Function at 0x43ae00
Capabilities:
Generate random numbers using a mersenne twister

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4c
mov eax, dword [0x4a4a7c]
push ebx
xor ebx, ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], eax
mov dword [0x4a4a7c], ebx
mov dword [esp + 0x1c], 1
mov dword [esp + 0x2c], 0xffffffff
mov byte [esp + 0xe], 0xa
mov byte [0x4a4a84], bl
mov byte [0x4a4a7b], bl
mov byte [0x4a4a7a], bl
mov dword [0x4a4a80], ebx
mov byte [esp + 0x13], bl
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], bl
mov byte [esp + 0x14], bl
mov byte [esp + 0xf], bl
mov byte [esp + 0x12], bl
cmp byte [esi], bl
je 0x43aff0
movsx ecx, byte [esi]
push ecx
call fcn.00483633
add eax, 0xffffffbd
add esp, 4
cmp eax, 0x19
ja case.0x43ae8f.69
movzx edx, byte [eax + 0x43b9ac]
jmp dword [edx*4 + 0x43b984]
movzx edi, byte [esi + 1]
test edi, 0xffffff80
jne 0x43aeb4
push 2
push edi
call fcn.0048246e
add esp, 8
cmp eax, ebx
je 0x43aeb4
and edi, 0xffffffdf
mov eax, edi
cmp al, 0x4c
jne 0x43aec7
inc esi
mov byte [0x4a4a84], 2
jmp case.0x43ae8f.69
mov byte [0x4a4a84], 1
jmp case.0x43ae8f.69
cmp byte [esi + 1], 0
je case.0x43ae8f.69
mov al, byte [esi + 1]
inc esi
test al, al
je case.0x43ae8f.69
mov byte [esp + 0xe], al
jmp case.0x43ae8f.69
mov al, byte [esi + 1]
inc esi
cmp al, 0x20
je case.0x43ae8f.70
cmp al, 9
je case.0x43ae8f.70
mov edi, 0x495fdc
mov eax, esi
call fcn.00408f10
mov edi, eax
cmp edi, ebx
jne 0x43af21
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x43af15
sub eax, edx
lea edi, [esi + eax]
push ebx
mov eax, edi
sub eax, esi
push eax
push esi
mov ecx, 0x4a7ce0
call fcn.0041e010
mov ecx, eax
mov dword [0x4a4a7c], ecx
cmp ecx, ebx
je 0x43b8cf
cmp byte [ecx + 0x3d], 0
jne 0x43b8cf
mov eax, dword [ecx + 0x10]
cmp eax, 2
jl 0x43b8cf
cmp eax, 3
jg 0x43b8cf
mov eax, dword [ecx + 0xc]
cmp word [eax + 4], 0
jne 0x43b8cf
cmp word [eax + 0x14], 0
jne 0x43b8cf
lea esi, [edi - 1]
xor ebx, ebx
jmp case.0x43ae8f.69
mov byte [0x4a4a7b], 1
jmp case.0x43ae8f.69
lea ecx, [esi + 1]
push ecx
call fcn.004824b6
add esp, 4
cmp eax, 1
jge 0x43afa0
mov eax, 1
dec eax
mov dword [0x4a4a80], eax
jmp case.0x43ae8f.69
push 6
push 0x49550c
push esi
call fcn.004819bb
add esp, 0xc
test eax, eax
jne 0x43afc6
mov byte [esp + 0xf], 1
add esi, 5
jmp case.0x43ae8f.69
mov byte [0x4a4a7a], 1
jmp case.0x43ae8f.69
mov byte [esp + 0x12], 1
mov dword [esp + 0x2c], ebx
jmp case.0x43ae8f.69
mov byte [esp + 0x13], 1
jmp case.0x43ae8f.69
mov byte [esp + 0x14], 1
inc esi
cmp byte [esi], 0
jne 0x43ae70
mov edx, dword [ebp + 0xc]
mov cl, byte [edx]
test cl, cl
je 0x43b8cf
