Function at 0x4be9d0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x40
mov eax, dword [0x4eb984]
xor eax, esp
mov dword [esp + 0x3c], eax
mov eax, dword [0x520cd4]
push ebp
xor ebp, ebp
push esi
push edi
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], ebp
mov dword [0x520ce4], 0xf4240
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x4bea00
sub eax, edx
sar eax, 1
mov esi, eax
mov eax, dword [0x51f844]
lea edi, [eax + esi*2 - 8]
cmp esi, 4
jb 0x4bea83
cmp word [edi], 0x2e
jne 0x4bea83
movzx ecx, word [edi + 2]
push ecx
call fcn.004c3934
add esp, 4
cmp eax, 0x5a
jne 0x4bea83
movzx eax, word [edi + 4]
cmp ax, 0x30
jb 0x4bea83
cmp ax, 0x39
ja 0x4bea83
movzx eax, word [edi + 6]
cmp ax, 0x30
jb 0x4bea83
cmp ax, 0x39
ja 0x4bea83
cmp esi, 4
je 0x4bea6c
movzx eax, word [edi + 8]
cmp ax, 0x30
jb 0x4bea83
cmp ax, 0x39
ja 0x4bea83
pop edi
pop esi
mov eax, 3
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
mov edx, dword [0x520cd4]
push ebx
push 0x4d94b8
push edx
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
cmp eax, ebp
jne 0x4beabc
mov eax, dword [0x520cd4]
push eax
push ebp
mov ecx, 0x51f7e8
call fcn.00433b00
mov eax, dword [0x520ce4]
jmp 0x4bedfc
push 2
push 0xffffffffffffffff
push 0xfffc0000
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4beb2f
mov ecx, dword [0x520cd0]
push ebp
push ebp
push ebp
push ecx
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4beb2f
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
mov eax, dword [0x520cd4]
add esp, 4
push eax
push 0x205
mov dword [0x520cd0], ebp
call fcn.004750b0
push eax
push ebp
call fcn.004ace90
add esp, 0xc
pop ebx
pop edi
pop esi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
mov eax, dword [0x520cd0]
mov edi, 0x4dfaec
call fcn.004bb350
test eax, eax
je 0x4bec98
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c44ea
mov esi, eax
mov eax, dword [0x520cd0]
add esp, 4
mov ebx, edx
call fcn.004bb350
test eax, eax
je 0x4beb96
jmp 0x4beb70
mov edx, dword [0x520cd0]
push edx
call fcn.004c44ea
mov esi, eax
mov eax, dword [0x520cd0]
add esp, 4
mov edi, 0x4dfaec
mov ebx, edx
call fcn.004bb350
test eax, eax
jne 0x4beb70
mov eax, dword [0x520cd0]
push ebp
push ebx
push esi
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4becba
mov eax, dword [0x520cd0]
push eax
push 0x12
lea ecx, [esp + 0x28]
push 1
push ecx
call fcn.004c4096
add esp, 0x10
cmp eax, 0x12
jb 0x4bec98
movzx dx, byte [esp + 0x21]
movzx ecx, byte [esp + 0x20]
shl dx, 8
movzx eax, dx
or eax, ecx
inc eax
lea edx, [eax - 1]
mov dword [0x520ce4], eax
mov dword [0x520ce8], edx
cmp eax, 0x10000
jae 0x4bec1c
movzx cx, byte [esp + 0x23]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x22]
