Function at 0x4854d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d09db
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2e8
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0xb4]
call fcn.0046bef0
xor ebx, ebx
lea ecx, [esp + 0x10c]
mov dword [esp + 0x300], ebx
call fcn.0046bef0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x300], 1
call fcn.0046bef0
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x68]
mov byte [esp + 0x304], 2
mov byte [esp + 0x68], al
call fcn.00406ae1
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov ecx, dword [edi + 4]
mov byte [esp + 0x300], 3
mov eax, dword [ecx + 8]
cmp eax, 4
jne 0x485573
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x304], 2
call fcn.00406ae1
jmp 0x4861f8
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xbc]
test eax, eax
jne 0x485608
push 0x4f8774
push 0x501fc0
call fcn.00422030
mov eax, dword [esp + 0x7c]
add esp, 8
cmp eax, ebx
mov byte [esp + 0x300], 2
je 0x4855b4
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x74], ebx
push 1
lea ecx, [esp + 0x68]
call fcn.00406ae1
lea ecx, [esp + 0xe0]
mov byte [esp + 0x300], 1
call fcn.0046bf70
lea ecx, [esp + 0x10c]
mov byte [esp + 0x300], 0
call fcn.0046bf70
lea ecx, [esp + 0xb4]
mov dword [esp + 0x300], 0xffffffff
call fcn.0046bf70
mov eax, 0x80004005
jmp 0x486239
mov ebp, dword [edi + 4]
push 1
mov ecx, ebp
call fcn.00431d80
test eax, eax
ja 0x485b65
lea eax, [esp + 0x4c]
mov ecx, ebp
push eax
call fcn.004481e0
mov eax, dword [eax + 4]
mov byte [esp + 0x300], 4
cmp eax, ebx
jne 0x48563c
mov eax, 0x4d58e0
push eax
lea ecx, [esp + 0x68]
push 0xce4
push ecx
call fcn.004299b0
mov eax, dword [esp + 0x68]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x300], 3
je 0x48566c
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x5c], ebx
push 1
lea ecx, [esp + 0x50]
call fcn.00406ae1
lea edx, [esp + 0x64]
push 1
push edx
push 0x80000002
lea ecx, [esp + 0xc0]
call fcn.0046c0b0
test eax, eax
je 0x485b65
mov eax, dword [ebp]
mov ecx, ebp
mov esi, 1
call dword [eax + 0x14]
test eax, eax
je 0x4856ad
mov esi, 3
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0x1c49
lea ecx, [esp + 0xc0]
call fcn.0046caf0
push esi
push 0x1c49
lea ecx, [esp + 0xbc]
call fcn.0046d680
mov eax, dword [ebp + 0xb8]
lea ecx, [esp + 0xb4]
push eax
push 0x1c4c
call fcn.0046d680
lea edx, [esp + 0xb0]
push ebx
push edx
push 0x14b5
lea ecx, [esp + 0xc0]
call fcn.0046caf0
mov ecx, ebp
call fcn.00434d80
push eax
push 0x14b5
lea ecx, [esp + 0xbc]
call fcn.0046d680
mov ecx, ebp
call fcn.00434d80
cmp dword [esp + 0xb0], eax
je 0x485860
mov al, byte [esp + 0x13]
xor esi, esi
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x38], al
call fcn.00406ae1
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov edx, dword [ebp]
lea eax, [esp + 0x80]
push eax
mov ecx, ebp
mov byte [esp + 0x304], 5
call dword [edx + 0x9c]
mov eax, dword [eax + 4]
mov bl, 6
cmp eax, esi
mov byte [esp + 0x300], bl
mov esi, 0x4d58e0
je 0x485783
mov esi, eax
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebp
call fcn.00427050
mov eax, dword [eax + 4]
mov byte [esp + 0x300], 7
test eax, eax
jne 0x4857a3
mov eax, 0x4d58e0
push esi
push eax
lea edx, [esp + 0x3c]
