Function at 0x49b3d0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x248
mov eax, dword [0x4f6140]
xor eax, esp
mov dword [esp + 0x244], eax
mov eax, dword [esp + 0x250]
push ebx
mov ebx, dword [esp + 0x250]
push ebp
push esi
mov ebp, eax
mov dword [esp + 0x50], ebx
shl ebp, 4
mov esi, 0x488
add ebp, ebx
mov dword [esp + 0x20], eax
cmp dword [ebx + 0x358], 2
push edi
mov edi, dword [ebx]
lea ecx, [esi + 0x10]
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x50], ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], 0
jne 0x49b44e
cmp dword [ebx + 0x424], 0xffffffff
mov eax, esi
cmovne eax, ecx
cmp dword [eax + ebx], 2
je 0x49b44e
mov eax, dword [ebx + 0x34c]
jmp 0x49b454
mov eax, dword [ebx + 0x304]
push 1
push 2
push 1
push 5
mov dword [esp + 0x30], eax
call fcn.0048a2d0
add esp, 0x10
test al, al
je 0x49b47a
push str.schannel:_Windows_version_is_old_and_may_not_be_able_to_connect_to_some_servers_due_to_lack_of_SNI__algorithms__etc._n
push edi
call fcn.004877e0
add esp, 8
cmp byte [ebx + 0x525], 0
je 0x49b4b6
push str.wine_get_version
push str.ntdll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x49b4b6
push 3
push 2
push 3
push 6
call fcn.0048a2d0
add esp, 0x10
test al, al
je 0x49b4b6
mov cl, 1
jmp 0x49b4b8
xor cl, cl
mov eax, dword [ebp + 0x470]
mov byte [eax + 0x46], cl
cmp dword [ebx + 0x358], 2
jne 0x49b4e9
cmp dword [ebx + 0x424], 0xffffffff
mov eax, esi
mov ecx, 0x498
cmovne eax, ecx
cmp dword [eax + ebx], 2
je 0x49b4e9
mov eax, dword [ebx + 0x4e4]
jmp 0x49b4ef
mov eax, dword [ebx + 0x4b8]
test eax, eax
je 0x49b52b
push 3
push 2
push 1
push 6
call fcn.0048a2d0
add esp, 0x10
test al, al
je 0x49b513
mov eax, dword [ebp + 0x470]
mov byte [eax + 0x47], 1
jmp 0x49b535
push str.schannel:_this_version_of_Windows_is_too_old_to_support_certificate_verification_via_CA_bundle_file.
push edi
call fcn.00487700
add esp, 8
mov eax, 0x4d
jmp 0x49c033
mov eax, dword [ebp + 0x470]
mov byte [eax + 0x47], 0
mov eax, dword [ebp + 0x470]
mov dword [eax], 0
cmp dword [ebx + 0x358], 2
jne 0x49b569
cmp dword [ebx + 0x424], 0xffffffff
mov eax, esi
mov ecx, 0x498
cmovne eax, ecx
cmp dword [eax + ebx], 2
je 0x49b569
mov al, byte [edi + 0x8cf]
jmp 0x49b56f
mov al, byte [edi + 0x873]
test al, al
je 0x49b5b1
push ebx
call fcn.00482540
push dword [esp + 0x28]
lea eax, [esp + 0x24]
push 0
push eax
push ebx
call fcn.00482050
add esp, 0x14
test al, al
jne 0x49b5a8
mov ecx, dword [ebp + 0x470]
mov eax, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp + 0x470]
mov eax, dword [eax]
inc dword [eax + 0x10]
push ebx
call fcn.00482570
add esp, 4
mov esi, dword [ebp + 0x470]
cmp dword [esi], 0
jne 0x49bd66
push 0x38
lea eax, [esp + 0x6c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x68], 4
cmp byte [ebx + 0x4d4], 0
je 0x49b621
cmp byte [esi + 0x47], 0
mov eax, 0x20
mov ecx, 8
cmovne eax, ecx
mov dword [esp + 0x98], eax
cmp byte [edi + 0x89f], 0
je 0x49b60a
or eax, 0x1800
jmp 0x49b626
cmp byte [edi + 0x8a1], 0
je 0x49b61a
or eax, 0x1a00
jmp 0x49b626
or eax, 0x200
jmp 0x49b626
mov eax, 0x1808
cmp byte [ebx + 0x4d5], 0
mov dword [esp + 0x98], eax
jne 0x49b640
or eax, 4
mov dword [esp + 0x98], eax
mov edx, dword [ebx + 0x4ac]
cmp edx, 7
ja case.default.0x49b64f
jmp dword [edx*4 + 0x49c04c]
