Function at 0x5ac100
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xc0]
cmp eax, dword [ecx + 8]
jbe 0x5acdc7
sub esp, 0x140
mov ecx, dword [esp + 0x15c]
test ecx, ecx
je 0x5acb7f
lea edi, [esp + 0xec]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x158]
mov dword [esp], ecx
mov edx, dword [esp + 0x15c]
mov dword [esp + 4], edx
call fcn.0058f800
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x48], ecx
lea edi, [esp + 0xec]
lea esi, [esp + 8]
call fcn.0046d00e
lea edi, [esp + 0x84]
lea esi, [esp + 0xec]
call fcn.0046d00e
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x5aca29
mov eax, dword [esp + 0x148]
mov ecx, dword [eax + 0x1c]
mov edx, dword [esp + 0x14c]
mov dword [esp], edx
lea ebx, [0x697a60]
mov dword [esp + 4], ebx
lea ebx, [0x9aece0]
mov dword [esp + 8], ebx
call ecx
lea eax, [0x688140]
cmp dword [esp + 0xc], eax
jne 0x5ac1cb
mov eax, dword [esp + 0x10]
jmp 0x5ac1cd
xor eax, eax
mov dword [esp + 0xb0], eax
test eax, eax
je 0x5ac1f7
mov edx, dword [eax]
test edx, edx
je 0x5ac1f7
mov eax, dword [edx]
mov ecx, dword [esp + 0x158]
mov dword [esp], ecx
mov ebx, dword [esp + 0x15c]
mov dword [esp + 4], ebx
call eax
lea eax, [0x69d4e0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
lea ecx, [0x5b9020]
mov dword [eax], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5ac224
mov ecx, dword [esp + 0x144]
jmp 0x5ac232
call fcn.0046c890
mov ecx, dword [esp + 0x144]
mov dword [edi], ecx
mov dword [esp + 0x118], eax
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x148]
mov ebx, dword [edx + 0x1c]
mov ebp, dword [esp + 0x14c]
mov dword [esp], ebp
lea esi, [0x697aa0]
mov dword [esp + 4], esi
lea esi, [0x9aece0]
mov dword [esp + 8], esi
call ebx
lea eax, [0x695980]
cmp dword [esp + 0xc], eax
jne 0x5ac278
mov eax, dword [esp + 0x10]
jmp 0x5ac27a
xor eax, eax
test eax, eax
jne 0x5ac285
mov eax, dword [esp + 0x118]
mov dword [esp + 0x78], eax
nop
lea ecx, [0x6b77e0]
mov dword [esp], ecx
call fcn.0040d2a0
mov eax, dword [esp + 4]
lea ecx, [0x74a5bc]
mov dword [eax], ecx
lea ecx, [0x9aece0]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x148]
mov dword [eax + 8], ecx
mov edx, dword [0x9aef70]
test edx, edx
jne 0x5ac2ca
mov edx, dword [esp + 0x14c]
jmp 0x5ac2d8
call fcn.0046c890
mov edx, dword [esp + 0x14c]
mov dword [edi], edx
mov dword [eax + 0xc], edx
lea ecx, [0x74a71c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004d59a0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x74], edx
mov dword [esp], 0
mov ebx, dword [esp + 0x150]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x154]
mov dword [esp + 8], ebp
lea esi, [0x7485d8]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 1
mov esi, dword [esp + 0x158]
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x15c]
mov dword [esp + 0x18], edi
call fcn.00454410
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x54], ecx
lea edx, [0x9af130]
mov dword [esp], edx
mov dword [esp + 4], 1
call fcn.0048aab0
mov eax, dword [esp + 0x144]
test eax, eax
je 0x5ac38b
lea ecx, [eax + 8]
jmp 0x5ac396
mov edx, dword [0x96460c]
test byte [edx], al
lea ecx, [edx + 8]
mov dword [esp + 0x70], ecx
lea eax, [0x6aea40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
lea ecx, [0x5ace80]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5ac3dd
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x150]
mov ebp, dword [esp + 0x158]
jmp 0x5ac403
call fcn.0046c8c0
mov ecx, dword [esp + 0x74]
mov dword [edi], ecx
mov edx, dword [esp + 0x78]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x150]
mov dword [edi + 8], ebx
mov ebp, dword [esp + 0x158]
mov dword [edi + 0xc], ebp
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov ecx, dword [esp + 0x154]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
mov ecx, dword [esp + 0x15c]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x18], ebp
mov edx, dword [esp + 0x70]
mov dword [esp], edx
mov edx, dword [esp + 0xd0]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x54]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.00597190
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0x148]
mov edx, dword [ecx + 0x14]
mov ebx, dword [esp + 0x14c]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
mov dword [esp + 0x114], eax
lea edi, [esp + 0x12c]
xor eax, eax
call fcn.0046cb2b
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov eax, dword [esp + 0x114]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x11c], eax
lea ecx, [esp + 0x12c]
mov dword [esp + 0x120], ecx
lea ecx, [esp + 0x11c]
mov dword [esp], ecx
lea ecx, [esp + 0x28]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov byte [esp + 0x14], 1
call fcn.0044d240
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x5ac730
lea edi, [esp + 0x9c]