or edx, ecx
cmp edx, eax
jbe 0x4bec1c
mov dword [0x520ce4], ebp
jmp 0x4beca5
movzx cx, byte [esp + 0x31]
movzx dx, byte [esp + 0x30]
shl cx, 8
or cx, dx
mov word [0x51f83c], cx
je 0x4bec9d
movzx eax, cx
inc eax
push eax
call fcn.004c1d07
add esp, 4
mov dword [0x520d70], eax
cmp eax, ebp
je 0x4bf686
mov ecx, dword [0x520cd0]
movzx edx, word [0x51f83c]
push ecx
push 1
push edx
push eax
call fcn.004c4096
add esp, 0x10
cmp eax, 1
je 0x4bec87
mov eax, dword [0x520d70]
push eax
call fcn.004c1404
add esp, 4
mov dword [0x520d70], ebp
jmp 0x4bec98
movzx ecx, word [0x51f83c]
mov edx, dword [0x520d70]
mov byte [ecx + edx], 0
mov eax, dword [0x520ce4]
cmp eax, ebp
jne 0x4bedd7
mov eax, dword [0x520cd0]
push ebp
push ebp
push ebp
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4bed02
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c34b2
mov edx, dword [0x520cd4]
add esp, 4
push edx
push 0x205
mov dword [0x520cd0], ebp
call fcn.004750b0
push eax
push ebp
call fcn.004ace90
add esp, 0xc
pop ebx
pop edi
pop esi
mov eax, 0xb
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
mov esi, dword [0x520cd0]
call fcn.004bb290
mov esi, eax
cmp esi, ebp
je 0x4bedd2
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
add esp, 4
mov dword [0x520cf0], eax
mov dword [0x520cf4], edx
cmp eax, 4
jne 0x4beda8
cmp edx, ebp
jne 0x4bedaa
mov ecx, 0x4dfb04
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
je 0x4bedb3
mov esi, dword [0x520cd0]
call fcn.004bb290
mov esi, eax
mov eax, dword [0x520ce4]
cmp esi, ebp
je 0x4bedd7
cmp eax, ebp
jne 0x4bedd7
mov ecx, dword [0x520cd0]
push ecx
call fcn.004c44ea
add esp, 4
mov dword [0x520cf0], eax
mov dword [0x520cf4], edx
cmp eax, 8
jne 0x4bedd2
cmp edx, ebp
jne 0x4bedd2
mov ecx, 0x4dfaf4
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
je 0x4bedd2
mov eax, 1
mov dword [0x520ce4], eax
jmp 0x4bedd7
cmp edx, ebp
ja 0x4bed59
jb 0x4bedb3
cmp eax, 4
ja 0x4bed59
mov ecx, 0x4dfb04
mov edx, 0x5890bc
call fcn.004bb3c0
test eax, eax
je 0x4bed59
mov eax, 0x1869f
mov dword [0x520ce4], eax
jmp 0x4bed5e
mov eax, dword [0x520ce4]
cmp dword [0x4e9f50], ebp
jne 0x4bedeb
mov eax, 1
mov dword [0x520ce4], eax
jmp 0x4bee22
cmp eax, 0xf4240
jne 0x4bedfc
mov eax, 1
mov dword [0x520ce4], eax
cmp dword [0x4e9f50], ebp
je 0x4bee22
mov ecx, dword [0x520cd0]
cmp ecx, ebp
je 0x4bee22
push ecx
call fcn.004c34b2
mov eax, dword [0x520ce4]
add esp, 4
mov dword [0x520cd0], ebp
xor ecx, ecx
mov dword [0x520ce8], ecx
cmp eax, ebp
jbe 0x4bf61e
mov edx, dword [0x520cd4]
push ecx
push edx
call fcn.0043eb50
mov ebx, eax
mov eax, dword [0x520cd0]
mov dword [esp + 0x18], ebx
cmp eax, ebp
jne 0x4beebb
