Function at 0x4e9c80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x4c]
cmp eax, dword [ecx + 8]
jbe 0x4ea8ec
sub esp, 0xcc
lea eax, [0x6b3ee0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xd8]
mov edx, dword [ecx + 0x28]
mov ebx, dword [ecx + 0x2c]
mov ebp, dword [ecx + 0x24]
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov edx, dword [0x9aef70]
test edx, edx
je 0x4e9cd7
call fcn.0046c890
mov dword [edi], ebp
mov dword [esp + 0x5c], eax
mov dword [eax], ebp
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov dword [esp], edx
mov dword [esp + 4], ebx
lea edx, [0x6cfe67]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
call fcn.0048f5e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x746ebc]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004d3870
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test al, al
je 0x4e9d6b
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x5c]
mov dword [ebp + 0x18], eax
mov eax, dword [0x9aef70]
test eax, eax
je 0x4e9d66
call fcn.0046c8a0
mov dword [edi], ebx
mov eax, dword [ebp + 0x14]
mov dword [edi + 4], eax
mov dword [ebp + 0x14], ebx
jmp 0x4e9d73
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x38], edx
mov dword [esp + 0x6c], ecx
mov dword [esp], ecx
mov dword [esp + 4], edx
lea eax, [0x6cf9b8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004d1890
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x28], edx
cmp eax, 1
je 0x4e9e09
test eax, eax
jbe 0x4ea8e2
lea ebx, [edx - 1]
neg ebx
sar ebx, 0x1f
and ebx, 8
mov ebp, dword [ecx + 4]
mov dword [esp + 0x38], ebp
mov esi, dword [ecx]
mov dword [esp + 0x6c], esi
add ebx, ecx
mov dword [esp + 0xc8], ebx
lea edi, [eax - 1]
mov dword [esp + 0x50], edi
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x40]
jmp 0x4ea568
mov ebx, dword [esp + 0x5c]
mov dword [ebx + 0x1c], 1
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x6c]
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x4e9f50
test ebp, ebp
jne 0x4e9f50
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x6cfe67]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 3
call fcn.0048f5e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], ecx
lea edi, [esp + 0xac]
xor eax, eax
call fcn.0046cb2a
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4e9eb6
mov eax, dword [eax + 4]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
lea eax, [0x6e3e90]
mov dword [esp], eax
mov dword [esp + 4], 0x36
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
call fcn.004c4ea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
add esp, 0xcc
ret
mov edi, dword [esp + 0xd8]
cmp dword [edi + 4], 7
jne 0x4e9fc6
mov ecx, dword [edi]
cmp dword [ecx], 0x4e4c4d58
jne 0x4e9fc2
cmp word [ecx + 4], 0x6d61
jne 0x4e9fbc
cmp byte [ecx + 6], 0x65
jne 0x4e9fb6
mov dword [ebx + 0x10], ebp
mov eax, dword [0x9aef70]
test eax, eax
je 0x4e9f8f
call fcn.0046c8a0
mov dword [edi], esi
mov eax, dword [ebx + 0xc]
mov dword [edi + 4], eax
mov dword [ebx + 0xc], esi
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
add esp, 0xcc
ret
mov ecx, dword [esp + 0x54]
jmp 0x4e9fc6
mov ecx, dword [esp + 0x54]
jmp 0x4e9fc6
mov ecx, dword [esp + 0x54]
test ebp, ebp
jne 0x4ea079
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004ea900
mov eax, dword [esp + 8]
test eax, eax
je 0x4ea026
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x5c]
mov dword [ebp + 0x18], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x4ea01b
call fcn.0046c8c0
mov dword [edi], edx
mov ecx, dword [ebp + 0x14]
mov dword [edi + 4], ecx
mov dword [edi + 8], ebx
mov ecx, dword [ebp + 0xc]
mov dword [edi + 0xc], ecx
mov dword [ebp + 0x14], edx
mov dword [ebp + 0x10], eax
mov dword [ebp + 0xc], ebx
jmp 0x4ea055
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0x5c]
mov dword [edx + 0x10], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x4ea050
call fcn.0046c8a0
mov dword [edi], eax