lea esi, [esp + 0x12c]
call fcn.0046d00e
nop
lea eax, [0x9af130]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.0048aab0
mov edx, dword [esp + 0x98]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
test eax, eax
je 0x5ac6af
lea edx, [0x749964]
cmp eax, edx
jne 0x5ac579
mov edx, dword [esp + 0xb0]
test edx, edx
jmp 0x5ac6b8
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x44], eax
cmp dword [0x964b20], eax
je 0x5ac58d
test eax, eax
jmp 0x5ac5c5
mov edx, dword [0x964b24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ac5bb
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x44]
mov eax, 1
jmp 0x5ac609
mov eax, dword [esp + 0x44]
test eax, eax
mov ecx, dword [esp + 0x7c]
je 0x5ac5ea
mov ecx, dword [eax + 4]
lea edx, [0x965cd0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x44]
jmp 0x5ac5ec
mov edx, eax
test eax, eax
jne 0x5ac5f4
xor eax, eax
jmp 0x5ac609
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x44]
mov byte [esp + 0x27], al
mov edx, dword [edx + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 8]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x110], ecx
lea edx, [0x6b7740]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5ac66b
mov ecx, dword [esp + 0xb0]
test ecx, ecx
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0xb0]
jmp 0x5ac68c
call fcn.0046c8a0
mov ecx, dword [esp + 0x110]
mov dword [edi], ecx
mov edx, dword [esp + 0x158]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0xb0]
test ebx, ebx
mov dword [eax], ecx
mov ebp, dword [esp + 0x15c]
mov dword [eax + 0xc], ebp
mov dword [eax + 8], edx
movzx edx, byte [esp + 0x27]
mov byte [eax + 0x18], dl
mov edx, ebx
mov ecx, eax
lea eax, [0x749964]
jmp 0x5ac6b8
mov edx, dword [esp + 0xb0]
test edx, edx
je 0x5acc3d
mov ebx, dword [edx + 4]
test ebx, ebx
je 0x5acc3d
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x60], eax
lea ebx, [0x68a1c0]
cmp dword [esp + 0x9c], ebx
jne 0x5ac6f2
mov ebp, dword [esp + 0xa0]
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
jmp 0x5ac6f6
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x50], ebp
mov dword [esp + 0xb4], esi
lea eax, [0x693d60]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
call fcn.004507f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x108], eax
mov ecx, dword [esp + 0xb4]
xor edx, edx
jmp 0x5accf6
mov eax, dword [esp + 0x144]
test eax, eax
je 0x5ac740
add eax, 8
jmp 0x5ac74b
mov ecx, dword [0x96460c]
test byte [ecx], al
lea eax, [ecx + 8]
mov dword [esp], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.00597630
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ac7d4
mov edx, dword [esp + 0x98]
mov eax, dword [edx]
call eax
lea eax, [0x6a8ca0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
lea ecx, [0x5ace30]
mov dword [eax], ecx
lea ecx, [0x6fa00c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5ac7b0
mov ecx, dword [esp + 0xcc]
jmp 0x5ac7be
call fcn.0046c890
mov ecx, dword [esp + 0xcc]
mov dword [edi], ecx
mov dword [eax + 8], ecx
lea ecx, [0x6fa010]
mov dword [eax + 0xc], ecx
mov dword [esp], eax
call fcn.004462e0
jmp 0x5ac837
lea eax, [0x6a8ca0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
lea ecx, [0x5acde0]
mov dword [eax], ecx
lea ecx, [0x6fa00c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5ac811
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x98]
jmp 0x5ac829
call fcn.0046c8a0
mov ecx, dword [esp + 0xcc]
mov dword [edi], ecx
mov edx, dword [esp + 0x98]
mov dword [edi + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [esp], eax
call fcn.004462e0
mov eax, dword [esp + 0x148]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x14c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xd4], ecx
cmp dword [0x964b18], eax
jne 0x5ac8a0
mov edx, dword [0x964b1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ac895
lea eax, [0x74993c]
lea ecx, [0x9aece0]
jmp 0x5ac8e0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xd4]
cmp dword [0x964b20], eax
jne 0x5ac8e0
mov edx, dword [0x964b24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
je 0x5ac8d5
mov eax, dword [0x964b98]
mov ecx, dword [0x964b9c]
jmp 0x5ac8e0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xd4]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x110], ecx
lea edx, [0x6b7740]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5ac92e
mov ecx, dword [esp + 0x110]
mov ebx, dword [esp + 0x158]
jmp 0x5ac946
call fcn.0046c8a0
mov ecx, dword [esp + 0x110]
mov dword [edi], ecx
mov ebx, dword [esp + 0x158]
mov dword [edi + 4], ebx
mov dword [esp + 0x80], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x15c]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], ebx
mov ecx, dword [esp + 0x58]
cmp dword [0x964b20], ecx
je 0x5ac978
mov ecx, dword [esp + 0xb0]
test ecx, ecx