mov edx, dword [0x4a5c10]
mov al, byte [edx + 0x17]
mov dword [esp + 0x18], edx
test al, al
jne 0x43b014
mov eax, dword [edx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 2
ja 0x43b8cf
mov eax, dword [ebp + 0xc]
mov ebx, 1
cmp cl, byte [esp + 0xe]
jne 0x43b02b
inc ebx
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x43b024
mov esi, dword [ebp + 0xc]
mov edi, eax
sub edi, esi
mov dword [esp + 0x28], edi
cmp byte [esp + 0x13], cl
jne 0x43b054
cmp eax, esi
jbe 0x43b054
mov cl, byte [eax - 1]
cmp cl, byte [esp + 0xe]
jne 0x43b054
dec ebx
jmp 0x43b079
cmp byte [esp + 0xe], 0xa
jne 0x43b07e
push 0xa
push esi
call fcn.00481f21
add esp, 8
test eax, eax
je 0x43b07e
cmp eax, esi
jbe 0x43b07e
cmp byte [eax - 1], 0xd
jne 0x43b07e
mov byte [esp + 0x11], 1
mov byte [esp + 0x10], 1
cmp ebx, 1
jne 0x43b09b
mov edx, dword [esp + 0x18]
push ebx
push 0
push edi
push esi
push edx
call fcn.00471040
mov dword [esp + 0x1c], eax
jmp 0x43b8cf
cmp dword [0x4a4a7c], 0
jne 0x43b0ab
cmp byte [esp + 0x11], 0
je 0x43b113
lea eax, [edi + 3]
push eax
call fcn.00481109
mov esi, eax
add esp, 4
mov dword [esp + 0x38], esi
test esi, esi
jne 0x43b0dd
mov ecx, dword [ebp + 8]
push 0x4947f9
push eax
push 0x495f30
call fcn.0042cb30
mov dword [esp + 0x1c], eax
jmp 0x43b8cf
mov edx, dword [ebp + 0xc]
lea ecx, [edi + 1]
push ecx
push edx
push esi
call fcn.004896c0
add esp, 0xc
cmp byte [esp + 0x11], 0
mov dword [ebp + 0xc], esi
je 0x43b113
mov ax, word [0x499630]
mov word [edi + esi], ax
mov cl, byte [0x499632]
mov byte [edi + esi + 2], cl
add edi, 2
mov dword [esp + 0x28], edi
xor eax, eax
cmp byte [esp + 0xf], al
setne al
inc ebx
inc eax
add eax, eax
add eax, eax
imul ebx, eax
push ebx
mov dword [esp + 0x24], eax
call fcn.00481109
mov ebx, eax
add esp, 4
mov dword [esp + 0x34], ebx
test ebx, ebx
jne 0x43b158
mov ecx, dword [ebp + 8]
push 0x4947f9
push eax
push 0x495f30
call fcn.0042cb30
mov dword [esp + 0x1c], eax
jmp 0x43b8cf
mov esi, dword [ebp + 0xc]
mov dword [ebx], esi
cmp byte [esi], 0
mov edi, ebx
mov dword [esp + 0x1c], 0
mov edx, 1
je 0x43b1e7
mov al, byte [esi]
cmp al, byte [esp + 0xe]
jne 0x43b1e0
add dword [esp + 0x1c], edx
cmp byte [esp + 0xf], 0
mov byte [esi], 0
je 0x43b1d7
sub dword [0x4a2394], edx
jne 0x43b199
call fcn.00411f30
mov edx, 1
mov ecx, dword [0x4a4bbc]
mov eax, dword [ecx]
add ecx, 4
mov dword [0x4a4bbc], ecx
mov ecx, eax
shr ecx, 0xb
xor eax, ecx
mov ecx, eax
and ecx, 0xff3a58ad
shl ecx, 7
xor eax, ecx
mov ecx, eax
and ecx, 0xffffdf8c
shl ecx, 0xf
xor eax, ecx
mov ecx, eax
shr ecx, 0x12
xor ecx, eax
shr ecx, 1
mov dword [edi + 4], ecx