push 0x4f3d5c
push edx
call fcn.0042fd80
mov eax, dword [esp + 0x6c]
add esp, 0x10
test eax, eax
mov byte [esp + 0x300], bl
je 0x4857d7
push eax
call fcn.004bcb64
add esp, 4
xor esi, esi
mov dword [esp + 0x5c], esi
jmp 0x4857d9
xor esi, esi
push 1
lea ecx, [esp + 0x50]
call fcn.00406ae1
mov eax, dword [esp + 0x90]
mov byte [esp + 0x300], 5
cmp eax, esi
je 0x485807
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x90], esi
push 1
lea ecx, [esp + 0x84]
call fcn.00406ae1
push esi
lea eax, [esp + 0x38]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.0040908e
push 0x1398
lea ecx, [edi + 0x60]
call fcn.0046d840
mov eax, dword [esp + 0x44]
mov byte [esp + 0x300], 3
cmp eax, esi
je 0x485853
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x44], esi
push 1
lea ecx, [esp + 0x38]
call fcn.00406ae1
xor ebx, ebx
lea ecx, [esp + 0x7c]
push ebx
push ecx
push 0x1c55
lea ecx, [esp + 0xc0]
call fcn.0046caf0
mov ecx, dword [ebp + 0x1a0]
cmp ecx, ebx
jne 0x485885
xor eax, eax
jmp 0x485890
mov eax, dword [ebp + 0x1a4]
sub eax, ecx
sar eax, 2
push eax
push 0x1c55
lea ecx, [esp + 0xbc]
call fcn.0046d680
mov eax, dword [ebp + 0x1ac]
lea ecx, [esp + 0xb4]
push eax
push 0x48
call fcn.0046d680
mov eax, dword [ebp + 0x1a0]
cmp eax, ebx
je 0x4858d1
mov edx, dword [ebp + 0x1a4]
sub edx, eax
test edx, 0xfffffffc
jne 0x4858e4
push 0xbeb
lea ecx, [esp + 0xb8]
call fcn.0046e530
jmp 0x485907
push ebx
mov ecx, ebp
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00436670
push 0xbeb
lea ecx, [esp + 0xd4]
call fcn.0046d840
lea ecx, [esp + 0x1c]
call fcn.0044eeb0
push 1
mov byte [esp + 0x304], 8
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push 1
push 0xffffffffffffffff
call fcn.004297d0
lea ecx, [esp + 0x188]
call fcn.0046ec30
lea ecx, [esp + 0x1c]
mov byte [esp + 0x300], 9
push ecx
lea ecx, [esp + 0x170]
call fcn.0046f600
test byte [esp + 0x18], 2
jne 0x485984
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x14]
test eax, eax
je 0x48597d
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ebx
push ecx
mov ecx, edi
call dword [eax + 0x38]
mov eax, dword [esp + 0x24]
cmp eax, ebx
jne 0x4859d0
xor esi, esi
jmp 0x4859d9
test byte [esp + 0x18], 2
je 0x485971
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x14]
test eax, eax
jne 0x485971
xor esi, esi
mov eax, dword [esp + 0x24]
cmp eax, ebx
jne 0x48599e
xor ecx, ecx
jmp 0x4859a7
mov ecx, dword [esp + 0x28]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jge 0x485975
sub esp, 0x18
lea ecx, [esp + 0x34]
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
push esi
call fcn.0049bf70
mov ecx, eax
call fcn.00453dd0
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x2c]
inc esi
jmp 0x485992
mov esi, dword [esp + 0x28]
sub esi, eax
sar esi, 2
dec esi
cmp esi, ebx
jl 0x485a55
test esi, esi
jl 0x485a12
test eax, eax
je 0x485a12
mov ecx, dword [esp + 0x28]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jae 0x485a12
lea ecx, [esp + 0x20]
call fcn.00455260
cmp eax, esi
ja 0x485a09
lea ecx, [esp + 0x20]
call fcn.00436ec0
mov eax, dword [esp + 0x24]
mov edi, dword [eax + esi*4]
jmp 0x485a18
mov edi, dword [pe_dos_header]
test esi, esi
jl 0x485a42
test eax, eax
je 0x485a42
mov edx, dword [esp + 0x28]