push 0x4d94b8
push ebx
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
cmp eax, ebp
jne 0x4beebb
mov eax, dword [0x520ce8]
push eax
call fcn.0043f4a0
cmp eax, 9
je 0x4bf633
cmp eax, 2
je 0x4bf657
cmp eax, 3
je 0x4bf605
mov ecx, dword [0x520ce8]
mov edx, dword [0x520cd4]
push ecx
push edx
call fcn.0043eb50
mov ebx, eax
push 0x4d94b8
push ebx
mov dword [esp + 0x20], ebx
call fcn.004c3cf8
add esp, 8
mov dword [0x520cd0], eax
cmp eax, ebp
je 0x4bee65
mov esi, eax
call fcn.004bb290
test eax, eax
je 0x4bf5dd
lea ebx, [ebx]
mov eax, dword [0x520cd0]
push eax
call fcn.004c44ea
add esp, 4
mov dword [0x520cf0], eax
mov dword [0x520cf4], edx
xor eax, eax
jmp 0x4beef0
mov cl, byte [eax + 0x5890bc]
cmp cl, byte [eax + 0x4dfaec]
jne 0x4bef04
inc eax
cmp eax, 4
jl 0x4beef0
cmp eax, 4
je 0x4bf5c4
xor eax, eax
nop
mov dl, byte [eax + 0x5890bc]
cmp dl, byte [eax + 0x4dfad4]
jne 0x4bef24
inc eax
cmp eax, 4
jl 0x4bef10
cmp eax, 4
je 0x4bf5c4
xor eax, eax
nop
mov cl, byte [eax + 0x5890bc]
cmp cl, byte [eax + 0x4dfadc]
jne 0x4bef44
inc eax
cmp eax, 4
jl 0x4bef30
cmp eax, 4
je 0x4bf5c4
xor eax, eax
nop
mov dl, byte [eax + 0x5890bc]
cmp dl, byte [eax + 0x4dfaf4]
jne 0x4bef64
inc eax
cmp eax, 4
jl 0x4bef50
cmp eax, 4
jne 0x4bf061
push 0x80
call fcn.004c1d07
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x4bf686
xor eax, eax
xor ecx, ecx
xor edx, edx
push esi
mov word [esi], ax
mov word [esi + 2], cx
mov word [esi + 4], dx
mov word [esi + 6], ax
mov dword [esi + 8], ebp
mov dword [esi + 0xc], ebp
mov dword [esi + 0x10], ebp
mov dword [esi + 0x14], ebp
mov dword [esi + 0x18], ebp
mov dword [esi + 0x1c], ebp
mov word [esi + 0x20], cx
mov word [esi + 0x24], dx
mov word [esi + 0x26], ax
mov dword [esi + 0x28], ebp
mov word [esi + 0x2c], cx
mov dword [esi + 0x38], ebp
mov dword [esi + 0x30], ebp
mov dword [esi + 0x34], ebp
mov dword [esi + 0x48], ebp
mov dword [esi + 0x44], ebp
mov dword [esi + 0x40], ebp
mov dword [esi + 0x4c], ebp
mov dword [esi + 0x3c], ebp
mov dword [esi + 0x50], ebp
mov dword [esi + 0x54], ebp
mov dword [esi + 0x5c], ebp
mov dword [esi + 0x58], ebp
call fcn.004bd990
mov edx, dword [esi + 0x54]
mov edi, eax
push edx
mov dword [esp + 0x18], edi
call fcn.0047f0a0
push eax
push 0x268
call fcn.004750b0
push eax
call fcn.0049f9b0
add esp, 8
call fcn.00453460
cmp byte [0x535500], 0
jne 0x4bf63f
cmp dword [esp + 0x10], ebp
je 0x4bf027
mov dword [esp + 0x10], ebp
cmp edi, 2
je 0x4bf5dd
cmp dword [esp + 0x14], ebp
jne 0x4bf5c4
inc dword [0x51f840]
mov eax, 0x520d68
cmp dword [0x520d68], ebp
je 0x4bf051
mov eax, dword [esp + 0x1c]
mov dword [eax], esi
lea eax, [esi + 0x78]
mov dword [eax], ebp
mov dword [esp + 0x1c], eax