cmp dword [ebx + 0x358], 2
mov eax, dword [ebx]
mov dword [esp + 0x10], eax
jne 0x49b68d
cmp dword [ebx + 0x424], 0xffffffff
mov eax, 0x488
mov ecx, 0x498
cmovne eax, ecx
cmp dword [eax + ebx], 2
je 0x49b68d
mov edx, dword [ebx + 0x4d8]
mov esi, dword [ebx + 0x4dc]
jmp 0x49b693
mov esi, dword [ebx + 0x4b0]
test esi, esi
je 0x49b69f
cmp esi, 0x10000
jne 0x49b6a4
mov esi, 0x60000
sar esi, 0x10
cmp edx, esi
jg 0x49b716
mov ecx, dword [esp + 0x88]
add edx, 0xfffffffc
cmp edx, 3
ja case.default.0x49b6ba
jmp dword [edx*4 + 0x49c06c]
or ecx, 0x80
jmp 0x49b6d7
or ecx, 0x200
jmp 0x49b6d7
or ecx, 0x800
mov dword [esp + 0x88], ecx
inc edx
lea eax, [edx + 4]
cmp eax, esi
jle 0x49b6b5
jmp 0x49b716
push str.schannel:_TLS_1.3_is_not_yet_supported
push dword [esp + 0x14]
call fcn.00487700
add esp, 8
jmp case.0x49bd48.2146893055
mov dword [esp + 0x88], 0x20
jmp 0x49b716
mov dword [esp + 0x88], 8
mov ecx, dword [ebx + 0x358]
cmp ecx, 2
jne 0x49b74e
cmp dword [ebx + 0x424], 0xffffffff
mov eax, 0x488
mov edx, 0x498
cmovne eax, edx
cmp dword [eax + ebx], ecx
je 0x49b74e
mov edx, dword [ebx + 0x4f4]
lea esi, [ebx + 0x4f4]
lea eax, [ebx + 0x4c8]
jmp 0x49b760
mov edx, dword [ebx + 0x4c8]
lea eax, [ebx + 0x4c8]
lea esi, [ebx + 0x4f4]
test edx, edx
je 0x49b7ea
cmp ecx, 2
jne 0x49b787
cmp dword [ebx + 0x424], 0xffffffff
mov ecx, 0x488
mov edx, 0x498
cmovne ecx, edx
cmp dword [ecx + ebx], 2
jne 0x49b789
mov esi, eax
mov esi, dword [esi]
xor ebx, ebx
test esi, esi
je 0x49b7d8
cmp byte [esi], 0
je 0x49b7d8
cmp ebx, 0x2d
jge 0x49b7d8
push 0
push 0
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
add esp, 0xc
test eax, eax
jne 0x49b7ba
push esi
call fcn.0049a3a0
add esp, 4
test eax, eax
je 0x49b839
push 0x3a
mov dword [ebx*4 + 0x535b70], eax
inc ebx
push esi
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
test esi, esi
je 0x49b7d8
add esi, 1
jne 0x49b791
mov dword [esp + 0x84], 0x535b70
mov dword [esp + 0x80], ebx
mov esi, dword [edi + 0x888]
test esi, esi
je 0x49bc31
push 0x5c
xor ebx, ebx
push esi
mov dword [esp + 0x20], ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x49ba0e
mov ebp, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
mov ebx, eax
sub ebx, esi
push ebx
push str.CurrentUser
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b851
mov ebx, 0x10000
jmp 0x49b8f7
push str.Unable_to_set_ciphers_to_passed_via_SSL_CONN_CONFIG
push edi
call fcn.00487700
add esp, 8
mov eax, 0x3b
jmp 0x49c033
push ebx
push str.LocalMachine
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b86b
mov ebx, 0x20000
jmp 0x49b8f7
push ebx
push str.CurrentService
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b882
mov ebx, 0x40000
jmp 0x49b8f7
push ebx
push str.Services
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b899
mov ebx, 0x50000
jmp 0x49b8f7
push ebx
push str.Users
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b8b0
mov ebx, 0x60000
jmp 0x49b8f7
push ebx
push str.CurrentUserGroupPolicy
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b8c7
mov ebx, 0x70000
jmp 0x49b8f7
push ebx
push str.LocalMachineGroupPolicy
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49b8de
mov ebx, 0x80000
jmp 0x49b8f7
push ebx
push str.LocalMachineEnterprise
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x49ba0c