add edi, dword [esp + 0x20]
lea eax, [esi + 1]
mov dword [edi], eax
add esi, edx
cmp byte [esi], 0
jne 0x43b171
cmp byte [esp + 0x10], 0
jne 0x43b244
add dword [esp + 0x1c], edx
cmp byte [esp + 0xf], 0
je 0x43b244
sub dword [0x4a2394], edx
jne 0x43b206
call fcn.00411f30
mov ecx, dword [0x4a4bbc]
mov eax, dword [ecx]
add ecx, 4
mov dword [0x4a4bbc], ecx
mov ecx, eax
shr ecx, 0xb
xor eax, ecx
mov edx, eax
and edx, 0xff3a58ad
shl edx, 7
xor eax, edx
mov ecx, eax
and ecx, 0xffffdf8c
shl ecx, 0xf
xor eax, ecx
mov edx, eax
shr edx, 0x12
xor edx, eax
shr edx, 1
mov dword [edi + 4], edx
cmp dword [0x4a4a7c], 0
je 0x43b25e
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push 0x43ac60
push eax
push ecx
jmp 0x43b292
cmp byte [esp + 0xf], 0
je 0x43b276
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push 0x43ac50
push edx
push eax
jmp 0x43b292
cmp byte [esp + 0x14], 0
mov eax, 0x43abe0
jne 0x43b287
mov eax, 0x43aab0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
push ebx
call fcn.00482120
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x28]
mov al, byte [esi + 0x17]
add esp, 0x10
mov ebx, edi
mov dword [esp + 0x28], ebx
test al, al
jne 0x43b2c2
mov eax, dword [esi + 0xc]
push 1
push 0
push edi
push 0
push eax
call fcn.00471040
jmp 0x43b32c
mov byte [esp + 0xf], 1
mov cl, 1
cmp edi, 0xffffffff
jne 0x43b2d8
xor cl, cl
xor ebx, ebx
mov dword [esp + 0x28], ebx
jmp 0x43b2dd
mov byte [esp + 0xf], 0
lea edi, [ebx + 1]
cmp al, 2
jne 0x43b30b
cmp byte [esp + 0xf], 0
je 0x43b2f9
push 0x4947f9
mov eax, ebx
call fcn.00403e10
jmp 0x43b32c
mov esi, 0x4a7cc4
call fcn.00403e90
neg eax
sbb eax, eax
neg eax
jmp 0x43b32c
cmp edi, dword [0x4a23ac]
jbe 0x43b342
cmp edi, dword [esi + 0x10]
jbe 0x43b342
push 0x4947f9
push 0x49b6f0
mov ecx, 0x4a7ce0
call fcn.0042cde0
cmp eax, 1
je 0x43b550
mov dword [esp + 0x1c], 0
jmp 0x43b8cf
cmp edi, 2
jae 0x43b360
xor edx, edx
test cl, cl
setne dl
xor al, al
mov ecx, esi
add edx, 3
push edx
call fcn.00471560
jmp 0x43b554
mov al, byte [esi + 0x15]
test al, 2
je 0x43b376
and al, 0x3d
mov byte [esi + 0x15], al
mov eax, dword [esi]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov edx, dword [esi + 0x10]
and byte [esi + 0x15], 0x82
cmp edi, edx
jbe 0x43b3ac
mov cl, byte [esi + 0x14]
cmp cl, 1
jbe 0x43b3df
cmp cl, 2
je 0x43b417
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
and byte [ecx + 0x15], 0x7f
mov dword [ecx + 0x10], esi
mov esi, dword [esp + 0x18]
mov dword [ecx + 8], eax
cmp byte [esp + 0xf], 0
mov eax, dword [esi + 8]
je 0x43b548
cmp eax, 0x4947f9
je 0x43b3d0
push ebx
push 0x4947f9
push eax