jmp 0x4bf5c4
xor eax, eax
jmp 0x4bf070
mov cl, byte [eax + 0x5890bc]
cmp cl, byte [eax + 0x4dfae4]
jne 0x4bf084
inc eax
cmp eax, 4
jl 0x4bf070
cmp eax, 4
jne 0x4bf5a0
cmp dword [esp + 0x10], ebp
jne 0x4bf0f9
mov ecx, dword [0x51f840]
cmp ecx, ebp
je 0x4bf0f9
lea eax, [ecx*4]
mov edx, eax
shr edx, 2
cmp edx, ecx
jne 0x4bf686
push eax
call fcn.004c1d07
add esp, 4
mov dword [0x51f838], eax
cmp eax, ebp
je 0x4bf686
mov ecx, dword [0x520d68]
cmp ecx, ebp
je 0x4bf0e2
mov dword [eax], ecx
mov ecx, dword [ecx + 0x78]
add eax, 4
cmp ecx, ebp
jne 0x4bf0d1
mov eax, dword [0x51f838]
mov ecx, dword [0x51f840]
push 0x4b9e90
push 4
push ecx
push eax
call fcn.004c1800
add esp, 0x10
mov edx, dword [0x520cd0]
push edx
push 1
lea eax, [esp + 0x28]
push 0x2a
push eax
mov dword [esp + 0x20], 1
call fcn.004c4096
add esp, 0x10
cmp eax, 1
jne 0x4bf5c4
push 0x80
call fcn.004c1d07
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x4bf686
movzx ecx, byte [esp + 0x21]
movzx edx, byte [esp + 0x20]
movzx eax, byte [esp + 0x23]
shl cx, 8
or cx, dx
movzx edx, byte [esp + 0x25]
mov word [esi], cx
movzx ecx, byte [esp + 0x22]
shl ax, 8
or ax, cx
movzx ecx, byte [esp + 0x27]
mov word [esi + 2], ax
movzx eax, byte [esp + 0x24]
shl dx, 8
or dx, ax
movzx eax, byte [esp + 0x2b]
mov word [esi + 4], dx
movzx edx, byte [esp + 0x26]
shl cx, 8
or cx, dx
movzx edx, byte [esp + 0x2a]
shl ax, 8
mov word [esi + 6], cx
movzx ecx, ax
movzx eax, byte [esp + 0x29]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x28]
shl ecx, 0x10
or ecx, edx
or ecx, eax
movzx eax, byte [esp + 0x2e]
mov dword [esi + 8], ecx
movzx ecx, byte [esp + 0x2f]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x2d]
or edx, eax
shl cx, 8
movzx eax, cx
movzx ecx, byte [esp + 0x2c]
shl edx, 0x10
or edx, eax
or edx, ecx
movzx ecx, byte [esp + 0x32]
mov dword [esi + 0xc], edx
movzx edx, byte [esp + 0x33]
shl dx, 8
movzx eax, dx
movzx edx, byte [esp + 0x31]
or eax, ecx
shl eax, 0x10
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x30]
or eax, ecx
or eax, edx
movzx edx, byte [esp + 0x36]
mov dword [esi + 0x10], eax
movzx eax, byte [esp + 0x37]
shl ax, 8
movzx ecx, ax
movzx eax, byte [esp + 0x35]
or ecx, edx
shl ax, 8
movzx edx, ax
movzx eax, byte [esp + 0x34]
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x3b]
or ecx, eax
movzx ax, byte [esp + 0x39]
mov dword [esi + 0x18], ecx
movzx ecx, byte [esp + 0x38]
shl ax, 8
or ax, cx
mov dword [esi + 0x14], ebp
mov dword [esi + 0x1c], ebp
mov word [esi + 0x20], ax
shl dx, 8
movzx ecx, byte [esp + 0x3a]
or dx, cx
movzx ecx, byte [esp + 0x3c]
mov word [esi + 0x24], dx
movzx edx, byte [esp + 0x3d]
shl dx, 8
or dx, cx