mov ebx, 0x90000
mov ebp, dword [esp + 0x10]
inc ebp
push 0x5c
push ebp
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
test esi, esi
je 0x49ba0c
push ebp
mov byte [esi], 0
call dword [0x4f60e8]
mov ebp, eax
mov byte [esi], 0x5c
add esp, 4
test ebp, ebp
jne 0x49b931
lea esi, [eax + 0x1b]
xor ebx, ebx
jmp 0x49ba13
lea eax, [esi + 1]
mov ecx, eax
mov dword [esp + 0x10], eax
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49b940
sub ecx, edx
cmp ecx, 0x28
jne 0x49ba0c
push ebp
mov eax, ebx
or eax, 0x4000
push eax
push 0
push 0
push 9
call dword [sym.imp.CRYPT32.dll_CertOpenStore]
mov esi, eax
test esi, esi
jne 0x49b993
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebp
push ebx
push str.schannel:_Failed_to_open_cert_store__x__s__last_error_is_0x_x
push edi
call fcn.00487700
push ebp
call dword [0x4f60e0]
add esp, 0x18
lea eax, [esi + 0x3a]
jmp 0x49c033
push ebp
call dword [0x4f60e0]
add esp, 4
mov dword [esp + 0x58], 0x14
lea eax, [esp + 0xc0]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x58]
push 0
push 0
push eax
lea eax, [esp + 0xcc]
push eax
push 4
push 0x28
push dword [esp + 0x28]
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
je 0x49b9f9
push 0
lea eax, [esp + 0x5c]
push eax
push 0x10000
push 0
push 0x10001
push esi
call dword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov dword [esp + 0x14], eax
test eax, eax
jne 0x49bc14
push 0
push esi
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, 0x3a
jmp 0x49c033
xor ebx, ebx
mov esi, 0x3a
mov eax, dword [edi + 0x888]
cmp byte [eax], 0
je 0x49ba33
push 0x4e2660
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [esp + 0x18], eax
mov ebx, eax
test ebx, ebx
jne 0x49ba52
push dword [edi + 0x888]
push str.schannel:_Failed_to_get_certificate_location_or_file_for__s
push edi
call fcn.00487700
add esp, 0xc
mov eax, esi
jmp 0x49c033
push 2
xor esi, esi
mov dword [esp + 0x14], 0
push esi
push ebx
xor ebp, ebp
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
xor ebx, ebx
add esp, 0xc
test eax, eax
sete bl
test eax, eax
jne 0x49ba8d
push dword [esp + 0x18]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov ebp, eax
add esp, 4
test ebp, ebp
js 0x49bc7d
test ebx, ebx
je 0x49bc7d
push 0
push 0
push dword [esp + 0x20]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
neg eax
sbb ebx, ebx
inc ebx
test ebx, ebx
je 0x49bc7d
lea eax, [ebp + 1]
push eax
call dword [0x4f60dc]
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x49bc7d
mov ebx, dword [esp + 0x18]
push ebx
push 1
push ebp
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
add esp, 0x10
cmp eax, 1
jne 0x49bc7d
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, dword [esp + 0x14]
add esp, 4
mov dword [esp + 0x64], eax
mov eax, dword [edi + 0x898]
mov dword [esp + 0x60], ebp
test eax, eax
je 0x49bb19
mov esi, eax
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x49bb10
sub esi, ecx
lea eax, [esi*2 + 2]
push eax
call dword [0x4f60dc]
add esp, 4
mov ebx, eax
test esi, esi
je 0x49bba2
lea ecx, [esi + 1]
push ecx
push ebx
push esi
push dword [edi + 0x898]
push 8
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jns 0x49bba4
xor eax, eax
mov word [ebx], ax
push 0
push ebx