sub edx, eax
sar edx, 2
cmp esi, edx
jae 0x485a42
test esi, esi
je 0x485a34
lea eax, [eax + esi*4]
push eax
lea ecx, [esp + 0x24]
call fcn.004699e0
mov eax, dword [esp + 0x24]
test edi, edi
je 0x485a52
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
mov eax, dword [esp + 0x24]
dec esi
jns 0x4859de
mov eax, dword [esp + 0x7c]
test eax, eax
jne 0x485b3e
mov eax, dword [ebp + 0x1a0]
test eax, eax
je 0x485b3e
mov ecx, dword [ebp + 0x1a4]
sub ecx, eax
sar ecx, 2
je 0x485b3e
lea ecx, [esp + 0x138]
call fcn.004b1d00
lea edx, [esp + 0x4c]
mov ecx, ebp
push edx
mov byte [esp + 0x304], 0xa
call fcn.0040910f
mov esi, eax
lea eax, [esp + 0x80]
mov bl, 0xb
push eax
mov ecx, ebp
mov byte [esp + 0x304], bl
call fcn.004481e0
push esi
push eax
lea ecx, [esp + 0x140]
mov byte [esp + 0x308], 0xc
call fcn.004b4d10
mov eax, dword [esp + 0x90]
xor esi, esi
cmp eax, esi
mov byte [esp + 0x300], bl
je 0x485af4
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x90], esi
push 1
lea ecx, [esp + 0x84]
call fcn.00406ae1
mov eax, dword [esp + 0x5c]
mov byte [esp + 0x300], 0xa
cmp eax, esi
je 0x485b1f
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x5c], esi
push 1
lea ecx, [esp + 0x50]
call fcn.00406ae1
lea ecx, [esp + 0x138]
mov byte [esp + 0x300], 9
call fcn.004b1d50
lea ecx, [esp + 0x16c]
mov byte [esp + 0x300], 8
call fcn.0046ed20
lea ecx, [esp + 0x1c]
mov byte [esp + 0x300], 3
call fcn.0044eef0
xor ebx, ebx
lea ecx, [esp + 0x80]
push ecx
mov ecx, ebp
call fcn.00427050
mov eax, dword [eax + 4]
mov byte [esp + 0x300], 0xd
cmp eax, ebx
jne 0x485b88
mov eax, 0x4d58e0
push eax
call fcn.004bfb91
add esp, 4
lea edx, [esp + 0x64]
push eax
push 0x62
push edx
call fcn.004299b0
mov eax, dword [esp + 0x9c]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x300], 3
je 0x485bc4
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x90], ebx
push 1
lea ecx, [esp + 0x84]
call fcn.00406ae1
lea eax, [esp + 0x64]
push 1
push eax
push 0x80000002
lea ecx, [esp + 0xc0]
call fcn.0046c0b0
test eax, eax
je 0x485cb9
mov cl, byte [esp + 0x13]
xor esi, esi
mov byte [esp + 0x34], cl
push esi
lea ecx, [esp + 0x38]
call fcn.00406ae1
mov edi, 0x4f8768
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x304], 0xe
mov ebx, ecx
lea ecx, [esp + 0x38]
push ebx
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
call fcn.00406a5c
test al, al
je 0x485c5c
mov edi, dword [esp + 0x38]
mov ecx, ebx
mov edx, ecx
mov esi, 0x4f8768
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x38]
call fcn.0042aff0
xor esi, esi
push esi
mov ecx, ebp
mov byte [esp + 0x304], 0xf
call fcn.00434d80
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
push ecx
mov ecx, ebp
call fcn.00436870
lea edx, [esp + 0x50]
lea ecx, [esp + 0xd0]
push edx
call fcn.0046d720
mov eax, dword [esp + 0x44]
mov byte [esp + 0x300], 3
cmp eax, esi
je 0x485cac
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x44], esi
push 1
lea ecx, [esp + 0x38]
call fcn.00406ae1
xor ebx, ebx
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x9c]
mov byte [esp + 0x9c], al
call fcn.00406ae1
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
xor esi, esi
mov byte [esp + 0x300], 0x10
mov dword [esp + 0x18], esi