mov word [esi + 0x26], dx
movzx edx, byte [esp + 0x3f]
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x3e]
or ecx, edx
movzx edx, byte [esp + 0x40]
mov dword [esi + 0x28], ecx
movzx ecx, byte [esp + 0x41]
shl cx, 8
or cx, dx
mov word [esi + 0x2c], cx
movzx ecx, byte [esp + 0x45]
shl cx, 8
movzx edx, cx
movzx ecx, byte [esp + 0x44]
or edx, ecx
movzx ecx, byte [esp + 0x43]
shl cx, 8
shl edx, 0x10
movzx ecx, cx
or edx, ecx
movzx ecx, byte [esp + 0x42]
or edx, ecx
mov dword [esi + 0x38], edx
movzx edx, byte [esp + 0x49]
shl dx, 8
movzx ecx, dx
movzx edx, byte [esp + 0x48]
or ecx, edx
movzx edx, byte [esp + 0x47]
shl dx, 8
movzx edx, dx
shl ecx, 0x10
or ecx, edx
movzx edx, byte [esp + 0x46]
or ecx, edx
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], ebp
mov dword [esi + 0x44], ebp
mov dword [esi + 0x40], ebp
mov dword [esi + 0x4c], ebp
mov dword [esi + 0x3c], ebp
mov dword [esi + 0x50], ebp
mov dword [esi + 0x54], ebp
mov dword [esi + 0x48], ebp
mov dword [esi + 0x5c], ebp
mov dword [esi + 0x58], ebp
cmp ax, bp
je 0x4bf5c4
movzx eax, ax
inc eax
push eax
call fcn.004c1d07
mov edi, eax
add esp, 4
mov dword [esi + 0x4c], edi
cmp edi, ebp
je 0x4bf686
movzx ebx, word [esi + 0x24]
cmp bx, bp
je 0x4bf373
movzx ecx, bx
inc ecx
push ecx
call fcn.004c1d07
add esp, 4
mov dword [esi + 0x44], eax
cmp eax, ebp
je 0x4bf686
movzx ebp, word [esi + 0x26]
test bp, bp
je 0x4bf394
movzx edx, bp
inc edx
push edx
call fcn.004c1d07
add esp, 4
mov dword [esi + 0x48], eax
test eax, eax
je 0x4bf686
mov eax, dword [0x520cd0]
movzx ecx, word [esi + 0x20]
push eax
push 1
push ecx
push edi
call fcn.004c4096
add esp, 0x10
cmp eax, 1
jne 0x4bf5c4
test bx, bx
je 0x4bf3d9
mov edx, dword [0x520cd0]
mov ecx, dword [esi + 0x44]
push edx
push eax
movzx eax, bx
push eax
push ecx
call fcn.004c4096
add esp, 0x10
cmp eax, 1
jne 0x4bf5c4
test bp, bp
je 0x4bf400
mov edx, dword [0x520cd0]
mov ecx, dword [esi + 0x48]
push edx
movzx eax, bp
push 1
push eax
push ecx
call fcn.004c4096
add esp, 0x10
cmp eax, 1
jne 0x4bf5c4
movzx edx, word [esi + 0x20]
push edi
mov byte [edx + edi], 0
call fcn.004b9f50
mov edi, eax
test edi, edi
je 0x4bf5c4
mov eax, dword [edi + 8]
cmp eax, dword [esi + 8]
jne 0x4bf5c4
cmp dword [edi + 0x58], 0
movzx ecx, word [esi]
mov edx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
mov word [edi], cx
movzx ecx, word [esi + 0x2c]
mov dword [edi + 0x44], edx
mov edx, dword [esi + 0x38]
mov word [edi + 0x24], bx
mov word [edi + 0x26], bp
mov dword [edi + 0x48], eax
mov word [edi + 0x2c], cx
mov dword [edi + 0x38], edx
jne 0x4bf47f
mov eax, 0x800
test word [edi + 4], ax
je 0x4bf479
mov ecx, dword [edi + 0x4c]
push ecx
call fcn.004d107b
