Function at 0x47c8d0
Capabilities:
Read file on windows
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4e71e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov esi, ecx
xor ebx, ebx
push 2
mov dword [esp + 0x38], esi
mov dword [esp + 0x54], ebx
call fcn.00445f00
add esp, 4
cmp eax, ebx
mov dword [esp + 0x50], eax
je 0x47c90d
mov word [eax], bx
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], ebx
mov esi, dword [esp + 0x6c]
mov di, word [esi]
cmp di, 9
mov dword [esp + 0x64], ebx
mov ebp, 0x4b0
jb 0x47c935
cmp di, 0xd
jbe 0x47cab0
cmp di, 0x20
je 0x47cab0
push 4
push esi
push str._UNI
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47c95c
mov dword [esp + 0x18], ebp
jmp 0x47cab4
push 5
push esi
push str._UNIB
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47c97d
mov dword [esp + 0x18], 0x4b1
jmp 0x47cab4
push 8
push esi
push str._UNICODE
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47c99a
mov dword [esp + 0x18], ebp
jmp 0x47cab4
push 9
push esi
push str._UNICODEB
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47c9bb
mov dword [esp + 0x18], 0x4b1
jmp 0x47cab4
push 5
push esi
push str._UTF8
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47c9dc
mov dword [esp + 0x18], 0xfde9
jmp 0x47cab4
push 5
push esi
push str._UTF7
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47c9fd
mov dword [esp + 0x18], 0xfde8
jmp 0x47cab4
push 4
push esi
push str._GBK
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47ca1e
mov dword [esp + 0x18], 0x3a8
jmp 0x47cab4
push 5
push esi
push str._BIG5
call fcn.004403f0
add esp, 0xc
test al, al
je 0x47ca3c
mov dword [esp + 0x18], 0x3b6
jmp 0x47cab4
push 5
push esi
push str._ANSI
call fcn.004403f0
add esp, 0xc
test al, al
jne 0x47cab0
cmp di, 0x2d
jne 0x47ca7d
mov ax, word [esi + 2]
add esi, 2
call fcn.00445b20
test al, al
je 0x47ca7d
mov eax, esi
push eax
mov dword [esp + 0x70], eax
call fcn.00447090
add esp, 4
cmp eax, ebx
mov dword [esp + 0x18], eax
jge 0x47cab4
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x47ca96
add eax, 0xfffffff8
push eax
mov eax, dword [0x51927c]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
add esp, 0x58
ret 8
mov dword [esp + 0x18], ebx
lea ecx, [esp + 0x6c]
push ecx
call fcn.0041676d
lea edx, [esp + 0x70]
push edx
call fcn.0043f2e0
mov eax, dword [esp + 0x74]
push 4
push eax
push str.fix
call fcn.004403f0
mov bl, al
add esp, 0x14
test bl, bl
je 0x47cafc
mov esi, dword [esp + 0x6c]
lea ecx, [esp + 0x6c]
add esi, 8
push ecx
mov dword [esp + 0x70], esi
call fcn.0043f2e0
add esp, 4
test bl, bl
mov eax, dword [esp + 0x6c]
sete dl
dec dl
push 4
push eax
push str._nl
and edx, 2
mov byte [esp + 0x44], dl
call fcn.004403f0
add esp, 0xc
test al, al
mov byte [esp + 0x13], al
je 0x47cb3c
mov esi, dword [esp + 0x6c]
lea ecx, [esp + 0x6c]
add esi, 8
push ecx
mov dword [esp + 0x70], esi
call fcn.0043f2e0
add esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4ebd38
call ebx
lea esi, [eax + eax + 2]
lea edx, [esi + 2]
push edx
call fcn.00445f00
mov ecx, esi
mov edx, ecx
shr ecx, 2
mov esi, 0x4ebd38
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x28], eax