mov eax, dword [ebp + 0x1a0]
cmp eax, ebx
je 0x48615e
mov ecx, dword [ebp + 0x1a4]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jae 0x48615e
cmp esi, ebx
jl 0x485d38
mov eax, dword [ebp + 0x1a0]
lea ecx, [ebp + 0x19c]
cmp eax, ebx
je 0x485d38
mov edx, dword [ecx + 8]
sub edx, eax
sar edx, 2
cmp esi, edx
jae 0x485d38
push esi
call fcn.00410be2
mov edi, dword [eax]
jmp 0x485d3e
mov edi, dword [pe_dos_header]
lea eax, [esp + 0x80]
mov ecx, edi
push eax
call fcn.004481e0
mov eax, dword [eax + 4]
xor ebx, ebx
cmp eax, ebx
mov byte [esp + 0x300], 0x11
jne 0x485d63
mov eax, 0x4d58e0
push eax
lea ecx, [esp + 0x9c]
push 0xce4
push ecx
call fcn.004299b0
mov eax, dword [esp + 0x9c]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x300], 0x10
je 0x485d9c
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x90], ebx
push 1
lea ecx, [esp + 0x84]
call fcn.00406ae1
lea edx, [esp + 0x98]
push 1
push edx
push 0x80000002
lea ecx, [esp + 0x118]
call fcn.0046c0b0
test eax, eax
je 0x486152
mov ecx, ebp
call fcn.00436570
test al, al
je 0x485e19
push edi
mov ecx, ebp
call fcn.00433ec0
test eax, eax
je 0x485df1
push ebx
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x30], esp
push eax
jmp 0x485e24
push 0x4f86d8
push 0x501fc0
call fcn.00422030
add esp, 8
push ebx
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x501a04
call fcn.00405d32
jmp 0x485e2b
push ebx
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push ecx
mov ecx, ebp
call fcn.00436670
push 0xbeb
lea ecx, [esp + 0x12c]
call fcn.0046d840
push ebx
push 1
push 0x6a
lea ecx, [esp + 0x118]
call fcn.004a7bd0
push eax
lea ecx, [esp + 0xf0]
call fcn.0046c850
test eax, eax
je 0x486152
mov ecx, ebp
call fcn.00434d80
push eax
push 0x14b5
lea ecx, [esp + 0xe8]
call fcn.0046d680
mov eax, dword [ebp + 0xb8]
lea ecx, [esp + 0xe0]
push eax
push 0x1c4c
call fcn.0046d680
mov ecx, dword [ebp + 0x1a0]
cmp ecx, ebx
jne 0x485ea1
xor eax, eax
jmp 0x485eac
mov eax, dword [ebp + 0x1a4]
sub eax, ecx
sar eax, 2
push eax
push 0x1c55
lea ecx, [esp + 0xe8]
call fcn.0046d680
push edi
mov ecx, ebp
xor esi, esi
call fcn.00433ec0
test eax, eax
je 0x485ed3
mov esi, 1
jmp 0x485ee4
push edi
mov ecx, ebp
call fcn.00433ee0
test eax, eax
je 0x485ee4
mov esi, 2
push esi
push 0x49
lea ecx, [esp + 0xe8]
call fcn.0046d680
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x10]
push eax
push 0x1c56
lea ecx, [esp + 0xe8]
call fcn.0046d680
mov ecx, dword [esp + 0x18]
push ebx
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x30], esp
push eax
push ecx
mov ecx, ebp
call fcn.00421ba6
mov ecx, eax
call fcn.00409073
push 0x1c86
lea ecx, [esp + 0x100]
call fcn.0046d840
push 1
mov ecx, ebp
call fcn.00431d80
test eax, eax
ja 0x486138
mov dl, byte [esp + 0x13]
mov dword [esp + 0x24], ebx
mov byte [esp + 0x20], dl
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], vtable.a_._ASERTnditISOArrayloa_ilrrce_.0
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0x304], 0x12
mov byte [esp + 0x38], al
call fcn.00406ae1
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x300], 0x13
push ecx
mov ecx, ebp
call fcn.004481e0
mov edx, dword [0x4d58e4]
lea ecx, [esp + 0x34]
push edx
push ebx
push eax
mov byte [esp + 0x30c], 0x14