add esp, 4
mov dword [edi + 0x58], eax
test eax, eax
jne 0x4bf47f
push 4
call fcn.004b7c00
jmp 0x4bf47f
push edi
call fcn.004ba370
movzx eax, word [edi]
movzx ecx, al
shr ax, 8
test ax, ax
jne 0x4bf4a6
test dword [edi + 0x38], 0xffff0000
je 0x4bf4b7
cmp ecx, 0x19
je 0x4bf4a6
cmp ecx, 0x1a
je 0x4bf4a6
cmp ecx, 0x28
jne 0x4bf4b7
cmp ax, 6
je 0x4bf4b7
cmp ax, 0xb
jne 0x4bf4c2
cmp ecx, 0x32
jne 0x4bf4c2
mov eax, dword [edi + 0x4c]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
movzx eax, word [edi]
movzx ecx, al
shr ax, 8
test ax, ax
jne 0x4bf4e9
test dword [edi + 0x38], 0xffff0000
je 0x4bf4fa
cmp ecx, 0x19
je 0x4bf4e9
cmp ecx, 0x1a
je 0x4bf4e9
cmp ecx, 0x28
jne 0x4bf4fa
cmp ax, 6
je 0x4bf4fa
cmp ax, 0xb
jne 0x4bf505
cmp ecx, 0x32
jne 0x4bf505
mov eax, dword [edi + 0x48]
push eax
push eax
call dword [sym.imp.USER32.dll_OemToCharA]
mov edx, dword [0x520ccc]
push edx
call fcn.004c44ea
mov ecx, dword [edi + 0x30]
mov esi, eax
mov eax, dword [edi + 0x34]
push 0
push eax
mov ebx, edx
mov edx, dword [0x520ccc]
push ecx
push edx
call fcn.004c414f
add esp, 0x14
test eax, eax
jne 0x4bf66f
push 1
push edi
call fcn.004bcab0
mov eax, dword [0x520ccc]
push 0
push ebx
push esi
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4bf67a
mov ecx, dword [0x520ccc]
push ecx
call fcn.004c44ea
add esp, 4
cmp esi, eax
jne 0x4bf56f
cmp ebx, edx
je 0x4bf5c4
mov edx, dword [0x520cd0]
push edx
call fcn.004c34b2
add esp, 4
pop ebx
pop edi
pop esi
mov dword [0x520cd0], 0
mov eax, 0xe
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
cmp dword [0x520d68], ebp
jne 0x4bf5c4
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x5890bc]
cmp dl, byte [eax + str.PK_a_b]
jne 0x4bf5c4
inc eax
cmp eax, 4
jl 0x4bf5b0
mov esi, dword [0x520cd0]
call fcn.004bb290
mov ebx, dword [esp + 0x18]
xor ebp, ebp
test eax, eax
jne 0x4beed0
mov eax, dword [0x520cd0]
cmp eax, ebp
je 0x4bf5ef
push eax
call fcn.004c34b2
add esp, 4
push ebx
mov dword [0x520cd0], ebp
call fcn.004c1404
add esp, 4
cmp dword [esp + 0x14], 2
je 0x4bf61e
mov ecx, dword [0x520ce8]
inc ecx
mov dword [0x520ce8], ecx
cmp ecx, dword [0x520ce4]
jb 0x4bee32
pop ebx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
push ebx
push ebp
mov ecx, 0x51f7e8
call fcn.00433b00
pop ebx
pop edi
pop esi
mov eax, 9
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
pop ebx
pop edi
pop esi
mov eax, 2
pop ebp
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004c0c62
add esp, 0x40
ret
mov eax, dword [0x520cd0]
push eax
jmp 0x4bf576
mov ecx, dword [0x520cd0]
push ecx
jmp 0x4bf576
mov ecx, dword [esp + 0x4c]
pop ebx
pop edi
pop esi
pop ebp
xor ecx, esp
mov eax, 4
call fcn.004c0c62
add esp, 0x40
ret