push 0x4f65b4
call ebx
lea esi, [eax + eax + 2]
lea eax, [esi + 2]
push eax
call fcn.00445f00
mov ecx, esi
mov edx, ecx
mov ebp, eax
shr ecx, 2
mov esi, 0x4f65b4
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x24], ebp
push 1
push 0x2c
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x70], 2
mov dword [esp + 0x38], 0
call fcn.0045a420
push 0
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.00449370
mov edi, dword [esp + 0x34]
push edi
call fcn.0042063d
mov esi, eax
add esp, 0x10
cmp word [esi], 0
jne 0x47cc45
test ebp, ebp
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x47cc02
mov edx, dword [0x51927c]
add ebp, 0xfffffff8
push ebp
push 0
push edx
call esi
test edi, edi
je 0x47cc14
mov eax, dword [0x51927c]
add edi, 0xfffffff8
push edi
push 0
push eax
call esi
mov eax, dword [esp + 0x50]
test eax, eax
je 0x47cc2b
mov ecx, dword [0x51927c]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
pop edi
pop esi
pop ebp
mov eax, 0x80070057
pop ebx
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
add esp, 0x58
ret 8
mov eax, dword [esp + 0x6c]
cmp word [eax], 0x2c
jne 0x47cc97
lea edx, [esp + 0x6c]
add eax, 2
push edx
mov dword [esp + 0x70], eax
call fcn.0043f2e0
mov eax, dword [esp + 0x70]
add esp, 4
cmp word [eax], 0x2c
je 0x47cc97
push 1
push 0x2c
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x5c]
call fcn.0045a420
push 0
lea ecx, [esp + 0x28]
push ecx
push eax
call fcn.00449370
mov eax, dword [esp + 0x78]
mov ebp, dword [esp + 0x30]
add esp, 0xc
cmp word [eax], 0x2c
mov dword [esp + 0x20], 0x4ebd38
jne 0x47ccac
add eax, 2
mov dword [esp + 0x20], eax
xor bl, bl
cmp word [ebp], 0x24
mov dword [esp + 0x6c], ebp
mov byte [esp + 0x12], bl
jne 0x47ccc7
mov bl, byte [ebp]
lea edx, [ebp + 2]
mov dword [esp + 0x6c], edx
lea eax, [esp + 0x6c]
push eax
call fcn.0043f2e0
mov eax, dword [esp + 0x70]
mov cx, word [eax]
add esp, 4
cmp cx, 0x2b
je 0x47cce7
cmp cx, 0x2d
jne 0x47ccf4
mov cl, byte [eax]
add eax, 2
mov byte [esp + 0x12], cl
mov dword [esp + 0x6c], eax
lea edx, [esp + 0x6c]
push edx
call fcn.0043f2e0
mov eax, dword [esp + 0x70]
mov ax, word [eax]
add esp, 4
cmp ax, 0x30
jb 0x47cd77
cmp ax, 0x39
ja 0x47cd77
push 0x2c
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x74]
push edx
call fcn.00449750
mov eax, dword [esp + 0x38]
add esp, 0xc
test eax, eax
jge 0x47cd77
mov eax, dword [0x51927c]
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
add ebp, 0xfffffff8
push ebp
push 0
push eax
call esi
test edi, edi
je 0x47cd57
mov ecx, dword [0x51927c]
add edi, 0xfffffff8
push edi
push 0
push ecx
call esi
mov eax, dword [esp + 0x50]
test eax, eax
je 0x47d521
mov edx, dword [0x51927c]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
jmp 0x47d521
xor ebp, ebp
push 2
mov dword [esp + 0x20], ebp
call fcn.00445f00
add esp, 4
cmp eax, ebp
mov dword [esp + 0x1c], eax
je 0x47cd92
mov word [eax], bp
test bl, bl
mov byte [esp + 0x64], 3
je 0x47cdd7
mov ecx, dword [esp + 0x34]
mov al, byte [ecx + 0x8a]
test al, al
jne 0x47cdc3
test byte [ecx + 0xb], 0xf
jne 0x47cdc3
mov edx, dword [esp + 0x20]
push 1
push ebp
lea eax, [esp + 0x24]
push eax
push edx
