Function at 0x456ed0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x190]
cmp eax, dword [ecx + 8]
jbe 0x45897b
sub esp, 0x210
mov eax, dword [esp + 0x224]
test eax, eax
jle 0x456f0e
mov ecx, dword [esp + 0x230]
test ecx, ecx
je 0x456f15
jmp 0x458964
mov ecx, dword [esp + 0x230]
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x220]
cmp ebx, edx
jne 0x456f39
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x50], edx
je 0x45894e
call fcn.00446750
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x214]
cmp ecx, 0xffffffff
jne 0x456f87
mov edx, dword [esp + 0x218]
cmp edx, 0xffffffff
jne 0x456f77
mov ecx, dword [esp + 0x220]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x456f6f
mov ebx, dword [ecx + 0x3c]
jmp 0x456f9c
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
jmp 0x456f9c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
jmp 0x456f9c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
mov edx, dword [esp + 0x218]
mov dword [esp + 0x8c], eax
lea edi, [esp + 0x1ec]
mov ebp, eax
xor eax, eax
call fcn.00463d47
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x200], edx
mov ecx, dword [esp + 0x220]
mov esi, dword [ecx + 0xcc]
mov edi, ebp
mov ebp, dword [ecx + 0xd0]
mov dword [esp + 0x5c], ebp
mov ebp, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x228]
test ecx, ecx
je 0x456ffb
xor eax, eax
mov byte [esp + 0x1b], al
xor eax, eax
jmp 0x45701c
mov edi, dword [esp + 0x230]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x8c]
mov byte [esp + 0x1b], cl
mov ecx, dword [esp + 0x228]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], edx
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x7c], ebp
test ebx, ebx
jne 0x457053
mov edx, dword [edx]
mov dword [esp + 0x1f4], edx
mov edx, dword [esp + 0x80]
lea edi, [edx + 4]
mov dword [esp + 0x200], edi
mov eax, dword [esp + 0x1f4]
mov dword [esp], eax
call fcn.00451260
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
je 0x4570e9
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x1f0], ecx
lea edi, [esp + 0xdc]
xor eax, eax
call fcn.00463d20
mov ecx, dword [esp + 0x22c]
mov ebx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x220]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x7c]
xor eax, eax
mov dword [esp + 0x40], eax
xor eax, eax
mov byte [esp + 0x1a], al
xor eax, eax
mov byte [esp + 0x1c], al
mov eax, dword [esp + 0x224]
mov dword [esp + 0x74], eax
mov dword [esp + 0xa8], ecx
xor ecx, ecx
mov dword [esp + 0x34], ecx
xor eax, eax
mov ecx, dword [esp + 0xa8]
jmp 0x45725f
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x457101
movzx ecx, byte [esp + 0x1b]
test cl, cl
je 0x4571c5
mov eax, dword [esp + 0x220]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x8c], ecx
mov eax, dword [eax + 0x54]
mov dword [esp + 0x78], eax
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x84], edx
call fcn.00438220
lea eax, [0x6a8b34]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438b20
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004387a0
lea eax, [0x6a9880]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.004389a0
call fcn.00438440
call fcn.00438290
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
lea eax, [esp + 0x1ec]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0045a4d0
mov eax, dword [esp + 0x230]
test eax, eax
jmp 0x4571c7
test eax, eax
jne 0x4571db
mov dword [esp + 0x23c], 0
add esp, 0x210
ret
lea eax, [0x6a8274]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00436590
sete bl
mov dword [esp + 0x1ec], ebp
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 0x1f0], ebp
mov ebp, dword [esp + 0x1fc]
mov dword [esp + 0x1f4], ebp
mov dword [esp + 0x1fc], 0
mov ebp, dword [esp + 0x204]
mov dword [esp + 0x200], ebp
mov dword [esp + 0x204], 0
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x1d8]
mov byte [esp + 0x1a], bl
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x40]
cmp ecx, esi
jle 0x457d76