mov edx, 0
jmp 0x5ac9ac
mov eax, dword [0x964b24]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0xb0]
test ecx, ecx
mov edx, eax
mov eax, dword [esp + 0x80]
mov byte [eax + 0x18], dl
je 0x5ac9ed
mov edx, dword [ecx + 4]
test edx, edx
je 0x5ac9ed
mov ecx, dword [edx]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov byte [esp + 0xc], 0
lea ebx, [0x749964]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
call ecx
mov eax, dword [esp + 0x80]
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
lea ecx, [0x749964]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], eax
add esp, 0x140
ret
lea edi, [esp]
lea esi, [esp + 0xec]
call fcn.0046d00e
call fcn.005912a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, 4
je 0x5aca5d
cmp eax, 0x10
jne 0x5aca55
mov edx, dword [esp + 0x1c]
jmp 0x5acaa2
xor ecx, ecx
xor edx, edx
xor eax, eax
jmp 0x5acaa2
mov eax, dword [ecx]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x965c40]
mov edx, dword [0x965c44]
lea ebx, [0x692a40]
mov dword [esp], ebx
mov dword [esp + 4], 0x10
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004506a0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov dword [ecx + 0xc], eax
mov edx, 0x10
mov eax, 0x10
mov dword [esp + 0x38], edx
mov dword [esp + 0x34], eax
mov dword [esp + 0x6c], ecx
lea edi, [esp + 0xd8]
lea esi, [esp + 0x84]
call fcn.0046d00e
mov ecx, dword [esp + 0xe8]
test ecx, ecx
je 0x5acae7
nop
lea ebx, [0x6929c0]
cmp dword [ecx], ebx
jne 0x5acae1
mov ecx, dword [ecx + 4]
mov ebx, dword [ecx]
mov ecx, dword [ecx + 4]
jmp 0x5acaeb
xor ecx, ecx
xor ebx, ebx
jmp 0x5acaeb
xor ebx, ebx
xor ecx, ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x68], ebx
lea eax, [0x6908c0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5acb27
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x68]
jmp 0x5acb39
call fcn.0046c8a0
mov ecx, dword [esp + 0x6c]
mov dword [edi], ecx
mov edx, dword [esp + 0x68]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x10], ecx
mov dword [eax + 0xc], edx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 1
mov dword [esp + 0x168], 1
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0
add esp, 0x140
ret
mov eax, dword [0x964ba0]
mov ecx, dword [0x964ba4]
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x110], ecx
lea edx, [0x6b7740]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x5acbd9
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x158]
jmp 0x5acbf1
call fcn.0046c8a0
mov ecx, dword [esp + 0x110]
mov dword [edi], ecx
mov edx, dword [esp + 0x158]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 8], edx
mov byte [eax + 0x1a], 1
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
lea ecx, [0x749964]
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], eax
add esp, 0x140
ret
test eax, eax
je 0x5acc4d
xor edx, edx
mov ebp, ecx
xor ebx, ebx
mov ecx, eax
xor eax, eax
jmp 0x5acca5
mov eax, dword [esp + 0x9c]
lea ecx, [0x68a1c0]
cmp eax, ecx
jne 0x5acccf
mov eax, dword [esp + 0xa0]
movzx ecx, byte [esp + 0xac]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov eax, dword [eax + 8]
test cl, cl
je 0x5acca1
mov dword [esp + 0x4c], edx
lea eax, [0x6a5820]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.004506a0
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x4c]
mov eax, edx
xor ecx, ecx
xor ebp, ebp
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], edx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x170], ebp
add esp, 0x140
ret
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x693d60]
mov dword [esp + 8], eax
call fcn.0040a760
mov dword [edx], ebx
mov ebx, dword [esp + 0x104]
lea ecx, [ebx + 0x14]
lea edx, [eax + 1]
mov eax, esi
mov ebx, dword [esp + 0x50]
cmp edx, ebx
jge 0x5acd7d
mov dword [esp + 0x40], edx
mov dword [esp + 0x104], ecx
lea edi, [esp + 0xb8]
mov esi, ecx
call fcn.0046d00e
lea ecx, [eax + edx*8]
mov dword [esp + 0x100], ecx
lea ebx, [0x6a5820]
mov dword [esp], ebx
lea ebp, [esp + 0xb8]
mov dword [esp + 4], ebp
call fcn.0040a900
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x108]
lea edx, [ecx + eax*8 + 4]
mov ebx, dword [esp + 8]
lea ebp, [0x6a5820]
mov esi, ecx
mov ecx, dword [esp + 0x100]
mov dword [ecx], ebp
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x5acce5
call fcn.0046c8a0
mov dword [edi], ebx
mov ecx, dword [edx]
mov dword [edi + 4], ecx
jmp 0x5acce5
mov ecx, dword [esp + 0xb0]
mov edx, dword [ecx + 4]
mov ecx, dword [edx]
movzx ebp, byte [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
xchg ebp, eax
mov byte [esp + 0xc], al
xchg ebp, eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10c]
mov dword [esp + 0x14], ebx
call ecx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x10c]
jmp 0x5acc3d
call fcn.0046b490
jmp fcn.005ac100