call fcn.004531a0
jmp 0x47cde5
mov edx, dword [esp + 0x20]
push 1
push ebp
lea eax, [esp + 0x24]
push eax
push edx
call fcn.00451c30
jmp 0x47cde5
mov eax, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x20]
call fcn.004574e0
mov dword [esp + 0x14], ebp
push esi
push 0x4ef7b4
mov byte [esp + 0x6c], 4
mov byte [esp + 0x74], 0
call fcn.00440490
add esp, 8
test al, al
je 0x47ce12
mov ebp, dword [0x51533c]
mov byte [esp + 0x6c], 2
jmp 0x47ce2f
push esi
push 0x4efd08
call fcn.00440490
add esp, 8
test al, al
je 0x47ce2f
mov ebp, dword [0x515338]
mov byte [esp + 0x6c], 1
mov al, byte [esp + 0x13]
test al, al
jne 0x47ce45
push 0x4ef484
lea ecx, [esp + 0x20]
call fcn.004462e0
mov al, byte [esp + 0x6c]
xor edi, edi
xor ebx, ebx
test al, al
mov dword [esp + 0x20], edi
jne 0x47d02f
push esi
push str.CONOUT_
call fcn.00440490
add esp, 8
test al, al
je 0x47ce78
push 0x100
call fcn.004431e0
add esp, 4
push ebx
push 0x80
push 3
push ebx
push 7
push 0xc0000000
push esi
lea ecx, [esp + 0x30]
call fcn.004167bc
mov eax, dword [esp + 0x14]
cmp eax, ebx
jne 0x47cec3
push ebx
push ebx
push esi
call fcn.00450bf0
add esp, 0xc
push ebx
push 0x80
push 4
push ebx
push 7
push 0xc0000000
push esi
lea ecx, [esp + 0x30]
call fcn.004167bc
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov ebp, eax
jne 0x47cf15
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.004167b7
lea ecx, [esp + 0x1c]
call fcn.0043f290
lea ecx, [esp + 0x24]
call fcn.0043f290
lea ecx, [esp + 0x28]
call fcn.0043f290
lea ecx, [esp + 0x50]
call fcn.0043f290
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
add esp, 0x58
ret 8
push ebx
lea ecx, [esp + 0x38]
push ecx
push 3
lea edx, [esp + 0x54]
push edx
push eax
mov byte [esp + 0x5c], 0
mov byte [esp + 0x5d], 0
mov byte [esp + 0x5e], 0
mov word [esp + 0x5f], bx
mov dword [esp + 0x48], ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov al, byte [esp + 0x48]
cmp al, 0xff
jne 0x47cf64
cmp byte [esp + 0x49], 0xfe
jne 0x47cfa9
mov esi, 0x4b0
mov edi, 2
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], edi
jmp 0x47cfad
cmp al, 0xfe
jne 0x47cf83
cmp byte [esp + 0x49], 0xff
jne 0x47cfa9
mov esi, 0x4b1
mov edi, 2
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], edi
jmp 0x47cfad
cmp al, 0xef
jne 0x47cfa9
cmp byte [esp + 0x49], 0xbb
jne 0x47cfa9
cmp byte [esp + 0x4a], 0xbf
jne 0x47cfa9
mov esi, 0xfde9
mov edi, 3
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], edi
jmp 0x47cfad
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x34], ebx
lea ecx, [esp + 0x14]
push ebx
jne 0x47d025
push ebx
push ebx
call fcn.00445e00
cmp esi, 0x4b0
jne 0x47cfe1
push 2
push 0x4f3220
lea ecx, [esp + 0x1c]
mov dword [esp + 0x28], 2
call fcn.0043f210
jmp 0x47d02f
cmp esi, 0x4b1
jne 0x47d003
push 2
push 0x4f3224
lea ecx, [esp + 0x1c]
mov dword [esp + 0x28], 2
call fcn.0043f210
jmp 0x47d02f
cmp esi, 0xfde9
jne 0x47d02f
push 3
push 0x4f3228
lea ecx, [esp + 0x1c]
mov dword [esp + 0x28], 3
call fcn.0043f210
jmp 0x47d02f
mov eax, edi
cdq
push edx
push eax
call fcn.00445e00
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esp + 0x18]
mov ebx, eax
shl ebx, 1
cmp ecx, 0x4b0