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.CRYPT32.dll_PFXImportCertStore]
push ebx
mov esi, eax
call dword [0x4f60e0]
push dword [esp + 0x14]
call dword [0x4f60e0]
add esp, 8
test esi, esi
jne 0x49bbca
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [edi + 0x888]
cmp eax, 0x56
jne 0x49bbb0
push ecx
push str.schannel:_Failed_to_import_cert_file__s__password_is_bad
push edi
call fcn.00487700
add esp, 0xc
lea eax, [esi + 0x3a]
jmp 0x49c033
xor eax, eax
cmp eax, esi
jg 0x49bb4d
xor ecx, ecx
mov word [ebx + eax*2], cx
jmp 0x49bb52
push eax
push ecx
push str.schannel:_Failed_to_import_cert_file__s__last_error_is_0x_x
push edi
call fcn.00487700
add esp, 0x10
mov eax, 0x3a
jmp 0x49c033
push 0
push 0
push 0
push 0
push 0x10001
push esi
call dword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov dword [esp + 0x14], eax
test eax, eax
jne 0x49bc14
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [edi + 0x888]
push str.schannel:_Failed_to_get_certificate_from_file__s__last_error_is_0x_x
push edi
call fcn.00487700
add esp, 0x10
push 0
push esi
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, 0x3a
jmp 0x49c033
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x70], 1
push esi
mov dword [esp + 0x78], eax
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov ebp, dword [esp + 0x50]
push 0x18
push 1
call dword [0x4f60ec]
mov ecx, dword [ebp + 0x470]
add esp, 8
mov dword [ecx], eax
mov eax, dword [ebp + 0x470]
mov eax, dword [eax]
test eax, eax
jne 0x49bcaf
push str.schannel:_unable_to_allocate_memory
push edi
call fcn.00487700
mov eax, dword [esp + 0x1c]
add esp, 8
test eax, eax
je case.0x49bd48.2146893056
push eax
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov eax, 0x1b
jmp 0x49c033
push dword [esp + 0x18]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
push dword [edi + 0x888]
push str.schannel:_Failed_to_read_cert_file__s
push edi
call fcn.00487700
push dword [esp + 0x20]
call dword [0x4f60e0]
add esp, 0x14
mov eax, 0x3a
jmp 0x49c033
mov dword [eax + 0x10], 1
mov eax, dword [ebp + 0x470]
mov ecx, dword [eax]
lea eax, [ecx + 8]
push eax
push ecx
push 0
push 0
lea eax, [esp + 0x78]
push eax
mov eax, dword [0x535c28]
push 0
push 2
push str.Microsoft_Unified_Security_Protocol_Provider
mov eax, dword [eax + 0xc]
push 0
call eax
mov ecx, dword [esp + 0x14]
mov esi, eax
test ecx, ecx
je 0x49bcf2
push ecx
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test esi, esi
je 0x49bd62
push 0x100
lea eax, [esp + 0x158]
push eax
push esi
call fcn.00474a20
push eax
push str.schannel:_AcquireCredentialsHandle_failed:__s
push edi
call fcn.00487700
mov eax, dword [ebp + 0x470]
push dword [eax]
call dword [0x4f60e0]
mov eax, dword [ebp + 0x470]
add esi, 0x7ff6fd00
add esp, 0x1c
mov dword [eax], 0
cmp esi, 0xe
ja case.0x49bd48.2146893055
movzx eax, byte [esi + 0x49c088]
jmp dword [eax*4 + 0x49c07c]
push str.Unrecognized_parameter_passed_via_CURLOPT_SSLVERSION
push edi
call fcn.00487700
add esp, 8
jmp case.0x49bd48.2146893055
mov ebx, dword [esp + 0x54]
mov esi, dword [esp + 0x20]
lea eax, [esp + 0xac]
push eax
push esi
push 2
call fcn.00498970
add esp, 0xc
test eax, eax
jne 0x49bd98
lea eax, [esp + 0xb0]
push eax
push esi
push 0x17
call fcn.00498970
add esp, 0xc
test eax, eax
je 0x49bda6