mov ecx, dword [edx + 0xc]
mov dword [edi + 4], ecx
mov dword [edx + 0xc], eax
mov ebp, edx
mov dword [esp + 0xdc], ebp
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
add esp, 0xcc
ret
mov dword [esp + 0x6c], esi
mov dword [esp + 0x38], ebp
nop
mov dword [esp], esi
mov dword [esp + 4], ebp
lea eax, [0x746fc0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004d1890
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
test eax, eax
jbe 0x4ea54e
mov edx, dword [esp + 0x18]
mov ebx, dword [edx + 4]
test ebx, ebx
jne 0x4ea0f4
mov ebx, dword [esp + 0xd8]
mov ebp, dword [ebx + 4]
mov esi, dword [ebx]
mov dword [edx + 4], ebp
mov ebp, dword [0x9aef70]
test ebp, ebp
je 0x4ea0f0
call fcn.0046c8a0
mov dword [edi], esi
mov ebp, dword [edx]
mov dword [edi + 4], ebp
mov dword [edx], esi
jmp 0x4ea0fb
mov ebx, dword [esp + 0xd8]
lea ebp, [edx + eax*8 - 8]
mov esi, dword [ebp + 4]
test esi, esi
je 0x4ea471
mov ebp, dword [ebp]
mov edi, dword [esp + 0x5c]
mov dword [edi + 0x10], esi
mov esi, dword [0x9aef70]
test esi, esi
je 0x4ea136
mov esi, edi
call fcn.0046c8a0
mov dword [edi], ebp
mov ebx, dword [esi + 0xc]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0xd8]
mov edi, esi
mov dword [edi + 0xc], ebp
cmp eax, 1
jle 0x4ea2b0
mov ebp, dword [edi + 0x1c]
test ebp, 1
jne 0x4ea28b
mov edx, dword [esp + 0x24]
cmp edx, 1
jb 0x4ea542
mov eax, dword [esp + 0x28]
dec eax
lea ecx, [edx - 1]
mov edx, eax
neg eax
sar eax, 0x1f
and eax, 8
mov ebx, dword [esp + 0x54]
add eax, ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
lea eax, [0x6cf9b8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call fcn.004d1ac0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 4], edx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
lea eax, [0x6de249]
mov dword [esp], eax
mov dword [esp + 4], 0x24
lea eax, [esp + 0x9c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4ea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
add esp, 0xcc
ret
dec eax
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], ecx
mov eax, dword [0x9aef70]
test eax, eax
je 0x4ea2ad
mov eax, edi
call fcn.0046c8a0
mov dword [edi], edx
mov ecx, dword [eax + 0x20]
mov dword [edi + 4], ecx
mov edi, eax
mov dword [edi + 0x20], edx
mov eax, dword [edi + 0x1c]
test eax, 1
je 0x4ea329
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x70], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004ea900
mov eax, dword [esp + 8]
mov dword [esp + 0x58], eax
test eax, eax
je 0x4ea31d
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x5c]
cmp dword [edx + 0x10], ecx
je 0x4ea2f3
mov ecx, 1
jmp 0x4ea323
mov ebx, dword [eax + 0xc]
mov ebp, dword [edx + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00403200
movzx eax, byte [esp + 0xc]
xor eax, 1
mov edx, dword [esp + 0x5c]
mov ecx, eax
mov eax, dword [esp + 0x58]
jmp 0x4ea323
mov edx, dword [esp + 0x5c]
xor ecx, ecx
test cl, cl
jne 0x4ea34d
mov edi, edx
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
add esp, 0xcc
ret
lea edi, [esp + 0x74]
xor eax, eax
call fcn.0046cb26
mov ecx, dword [edx + 0xc]
mov edx, dword [edx + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0040ab30
mov ecx, dword [esp + 8]
lea edx, [0x6929c0]
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x4ea38c
mov eax, dword [ecx + 4]
jmp 0x4ea38e
mov eax, ecx
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4ea409
mov eax, dword [eax + 4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x98], eax
lea eax, [0x6e5792]
mov dword [esp], eax
mov dword [esp + 4], 0x41
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 5
call fcn.004c4ea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
add esp, 0xcc
ret
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4ea4d4
mov eax, dword [eax + 4]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xa8], eax
lea eax, [0x6dfc5d]
mov dword [esp], eax
mov dword [esp + 4], 0x28