call fcn.0040b3c3
mov eax, dword [esp + 0x5c]
mov byte [esp + 0x300], 0x13
cmp eax, ebx
je 0x485fd5
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x5c], ebx
mov ecx, dword [esp + 0x50]
cmp ecx, ebx
je 0x485ff8
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x485fef
cmp al, 0xff
je 0x485fef
dec al
mov byte [ecx], al
jmp 0x485ff8
push ecx
call fcn.004bcb64
add esp, 4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x34]
push eax
push 1
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00436fa0
lea edx, [esp + 0x1c]
lea ecx, [esp + 0xe0]
push edx
push 0xcd
call fcn.0046dc60
mov eax, dword [esp + 0x24]
cmp eax, ebx
jne 0x48603b
xor edx, edx
jmp 0x486052
mov ecx, dword [esp + 0x28]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
push 0xce
lea ecx, [esp + 0xe8]
call fcn.0046d680
push 0x1be8
lea ecx, [esp + 0xe4]
call fcn.0046e530
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x48608a
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x44], ebx
mov ecx, dword [esp + 0x38]
cmp ecx, ebx
je 0x4860ad
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x4860a4
cmp al, 0xff
je 0x4860a4
dec al
mov byte [ecx], al
jmp 0x4860ad
push ecx
call fcn.004bcb64
add esp, 4
xor eax, eax
mov dword [esp + 0x1c], vtable.a_._ASERTnditISOArrayloa_ilrrce_.0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
cmp esi, eax
mov byte [esp + 0x300], 0x15
mov ebx, esi
mov edi, eax
je 0x4860eb
push 0
mov ecx, esi
call fcn.00446310
add esi, 0x18
cmp esi, edi
jne 0x4860db
lea esi, [esp + 0x1c]
lea ecx, [esp + 0x20]
neg esi
sbb esi, esi
mov dword [esp + 0x28], ebx
and esi, ecx
mov byte [esp + 0x300], 0x10
mov dword [esp + 0x7c], esi
mov ebx, dword [esi + 8]
mov edi, dword [esi + 4]
cmp edi, ebx
je 0x486121
mov ecx, edi
call fcn.00405d80
add edi, 0x18
cmp edi, ebx
jne 0x486113
mov edx, dword [esi + 4]
push edx
call fcn.004bcb64
add esp, 4
xor eax, eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
push 0xc350
push 0x1ccc
lea ecx, [esp + 0xe8]
call fcn.0046d680
mov esi, dword [esp + 0x18]
inc esi
xor ebx, ebx
mov dword [esp + 0x18], esi
jmp 0x485ced
mov eax, dword [esp + 0xa8]
cmp eax, ebx
je 0x486179
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0xa8], ebx
mov ecx, dword [esp + 0x9c]
cmp ecx, ebx
je 0x48619f
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x486196
cmp al, 0xff
je 0x486196
dec al
mov byte [ecx], al
jmp 0x48619f
push ecx
call fcn.004bcb64
add esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp + 0x9c], ebx
cmp eax, ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
je 0x4861c9
push eax
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x74], ebx
mov ecx, dword [esp + 0x68]
cmp ecx, ebx
je 0x4861ec
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x4861e3
cmp al, 0xff
je 0x4861e3
dec al
mov byte [ecx], al
jmp 0x4861ec
push ecx
call fcn.004bcb64
add esp, 4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
lea ecx, [esp + 0xe0]
mov byte [esp + 0x300], 1
call fcn.0046bf70
lea ecx, [esp + 0x10c]
mov byte [esp + 0x300], 0
call fcn.0046bf70
lea ecx, [esp + 0xb4]
mov dword [esp + 0x300], 0xffffffff
call fcn.0046bf70
xor eax, eax
mov ecx, dword [esp + 0x2f8]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2f4
ret