call fcn.00481b10
add esp, 0xc
mov edx, dword [esi + 8]
mov byte [ebx + edx], 0
mov dword [esi + 0xc], ebx
jmp 0x43b554
cmp edi, 0x40
ja 0x43b417
cmp edi, 4
ja 0x43b3f0
mov esi, 4
jmp 0x43b3fe
mov eax, 8
cmp eax, edi
sbb esi, esi
and esi, 0x38
add esi, eax
mov eax, esi
call fcn.0046b9e0
test eax, eax
je 0x43b335
mov ecx, dword [esp + 0x18]
mov byte [ecx + 0x14], 1
jmp 0x43b39e
cmp edi, 0x10
jae 0x43b426
mov esi, 0x10
jmp 0x43b4d6
cmp edi, 0x104
jae 0x43b438
mov esi, 0x104
jmp 0x43b4d6
cmp edi, 0x28000
jae 0x43b47c
mov dword [esp + 0x30], edi
fild dword [esp + 0x30]
test edi, edi
jns 0x43b452
fadd qword [0x49c5f0]
fmul qword [0x49c600]
fnstcw word [esp + 0x14]
movzx eax, word [esp + 0x14]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [esp + 0x50]
mov esi, dword [esp + 0x50]
fldcw word [esp + 0x14]
jmp 0x43b4d6
cmp edi, 0x190000
jae 0x43b48c
lea esi, [edi + 0x4000]
jmp 0x43b4d6
cmp edi, 0x640000
jae 0x43b4d0
mov dword [esp + 0x30], edi
fild dword [esp + 0x30]
test edi, edi
jns 0x43b4a6
fadd qword [0x49c5f0]
fmul qword [0x49c5f8]
fnstcw word [esp + 0x14]
movzx eax, word [esp + 0x14]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [esp + 0x50]
mov esi, dword [esp + 0x50]
fldcw word [esp + 0x14]
jmp 0x43b4d6
lea esi, [edi + 0x10000]
mov eax, dword [0x4a23ac]
cmp esi, eax
jbe 0x43b4e1
mov esi, eax
cmp cl, 2
jne 0x43b520
test edx, edx
je 0x43b520
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 8]
push edx
mov bl, 1
call fcn.00480f68
add esp, 4
xor edi, edi
cmp esi, edi
jl 0x43b524
push esi
call fcn.00481109
add esp, 4
cmp eax, edi
je 0x43b524
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x28]
mov byte [ecx + 0x14], 2
jmp 0x43b39e
xor bl, bl
jmp 0x43b4fc
test bl, bl
je 0x43b539
mov eax, dword [esp + 0x18]
mov dword [eax + 0x10], edi
mov dword [eax + 8], 0x4a757d
mov dword [eax + 0xc], edi
push 0x4947f9
push 0x495f30
jmp 0x43b322
mov byte [eax], 0
mov dword [esi + 0xc], ebx
jmp 0x43b554
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
xor ebx, ebx
dec ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x24], edi
cmp byte [esi + 0x17], bl
jne 0x43b579
mov edx, dword [esp + 0x18]
mov esi, dword [edx + 0xc]
jmp 0x43b57d
mov esi, dword [esp + 0x18]
test byte [esi + 0x15], 8
je 0x43b58a
mov eax, esi
call fcn.00401150
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x43b5a3
test byte [esi + 0x15], 4
je 0x43b59e
mov eax, esi
call fcn.0042d350
mov esi, dword [esi + 8]
jmp 0x43b5fc
cmp al, 2
jne 0x43b5f7
mov eax, dword [0x4a7cd0]
test eax, eax
jne 0x43b5f3
mov esi, dword [0x492638]
push 1
call esi
test eax, eax
jne 0x43b5d8
