Function at 0x44ac10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x44b928
sub esp, 0xa0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x74b680]
mov dword [esp], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x98]
mov dword [esp + 8], ebp
call fcn.0040b700
movzx eax, byte [esp + 0x10]
test al, al
jne 0x44b84d
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x74b680]
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
lea ebx, [esp + 0x98]
mov dword [esp + 8], ebx
call fcn.0040bb00
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
je 0x44b83e
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [ecx + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x44b82f
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], eax
call fcn.00449a20
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00449a20
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
je 0x44ad3e
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44ad2f
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.00449ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call fcn.00449ab0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x44b78a
test eax, eax
jne 0x44b788
movzx ebx, byte [esp + 0x16]
cmp bl, 1
jb 0x44adab
cmp bl, 0x10
jbe 0x44b779
cmp bl, 0x15
ja 0x44b46a
cmp bl, 0x12
jbe 0x44b3b5
cmp bl, 0x13
jne 0x44b091
mov ebx, dword [esp + 0xa8]
movzx ebp, word [ebx + 0x22]
mov esi, dword [esp + 0xa4]
cmp word [esi + 0x22], bp
jne 0x44b082
movzx ebp, word [esi + 0x20]
movzx edi, word [ebx + 0x20]
cmp di, bp
jne 0x44b082
nop
mov eax, edi
movzx edi, byte [esi + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x44b078
mov ecx, 0x34
movzx ebp, bp
lea edi, [ecx + esi]
cmp ebp, 0x100000
ja 0x44b8c8
nop
mov ecx, esi
movzx esi, byte [ebx + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x44b06e
mov edx, 0x34
movzx esi, ax
mov eax, ebx
add ebx, edx
cmp esi, 0x100000
ja 0x44b8bc
mov dword [esp + 0x90], edi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0xac]
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x48]
jmp 0x44aebb
mov eax, dword [esp + 0x2c]
inc eax
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xac]
mov ebp, esi
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0x2c]
cmp ebx, ebp
jge 0x44af0a
jae 0x44b8b3
mov edi, dword [edi + ebx*4]
cmp ebx, esi
jae 0x44b8aa
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + ebx*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44ae73
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
nop
movzx ebx, byte [ecx + 0xc]
test bl, 1
je 0x44b064
mov ebx, 0x34
movzx ebp, word [ecx + 0x22]
and ebp, 0x7fff
movzx esi, word [ecx + 0x20]
add ebp, esi
movzx ebp, bp
add ebx, ecx
cmp ebp, 0x100000
ja 0x44b89e
movzx esi, si
cmp esi, ebp
ja 0x44b895
nop
sub ebp, esi
lea edi, [esi - 0x100000]
xchg edi, ebx
neg ebx
xchg edi, ebx
shl esi, 2
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, esi
add ebx, edi
movzx esi, byte [eax + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x44b05a
mov ecx, 0x34
mov dword [esp + 0x60], ebx
movzx esi, word [eax + 0x22]
and esi, 0x7fff
movzx edi, word [eax + 0x20]
add esi, edi
movzx esi, si
lea ebx, [ecx + eax]
cmp esi, 0x100000
ja 0x44b889
movzx eax, di
cmp eax, esi
ja 0x44b882
mov dword [esp + 0x20], ebp
sub esi, eax
mov dword [esp + 0x18], esi
lea edi, [eax - 0x100000]
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and edi, eax
add ebx, edi
mov dword [esp + 0x50], ebx
mov edi, dword [esp + 0x60]
xor eax, eax
jmp 0x44b007
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x60]
mov ebx, ebp
mov ebp, ecx
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x60]
cmp eax, ebp
jge 0x44b04b
jae 0x44b87b
mov edi, dword [edi + eax*4]
cmp eax, esi
jae 0x44b874
mov dword [esp + 0x34], eax
mov ecx, dword [ebx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44afdf
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, 0x24
jmp 0x44af7c
mov ebx, 0x24
jmp 0x44af1d
mov edx, 0x24
jmp 0x44ae33
mov ecx, 0x24
jmp 0x44ae0a
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp bl, 0x14
jne 0x44b33f
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.0044a530
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.0044a530
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
je 0x44b0ea
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b0db
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa8]
cmp dword [ebp + 0x28], ebx
jne 0x44b330
mov dword [esp + 0x44], ebx
xor eax, eax
jmp 0x44b147
mov esi, dword [esp + 0x38]
lea eax, [esi + 1]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov edx, ecx
mov ebx, esi
mov ebp, edi
cmp eax, ebx
jge 0x44b321
mov esi, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x44b86f
lea edi, [esi + eax*8]
mov edx, dword [ebp + 0x24]
mov ebp, dword [ebp + 0x28]
cmp eax, ebp
jae 0x44b868
mov dword [esp + 0x88], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x64], edi
mov dword [esp + 0x84], edx
lea ecx, [esi + eax*8]
mov ecx, dword [ecx]
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.00449c40
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x84]
lea edx, [ecx + eax*8]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x80], ebx