mov dword [esp + 0x30], ebx
je 0x47d0b9
cmp ecx, 0x4b1
jne 0x47d066
mov ecx, dword [esp + 0x1c]
push ebx
push ecx
call fcn.004431b0
add esp, 8
jmp 0x47d0b9
cmp ecx, 0xfde9
jne 0x47d07f
lea ecx, [esp + 0x1c]
call fcn.0041d78c
mov ebx, eax
mov dword [esp + 0x30], ebx
jmp 0x47d0b9
mov eax, dword [esp + 0x1c]
movzx edx, cx
push edx
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], eax
mov dword [esp + 0x28], 0
call fcn.004461b0
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x30], ebx
call fcn.0043f290
mov cl, byte [esp + 0x6c]
test cl, cl
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x34], eax
je 0x47d147
cmp ebp, 0xffffffff
jne 0x47d115
lea ecx, [esp + 0x14]
call fcn.004167b7
lea ecx, [esp + 0x1c]
call fcn.0043f290
lea ecx, [esp + 0x24]
call fcn.0043f290
lea ecx, [esp + 0x28]
call fcn.0043f290
lea ecx, [esp + 0x50]
call fcn.0043f290
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
add esp, 0x58
ret 8
push 0
lea ecx, [esp + 0x70]
push ecx
push ebx
push eax
push ebp
mov dword [esp + 0x80], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
push ebp
call esi
push ebp
call esi
push ebp
call esi
push ebp
call esi
jmp 0x47d4f4
lea ecx, [esp + 0x48]
call fcn.00446250
lea ecx, [esp + 0x44]
call fcn.00446250
lea ecx, [esp + 0x40]
call fcn.00446060
lea ecx, [esp + 0x6c]
call fcn.00446060
mov edi, dword [esp + 0x2c]
test edi, edi
mov esi, dword [esp + 0x38]
jne 0x47d248
cmp byte [esp + 0x12], 0x2b
lea ecx, [esp + 0x14]
je 0x47d229
mov eax, dword [esp + 0x20]
cdq
push 0
push edx
push eax
mov ebx, eax
mov dword [esp + 0x48], edx
call fcn.00445e00
lea ecx, [esp + 0x14]
call fcn.00445e40
mov ebp, edx
mov edx, dword [esp + 0x18]
push esi
mov edi, eax
push edx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00450790
add esp, 0x10
test eax, eax
je 0x47d1ff
jmp 0x47d1d0
lea ecx, [esp + 0x14]
mov ebx, edi
mov dword [esp + 0x3c], ebp
call fcn.00445e40
mov ebp, edx
mov edx, dword [esp + 0x18]
push esi
mov edi, eax
push edx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00450790
add esp, 0x10
test eax, eax
jne 0x47d1d0
mov edi, dword [esp + 0x3c]
push 0
push edi
push ebx
lea ecx, [esp + 0x20]
call fcn.00445e00
push edi
lea edx, [esp + 0x18]
push ebx
push edx
call fcn.00450c90
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
add esp, 0xc
jmp 0x47d272
push 2
push 0
push 0
call fcn.00445e00
mov eax, dword [esp + 0x34]
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.0043f210
jmp 0x47d4d0
mov ebp, 1
cmp edi, ebp
jle 0x47d272
mov eax, dword [esp + 0x18]
push esi
push eax
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00450790
add esp, 0x10
test eax, eax
je 0x47d272
inc ebp
cmp ebp, edi
jl 0x47d251
mov al, byte [esp + 0x12]
cmp al, 0x2b
jne 0x47d32d
test edi, edi
jne 0x47d296
mov eax, dword [esp + 0x34]
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.0043f210
jmp 0x47d4d0
lea ecx, [esp + 0x14]
call fcn.00445e40
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.0041d1c1
sub eax, esi
mov ebp, eax
jns 0x47d2b2
xor ebp, ebp
add eax, 0xca
push eax
lea ecx, [esp + 0x34]
call fcn.00446080
mov eax, esi
cdq
push 0
mov edi, edx
mov esi, eax
push edi