push 0xf
call esi
test eax, eax
je 0x43b5cf
mov eax, 0x4947f4
mov esi, eax
jmp 0x43b5fc
mov eax, 0x4947f9
mov esi, eax
jmp 0x43b5fc
push 0x4a7cc4
xor ecx, ecx
call fcn.00403c70
cmp eax, 0xffffffff
mov eax, 0x4947f9
je 0x43b5f3
mov eax, dword [0x4a7ccc]
mov esi, eax
jmp 0x43b5fc
mov esi, 0x4a757d
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x1c], ebx
jbe 0x43b6eb
lea ebx, [ebx]
cmp byte [esp + 0x12], 0
je 0x43b751
test ebx, ebx
je 0x43b751
cmp byte [0x4a4a7b], 0
je 0x43b716
cmp dword [0x4a4a80], 0
jne 0x43b716
mov eax, dword [esp + 0x24]
mov edi, dword [eax]
mov eax, edi
call fcn.0040c820
test al, al
je 0x43b669
push 0x10
push 0
push edi
call fcn.00482c7f
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
fild qword [esp + 0x4c]
add esp, 0xc
jmp 0x43b672
push edi
call fcn.00482d81
add esp, 4
mov eax, ebx
fstp qword [esp + 0x50]
call fcn.0040c820
test al, al
je 0x43b69c
push 0x10
push 0
push ebx
call fcn.00482c7f
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], edx
fild qword [esp + 0x54]
add esp, 0xc
jmp 0x43b6a5
push ebx
call fcn.00482d81
add esp, 4
fld qword [esp + 0x50]
fucompp
fnstsw ax
test ah, 0x44
jp 0x43b751
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
inc dword [esp + 0x28]
cmp ecx, dword [esp + 0x30]
jne 0x43b6d0
cmp byte [esp + 0x10], 0
jne 0x43b6d0
dec esi
mov eax, dword [esp + 0x14]
add edi, dword [esp + 0x20]
inc eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], edi
cmp eax, dword [esp + 0x1c]
jb 0x43b610
mov edx, dword [esp + 0x34]
push edx
call fcn.00480f68
mov edi, dword [esp + 0x1c]
add esp, 4
cmp byte [esp + 0x11], 0
je 0x43b7b1
mov byte [esi - 2], 0
cmp byte [edi + 0x17], 0
jne 0x43b789
mov esi, dword [edi + 0xc]
jmp 0x43b78b
mov al, byte [0x4a4a84]
push ebx
test al, al
jne 0x43b72a
mov eax, dword [edi]
push eax
call fcn.00480f51
jmp 0x43b741
cmp al, 2
jne 0x43b739
mov ecx, dword [edi]
push ecx
call dword [0x4922bc]
jmp 0x43b744
mov eax, dword [edi]
push eax
call fcn.004810a1
add esp, 8
test eax, eax
setne al
test al, al
je 0x43b6ba
mov edi, dword [esp + 0x24]
mov ecx, dword [edi]
mov al, byte [ecx]
test al, al
je 0x43b76a
lea ecx, [ecx]
inc ecx
mov byte [esi], al
mov al, byte [ecx]
inc esi
test al, al
jne 0x43b760
mov edx, dword [esp + 0x14]
cmp edx, dword [esp + 0x30]
jb 0x43b77b
cmp byte [esp + 0x10], 0
je 0x43b782
mov al, byte [esp + 0xe]
mov byte [esi], al
inc esi
mov ebx, dword [edi]
jmp 0x43b6d0
mov esi, edi
cmp byte [esi + 0x17], 1
jne 0x43b7a7
test byte [esi + 0x15], 8
je 0x43b79e
mov eax, esi
call fcn.00401150
add dword [esi + 0xc], 0xfffffffe
lea eax, [esi + 0xc]
jmp 0x43b7b4
