 0xc]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
inc eax
mov ebp, dword [ecx + 0xc]
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 8]
inc eax
inc ebp
mov edi, dword [esp + 0x10]
mov dword [ecx + 0xc], ebp
mov dword [ecx + 8], eax
push edi
call sub.msvcrt.dll_strlen
pop esi
mov esi, dword [esp + 0xc]
mov edx, dword [esi + 0x14]
mov dl, byte [edx]
mov byte [esi + eax + 0x18], dl
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
mov ebp, dword [esi + 0x14]
mov edi, dword [esi + 8]
mov ebx, dword [esi + 0xc]
pop edx
inc ebp
pop ecx
inc edi
mov ecx, dword [esi + 0x10]
inc ebx
mov byte [esi + eax + 0x18], 0
mov dword [esi + 0x14], ebp
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x9c]
push edx
mov eax, dword [eax + 0x98]
push eax
mov eax, dword [esp + 0x18]
push eax
push 0x5b
mov ebp, dword [esp + 0x40]
push ebp
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov esi, dword [esp + 0xc]
mov byte [esi + eax + 0x18], bl
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov ebp, dword [esi + 0x14]
mov edi, dword [esi + 8]
mov ebx, dword [esi + 0xc]
mov byte [esi + eax + 0x18], 0
inc ebp
inc edi
inc ebx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x14], ebp
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov edx, dword [esi + 0x14]
mov dl, byte [edx]
mov byte [esi + eax + 0x18], dl
mov ebp, dword [esp + 0x10]
push ebp
call sub.msvcrt.dll_strlen
add esp, 0x10
jmp 0x4c75fa
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov esi, dword [esp + 0xc]
mov byte [esi + eax + 0x18], bl
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
mov ebp, dword [esi + 8]
mov edi, dword [esi + 0xc]
pop edx
pop ecx
mov byte [esi + eax + 0x18], 0
mov eax, dword [esi + 0x14]
inc eax
inc ebp
inc edi
mov dword [esi + 0x14], eax
mov dword [esi + 8], ebp
mov dword [esi + 0xc], edi
mov esi, dword [esi + 0x10]
push esi
mov eax, dword [esp + 0xc]
mov ebx, dword [eax + 0x9c]
push ebx
mov ecx, dword [eax + 0x98]
push ecx
mov edx, dword [esp + 0x18]
push edx
push 0x13
mov eax, dword [esp + 0x40]
push eax
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov ecx, dword [esp + 0xc]
mov byte [ecx + eax + 0x18], bl
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
pop edx
pop ecx
mov esi, dword [esp + 8]
mov ebp, dword [esi + 0x14]
mov edi, dword [esi + 8]
mov ebx, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
inc ebp
inc edi
inc ebx
mov byte [esi + eax + 0x18], 0
mov dword [esi + 0x14], ebp
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x9c]
push edx
mov eax, dword [eax + 0x98]
push eax
mov eax, dword [esp + 0x18]
push eax
push 4
mov ebp, dword [esp + 0x40]
push ebp
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253
sub esp, 0xc
mov ebp, dword [esp + 0x10]
push ebp
call sub.msvcrt.dll_strlen
pop edi
mov byte [esi + eax + 0x18], bl
mov ecx, dword [esp + 0x10]
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov ebp, dword [esi + 0x14]
mov edi, dword [esi + 8]
mov ebx, dword [esi + 0xc]
mov byte [esi + eax + 0x18], 0
inc ebp
inc edi
inc ebx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x14], ebp
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
push ecx
call sub.msvcrt.dll_strlen
pop edx
mov edx, dword [esi + 0x14]
mov dl, byte [edx]
mov byte [esi + eax + 0x18], dl
mov eax, dword [esp + 0x10]
push eax
call sub.msvcrt.dll_strlen
mov ebp, dword [esi + 0x14]
mov edi, dword [esi + 8]
mov ebx, dword [esi + 0xc]
inc ebp
inc edi
inc ebx
add esp, 0x10
mov byte [esi + eax + 0x18], 0
mov dword [esi + 0x14], ebp
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
jmp 0x4c7582
sub esp, 0xc
mov edi, dword [esp + 0x10]
push edi
call sub.msvcrt.dll_strlen
pop esi
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 0x18], bl
mov ebx, dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_strlen
pop edx
pop ecx
mov ecx, dword [esp + 8]
mov byte [ecx + eax + 0x18], 0
mov eax, dword [ecx + 0x14]
inc eax
mov dword [ecx + 0x14], eax
mov eax, dword [ecx + 8]
inc eax
mov dword [ecx + 8], eax
mov eax, dword [ecx + 0xc]
inc eax
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x10]
push eax
mov esi, dword [esp + 0xc]
mov ebp, dword [esi + 0x9c]
push ebp
mov edi, dword [esi + 0x98]
push edi
mov esi, dword [esp + 0x18]
push esi
push 0x5a
mov ebx, dword [esp + 0x40]
push ebx
call fcn.004c4860
add esp, 0x20
jmp 0x4c7253