lea eax, [esp + 0x9c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4ea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
add esp, 0xcc
ret
mov eax, 1
xor ecx, ecx
call fcn.0046c970
xor eax, eax
mov ecx, eax
call fcn.0046c910
inc ecx
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
cmp ecx, edi
jge 0x4ea6d0
lea edx, [ebx + ecx*8]
mov eax, dword [edx + 4]
mov edx, dword [edx]
cmp eax, 5
jg 0x4ea5ec
cmp eax, 3
jne 0x4ea5a5
cmp word [edx], 0x6e61
jne 0x4ea6c7
cmp byte [edx + 2], 0x79
jne 0x4ea6c7
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 0x40
jmp 0x4ea557
cmp eax, 4
jne 0x4ea5c0
cmp dword [edx], 0x72747461
jne 0x4ea6c7
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 2
jmp 0x4ea557
cmp eax, 5
jne 0x4ea6c7
cmp dword [edx], 0x74616463
jne 0x4ea6c7
cmp byte [edx + 4], 0x61
jne 0x4ea6c7
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 4
jmp 0x4ea557
cmp eax, 7
jne 0x4ea620
cmp dword [edx], 0x6d6d6f63
jne 0x4ea6c7
cmp word [edx + 4], 0x6e65
jne 0x4ea6c7
cmp byte [edx + 6], 0x74
jne 0x4ea6c7
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 0x20
jmp 0x4ea557
cmp eax, 8
jne 0x4ea661
cmp dword [edx], 0x72616863
jne 0x4ea643
cmp dword [edx + 4], 0x61746164
jne 0x4ea643
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 8
jmp 0x4ea557
cmp dword [edx], 0x656e6e69
jne 0x4ea6c7
cmp dword [edx + 4], 0x6c6d7872
jne 0x4ea6c7
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 0x10
jmp 0x4ea557
cmp eax, 9
jne 0x4ea6c7
mov dword [esp], edx
lea eax, [0x6d1202]
mov dword [esp + 4], eax
mov dword [esp + 8], 9
call fcn.00403200
movzx eax, byte [esp + 0xc]
test al, al
je 0x4ea6b0
mov eax, dword [esp + 0x5c]
or dword [eax + 0x1c], 0x80
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x50]
jmp 0x4ea557
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0x5c]
jmp 0x4ea557
mov ecx, dword [esp + 0x5c]
mov ebx, dword [ecx + 0x1c]
mov edi, ebx
and ebx, 0x7f
cmp ebx, 8
jg 0x4ea714
cmp ebx, 2
jg 0x4ea708
test ebx, ebx
jne 0x4ea701
or edi, 1
mov dword [ecx + 0x1c], edi
mov edi, dword [esp + 0xd8]
mov ebx, 1
jmp 0x4ea787
cmp ebx, 2
je 0x4ea72f
jmp 0x4ea77e
cmp ebx, 4
je 0x4ea72f
cmp ebx, 8
je 0x4ea72f
jmp 0x4ea77e
cmp ebx, 0x20
jg 0x4ea725
cmp ebx, 0x10
je 0x4ea72f
cmp ebx, 0x20
je 0x4ea72f
jmp 0x4ea77e
cmp ebx, 0x40
je 0x4ea72f
cmp ebx, 0x42
jne 0x4ea77e
mov edi, dword [esp + 0xd8]
cmp dword [edi + 4], 7
jne 0x4ea76a
mov edx, dword [edi]
cmp dword [edx], 0x4e4c4d58
jne 0x4ea766
cmp word [edx + 4], 0x6d61
jne 0x4ea760
cmp byte [edx + 6], 0x65
jne 0x4ea75a
mov edx, dword [esp + 0x28]
jmp 0x4ea773
mov edx, dword [esp + 0x28]
jmp 0x4ea76a
mov edx, dword [esp + 0x28]
jmp 0x4ea76a
mov edx, dword [esp + 0x28]
test ebp, ebp
je 0x4ea777
cmp ebx, 2
je 0x4ea777
xor ebx, ebx
jmp 0x4ea787
mov ebx, 1
jmp 0x4ea787
mov edi, dword [esp + 0xd8]
xor ebx, ebx
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x48], edx
and edx, 0x7f
cmp edx, 0x40
jne 0x4ea7a0
mov edx, dword [esp + 0x48]
or edx, 1
mov dword [ecx + 0x1c], edx
mov edx, dword [ecx + 0x1c]
test edx, 0x80
je 0x4ea7b3
test edx, 3
je 0x4ea7c8
test bl, bl
je 0x4ea7c8
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x5c]
jmp 0x4e9e1c
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x6cfe67]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
call fcn.0048f5e0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], ecx
lea edi, [esp + 0xac]
xor eax, eax
call fcn.0046cb2a
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x4ea848
mov eax, dword [eax + 4]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0040ab30
mov eax, dword [esp + 8]
lea ecx, [0x6929c0]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
lea eax, [0x6e0db3]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
call fcn.004c4ea0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
add esp, 0xcc
ret
xor eax, eax
mov ecx, eax
call fcn.0046c910
nop
call fcn.0046b490
jmp fcn.004e9c80