mov eax, 0x4a8514
add dword [eax], 0xfffffffe
jmp 0x43b7b4
mov byte [esi], 0
cmp byte [esp + 0x12], 0
je 0x43b895
cmp dword [esp + 0x28], 0
je 0x43b895
cmp byte [edi + 0x17], 0
jne 0x43b7d5
mov esi, dword [edi + 0xc]
jmp 0x43b7d7
mov esi, edi
test byte [esi + 0x15], 8
je 0x43b7e4
mov eax, esi
call fcn.00401150
mov al, byte [esi + 0x17]
cmp al, 1
jne 0x43b7fd
test byte [esi + 0x15], 4
je 0x43b7f8
mov eax, esi
call fcn.0042d350
mov eax, dword [esi + 8]
jmp 0x43b850
cmp al, 2
jne 0x43b84b
mov eax, dword [0x4a7cd0]
test eax, eax
jne 0x43b850
mov esi, dword [0x492638]
push 1
call esi
test eax, eax
jne 0x43b82e
push 0xf
call esi
test eax, eax
je 0x43b827
mov eax, 0x4947f4
jmp 0x43b850
mov eax, 0x4947f9
jmp 0x43b850
push 0x4a7cc4
xor ecx, ecx
call fcn.00403c70
cmp eax, 0xffffffff
mov eax, 0x4947f9
je 0x43b850
mov eax, dword [0x4a7ccc]
jmp 0x43b850
mov eax, 0x4a757d
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x43b853
mov esi, dword [esp + 0x18]
sub eax, edx
mov edi, eax
cmp byte [esi + 0x17], cl
jne 0x43b86a
mov esi, dword [esi + 0xc]
cmp byte [esi + 0x17], 1
jne 0x43b882
test byte [esi + 0x15], 8
je 0x43b87d
mov eax, esi
call fcn.00401150
lea eax, [esi + 0xc]
jmp 0x43b887
mov eax, 0x4a8514
mov dword [eax], edi
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x2c], eax
cmp byte [edi + 0x17], 0
jne 0x43b8a0
mov eax, dword [edi + 0xc]
jmp 0x43b8a2
mov eax, edi
cmp byte [eax + 0x17], 2
jne 0x43b8c3
cmp dword [0x4a7cd0], 0
je 0x43b8c3
push 1
mov ecx, 0x4a7cc4
call fcn.00403f00
mov dword [esp + 0x1c], eax
jmp 0x43b8cf
and byte [eax + 0x15], 0x86
mov dword [esp + 0x1c], 1
mov edi, dword [esp + 0x2c]
cmp edi, 0xffffffff
je 0x43b944
mov esi, dword [0x4a6474]
cmp byte [esi + 0x17], 0
jne 0x43b8e7
mov esi, dword [esi + 0xc]
mov al, byte [esi + 0x15]
test al, 2
je 0x43b8fd
and al, 0x3d
mov byte [esi + 0x15], al
mov eax, dword [esi]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov al, byte [esi + 0x15]
and al, 0x9b
or al, 0x18
mov dword [esi], edi
mov dword [esi + 4], 0
mov byte [esi + 0x15], al
jns 0x43b91f
mov eax, esi
call fcn.00401150
and byte [esi + 0x15], 0x8f
jmp 0x43b944
cmp dword [0x4a5dcc], 0
je 0x43b92c
test al, 0x10
jne 0x43b939
cmp dword [0x4a5dd0], 0
je 0x43b944
test al, 0x20
je 0x43b944
test al, 8
je 0x43b944
mov eax, esi
call fcn.00401150
mov eax, dword [esp + 0x38]
test eax, eax
je 0x43b96b
push eax
call fcn.00480f68
mov eax, dword [esp + 0x40]
mov dword [0x4a4a7c], eax
mov eax, dword [esp + 0x20]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
mov dword [0x4a4a7c], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8