lea ebp, [ecx + eax*8]
mov ebp, dword [ebp]
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.00449c40
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.0044a530
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.0044a530
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
jne 0x44b312
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b312
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.0044a630
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.0044a630
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
jne 0x44b303
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b303
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x88]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x64]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00449ef0
mov eax, dword [esp + 8]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x54]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00449ef0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44b128
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44b383
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
jmp 0x44b375
cmp bl, 0x11
je 0x44b40d
cmp bl, 0x12
jne 0x44b8d4
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xa4]
cmp dword [edx + 0x24], ecx
je 0x44b3e9
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov ecx, dword [edx + 0x20]
mov eax, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
jmp 0x44b3db
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b466
mov eax, dword [esp + 0xa8]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa4]
cmp dword [ecx + 0x28], eax
sete al
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
xor eax, eax
jmp 0x44b458
cmp bl, 0x17
ja 0x44b4f4
cmp bl, 0x16
jne 0x44b4b6
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp bl, 0x18
jne 0x44b508
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
cmp bl, 0x19
jne 0x44b76b
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa4]
cmp dword [edx + 0x28], ecx
jne 0x44b75c
mov eax, dword [edx + 0x20]
mov dword [esp], eax
call fcn.0044a530
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.0044a530
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
je 0x44b574
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b565
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xa8]
xor eax, eax
jmp 0x44b5c8
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov edx, ecx
mov ebx, esi
mov ebp, edi
cmp eax, ebx
jge 0x44b74d
mov esi, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x44b863
lea edi, [eax + eax*2]
mov edx, dword [ebp + 0x24]
mov ebp, dword [ebp + 0x28]
cmp eax, ebp
jae 0x44b85c
mov dword [esp + 0x74], edx
mov dword [esp + 0x70], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], edi
mov eax, dword [esi + edi*4]
mov dword [esp], eax
call fcn.0044a530
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.0044a530
mov eax, dword [esp + 0x3c]
cmp dword [esp + 8], eax
jne 0x44b73e
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b73e
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.0044ac10
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b72f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.0044a5b0
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.0044a5b0
mov eax, dword [esp + 0x3c]
cmp dword [esp + 8], eax
jne 0x44b720
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44b720
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x70]
mov ebx, dword [ebx + edx*4 + 8]
mov ebp, dword [esp + 0x74]
mov edx, dword [ebp + edx*4 + 8]
cmp ebx, edx
je 0x44b5a9
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp bl, 0x1a
je 0x44b4f9
jmp 0x44b8d4
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
test ecx, ecx
je 0x44b790
test eax, eax
jne 0x44b79f
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov dword [esp + 0x58], eax
mov eax, dword [ecx]
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00449c40
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.0044a530
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x58]
mov edx, dword [edx]
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00449c40
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.0044a530
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x44b820
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44ad98
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, ebp
call fcn.00451500
call fcn.00451500
mov ecx, ebp
call fcn.00451500
call fcn.00451500
mov ecx, esi
call fcn.00451500
mov ecx, ebp
call fcn.00451500
mov ecx, esi
call fcn.00451560
mov ecx, esi
mov edx, 0x100000
call fcn.00451520
mov eax, esi
mov ecx, ebp
call fcn.00451560
mov ecx, ebp
mov edx, 0x100000
call fcn.00451520
mov eax, ebx
mov ecx, esi
call fcn.00451500
mov eax, ebx
mov ecx, ebp
call fcn.00451500
mov ecx, esi
mov edx, 0x100000
call fcn.00451520
mov ecx, ebp
mov edx, 0x100000
call fcn.00451520
call fcn.0042c290
lea eax, [0x7b0f68]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0042cb30
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042c840
call fcn.0042c4b0
call fcn.0042c300
lea eax, [0x7b0730]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0042b460
nop
call fcn.0044fc40
jmp fcn.0044ac10