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x1f0]
mov dword [esp + 0x1e4], ebp
mov ebp, dword [esi + 0x10]
test ebp, ebp
je 0x457d65
mov dword [esp + 0x1e0], esi
movzx ebp, byte [esi + 0x29]
movzx esi, byte [esi + 0x28]
xchg esi, eax
cmp al, 4
xchg esi, eax
jne 0x4572af
and ebp, 0xfffffffd
xchg esi, eax
mov byte [esp + 0x1f], al
xchg esi, eax
cmp dword [esp + 0x1f4], ebx
jne 0x4572e6
cmp dword [esp + 0x200], edx
jne 0x4572dd
mov esi, dword [esp + 0x1e8]
cmp dword [esi + 0x3c], ebx
jne 0x4572ed
cmp dword [esi + 0x38], edx
jne 0x4572ed
and ebp, 0xfffffffd
jmp 0x4572ed
mov esi, dword [esp + 0x1e8]
jmp 0x4572ed
mov esi, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x204]
test ebx, ebx
je 0x457319
mov ebx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ebx
mov ebx, dword [esp + 0x1e0]
jmp 0x4575ea
mov ebx, dword [esp + 0x238]
test ebx, 4
je 0x45751e
mov eax, dword [esi + 0x18]
cmp dword [eax], esi
jne 0x4574ea
mov edx, dword [eax + 0x50]
test edx, edx
je 0x4574b6
cmp dword [edx + 0x18], eax
jne 0x45747f
movzx eax, byte [esp + 0x1f]
cmp al, 0xc
je 0x4573f0
cmp al, 0x13
jne 0x4573b9
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x200], eax
mov edi, dword [edx + 4]
mov esi, dword [edx]
mov eax, dword [edx + 0xcc]
mov ecx, dword [edx + 0xd0]
and ebp, 0xfffffffd
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0xa0]
jmp 0x457557
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x457557
mov dword [esp + 0x1dc], edx
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1f4], eax
mov dword [esp], eax
call fcn.00451260
mov esi, dword [esp + 4]
mov ebp, dword [esp + 8]
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f0], ebp
movzx eax, byte [esi + 0x29]
mov byte [esp + 0x1d], al
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x1fc], edx
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x200], edx
mov edi, dword [ecx + 4]
mov edx, dword [ecx]
mov ebx, dword [ecx + 0xcc]
mov eax, dword [ecx + 0xd0]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c0], ebp
movzx ebp, byte [esp + 0x1d]
mov ecx, eax
mov eax, ebx
mov esi, edx
mov edx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x238]
jmp 0x457557
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x457557
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x457557
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], eax
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x457557
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1d8], edx
xchg ebp, eax
mov byte [esp + 0x1d], al
xchg ebp, eax
mov dword [esp + 0x2c], edi
mov ebx, dword [esp + 0x1f4]
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0xdc]
mov dword [esp + 0xc], ebx
call fcn.00451d20
mov eax, dword [esp + 0x200]
add eax, dword [esp + 0x10]
mov dword [esp + 0x204], eax
add eax, 4
mov dword [esp + 0x204], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
movzx ebp, byte [esp + 0x1d]
mov ebx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x1d8]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1d8], esi
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x457620
mov dword [esp + 0x1fc], 0
xor ebp, ebp
xor eax, eax
mov dword [esp + 0x1bc], eax
xor eax, eax
jmp 0x4578c9
xchg ebp, eax
test al, 2
xchg ebp, eax
je 0x45766b
mov ebp, dword [esp + 0x230]
test ebp, ebp
je 0x457643
mov esi, dword [esp + 0x40]
test esi, esi
jle 0x457676
test ebp, ebp
je 0x457647
jmp 0x4588d6
mov esi, dword [esp + 0x40]
mov dword [esp + 0x1fc], 0
xor eax, eax
mov dword [esp + 0x1b0], eax
xor eax, eax
mov dword [esp + 0x1ac], eax
xor eax, eax
jmp 0x4578ab
mov ebp, dword [esp + 0x230]
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0x1fc]
test eax, eax
jne 0x45769e
mov eax, dword [esp + 0x204]
add eax, 0xfffffffc
mov dword [esp + 0x44], eax
mov eax, dword [eax]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x44]
jmp 0x4576a0
xor eax, eax
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x1fc]
mov dword [esp], ecx
call fcn.00451260