push str.schannel:_using_IP_address__SNI_is_not_supported_by_OS._n
push edi
call fcn.004877e0
add esp, 8
mov eax, dword [ebp + 0x470]
cmp byte [eax + 0x46], 0
je 0x49be27
push str.http_1.1
push str.schannel:_ALPN__offering__s_n
push edi
mov dword [esp + 0xe4], 2
mov byte [esp + 0xea], 8
mov dword [esp + 0xeb], 0x70747468
mov dword [esp + 0xef], 0x312e312f
call fcn.004877e0
push 9
call fcn.00489f20
mov word [esp + 0xec], ax
add esp, 0x10
movzx eax, ax
add eax, 6
mov dword [esp + 0x2c], 0x13
mov dword [esp + 0xd4], eax
lea eax, [esp + 0xd4]
mov dword [esp + 0x30], 0x12
mov dword [esp + 0x34], eax
jmp 0x49be3f
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
lea eax, [esp + 0x2c]
mov dword [esp + 0x48], 1
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x38]
mov dword [esp + 0xa8], eax
mov eax, dword [ebp + 0x470]
push 0x10
mov dword [esp + 0x48], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 1
push 1
mov dword [eax + 0x38], 0x811c
call dword [0x4f60ec]
mov ecx, dword [ebp + 0x470]
add esp, 8
mov dword [ecx + 4], eax
mov ecx, dword [ebp + 0x470]
mov edx, dword [ecx + 4]
test edx, edx
jne 0x49bed8
push str.schannel:_unable_to_allocate_memory
push edi
call fcn.00487700
add esp, 8
mov eax, 0x1b
jmp 0x49c033
test esi, esi
je case.0x49bd48.2146893056
lea eax, [edx + 8]
push eax
lea eax, [ecx + 0x3c]
push eax
lea eax, [esp + 0xa8]
push eax
push edx
xor edx, edx
lea eax, [esp + 0x54]
cmp byte [ecx + 0x46], dl
push 0
cmove eax, edx
push eax
mov eax, dword [0x535c28]
push edx
push edx
push dword [ecx + 0x38]
mov eax, dword [eax + 0x18]
push esi
push edx
push dword [ecx]
call eax
mov esi, eax
cmp esi, 0x90312
je 0x49bfa3
mov ecx, dword [ebp + 0x470]
push dword [ecx + 4]
call dword [0x4f60e0]
mov ecx, dword [ebp + 0x470]
lea eax, [esp + 0x158]
add esp, 4
mov dword [ecx + 4], 0
push 0x100
push eax
push esi
call fcn.00474a20
push eax
cmp esi, 0x80090300
je 0x49bf8b
cmp esi, 0x80090322
je 0x49bf73
push str.schannel:_initial_InitializeSecurityContext_failed:__s
push edi
call fcn.00487700
add esp, 0x18
jmp case.0x49bd48.2146893055
push str.schannel:_SNI_or_certificate_check_failed:__s
push edi
call fcn.00487700
add esp, 0x18
mov eax, 0x3c
jmp 0x49c033
push str.schannel:_initial_InitializeSecurityContext_failed:__s
push edi
call fcn.00487700
add esp, 0x18
mov eax, 0x1b
jmp 0x49c033
lea eax, [esp + 0x28]
push eax
push dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
push dword [esp + 0x48]
push dword [ebx + eax*4 + 0x420]
push ebx
call fcn.00487e00
mov ecx, dword [0x535c28]
add esp, 0x14
mov esi, eax
push dword [esp + 0x40]
mov ecx, dword [ecx + 0x40]
call ecx
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x38]
test esi, esi
jne 0x49c01e
cmp ecx, eax
jne 0x49c01e
mov eax, dword [ebp + 0x470]
mov dword [eax + 0x40], 0
mov eax, dword [ebp + 0x470]
mov byte [eax + 0x44], 0
mov eax, dword [ebp + 0x470]
mov byte [eax + 0x45], 0
mov eax, dword [ebp + 0x470]
mov byte [eax + 0x34], 0
xor eax, eax
mov dword [ebp + 0x46c], 1
jmp 0x49c033
push ecx
push eax
push str.schannel:_failed_to_send_initial_handshake_data:_sent__zd_of__lu_bytes
push edi
call fcn.00487700
add esp, 0x10
mov eax, 0x23
mov ecx, dword [esp + 0x254]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004bd65f
add esp, 0x248
ret