push esi
lea ecx, [esp + 0x20]
call fcn.00445e00
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
push 0
lea ecx, [esp + 0x3c]
push ecx
push ebp
push edx
push eax
mov dword [esp + 0x4c], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
push edi
push esi
lea ecx, [esp + 0x20]
call fcn.00445e00
mov ecx, dword [esp + 0x34]
push ebx
push ecx
lea ecx, [esp + 0x1c]
call fcn.0043f210
test ebp, ebp
jle 0x47d324
mov edx, dword [esp + 0x30]
push ebp
push edx
lea ecx, [esp + 0x1c]
call fcn.0043f210
lea ecx, [esp + 0x30]
jmp 0x47d4cb
cmp al, 0x2d
jne 0x47d3ec
test edi, edi
je 0x47d4d0
lea ecx, [esp + 0x14]
call fcn.00445e40
mov edi, eax
mov eax, dword [esp + 0x18]
push esi
push eax
lea ecx, [esp + 0x74]
mov ebp, edx
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00450790
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00445e40
lea ecx, [esp + 0x14]
mov ebx, eax
mov dword [esp + 0x3c], edx
call fcn.0041d1c1
mov esi, eax
sub esi, ebx
lea eax, [esi + 0xca]
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x40], edx
call fcn.00446080
mov edx, dword [esp + 0x14]
push 0
lea ecx, [esp + 0x38]
push ecx
add esi, 0xc8
push esi
mov esi, dword [esp + 0x3c]
push esi
push edx
mov dword [esp + 0x48], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
push ebp
push edi
lea ecx, [esp + 0x20]
call fcn.00445e00
push ebp
lea eax, [esp + 0x18]
push edi
push eax
call fcn.00450c90
mov ecx, dword [esp + 0x40]
add esp, 0xc
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.0043f210
lea ecx, [esp + 0x30]
jmp 0x47d4cb
test edi, edi
lea ecx, [esp + 0x14]
jne 0x47d404
mov edx, dword [esp + 0x34]
push ebx
push edx
call fcn.0043f210
jmp 0x47d4d0
call fcn.00445e40
mov edi, eax
mov eax, dword [esp + 0x18]
push esi
push eax
lea ecx, [esp + 0x74]
mov ebp, edx
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00450790
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00445e40
lea ecx, [esp + 0x14]
mov ebx, eax
mov dword [esp + 0x3c], edx
call fcn.0041d1c1
mov esi, eax
sub esi, ebx
lea eax, [esi + 0xca]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x40], edx
call fcn.00446080
mov edx, dword [esp + 0x14]
push 0
lea ecx, [esp + 0x30]
push ecx
add esi, 0xc8
push esi
mov esi, dword [esp + 0x2c]
push esi
push edx
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
push ebp
push edi
lea ecx, [esp + 0x20]
call fcn.00445e00
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.0043f210
mov edx, dword [esp + 0x2c]
push edx
push esi
lea ecx, [esp + 0x1c]
call fcn.0043f210
lea ecx, [esp + 0x14]
call fcn.00445e40
mov dword [esp + 0x3c], edx
cdq
push edx
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00450c90
add esp, 0xc
lea ecx, [esp + 0x20]
call fcn.0043f290
lea ecx, [esp + 0x6c]
call fcn.0043f290
lea ecx, [esp + 0x40]
call fcn.0043f290
lea ecx, [esp + 0x44]
call fcn.0043f290
lea ecx, [esp + 0x48]
call fcn.0043f290
lea ecx, [esp + 0x14]
call fcn.004167b7
lea ecx, [esp + 0x1c]
call fcn.0043f290
lea ecx, [esp + 0x24]
call fcn.0043f290
lea ecx, [esp + 0x28]
call fcn.0043f290
lea ecx, [esp + 0x50]
call fcn.0043f290
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x58
ret 8