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4576de
movzx ebx, byte [esp + 0x1b]
mov ebp, dword [esp + 0x230]
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x1d8]
jmp 0x457883
movzx ebx, byte [esp + 0x1b]
test bl, bl
je 0x457718
mov ebp, dword [esp + 0x1d8]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x8c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x45770f
mov esi, dword [esp + 0x1c4]
cmp byte [esi + 0x28], 0x12
jne 0x457726
xor edx, edx
jmp 0x457728
mov esi, dword [esp + 0x1c4]
jmp 0x457726
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x1c4]
mov edx, ebx
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
mov edi, ebp
mov ebp, dword [esp + 0x230]
test ebp, ebp
jne 0x45774e
test dl, dl
jne 0x45774e
test ebp, ebp
jmp 0x45787d
mov dword [esp], esi
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.00451950
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
mov edx, dword [eax + 0x54]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x1cc], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0x1fc]
mov dword [esp + 0x88], esi
call fcn.00438220
lea eax, [0x6a8b34]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438b20
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.004387a0
lea eax, [0x6b2280]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.00438b20
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.00438b20
lea eax, [0x6a97a3]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004389a0
call fcn.00438440
call fcn.00438290
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1ec]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xc], ebx
call fcn.0045a4d0
mov edx, dword [esp + 0x230]
test edx, edx
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d4]
movzx ebx, byte [esp + 0x1b]
mov ebp, edx
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x1d8]
jne 0x4588c0
mov edx, dword [esp + 0x80]
mov ebx, esi
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1ac], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov esi, dword [esp + 0x1d8]
mov ebp, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x1bc], eax
xor eax, eax
mov dword [esp + 0x1b0], ebp
mov esi, dword [esp + 0x204]
mov dword [esp + 0x208], esi
add esi, 0xfffffffc
mov dword [esp + 0x208], esi
mov esi, dword [esp + 0x204]
mov dword [esp + 0x20c], esi
mov esi, dword [esp + 0x1f4]
mov dword [esp + 0x1f8], esi
movzx esi, byte [esp + 0x1a]
xchg esi, eax
test al, al
xchg esi, eax
je 0x45798a
mov ebp, dword [esp + 0x1ec]
mov dword [esp + 0x1e0], ebp
mov ebp, dword [ebp + 0xc]
test ebp, ebp
jne 0x457931
mov dword [esp + 0x1f8], 0
jmp 0x457983
mov eax, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x1e0]
mov ecx, dword [ecx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00450d60
mov eax, dword [esp + 0x1ec]
mov eax, dword [eax + 0xc]
add eax, dword [esp + 8]
inc eax
mov dword [esp + 0x1f8], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
mov ebp, dword [esp + 0x1b0]
mov ebp, dword [esp + 0x230]
test ebp, ebp
jne 0x4579a0
mov ebp, dword [esp + 0x228]
test ebp, ebp
jmp 0x4579fc
mov eax, dword [ebp]
lea ecx, [esp + 0x1ec]
mov dword [esp], ecx
mov ebx, dword [esp + 0x234]
mov dword [esp + 4], ebx
mov edx, ebp
call eax
movzx eax, byte [esp + 8]
test al, al
je 0x457d53
mov ebx, dword [esp + 0x228]
test ebx, ebx
mov eax, 0
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x228]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
je 0x457b29
mov ebp, dword [esp + 0x1f4]
mov ebx, dword [esp + 0x40]
test ebx, ebx
jne 0x457a26
mov ebx, dword [esp + 0x238]
test ebx, 2
jne 0x457a81
xchg esi, eax
test al, al
xchg esi, eax
jmp 0x457a31
xchg esi, eax
test al, al
xchg esi, eax
mov ebx, dword [esp + 0x238]
jne 0x457a81
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450d60
mov eax, dword [esp + 0x30]
cmp dword [esp + 8], eax
jne 0x457a86
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x30]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
lea esi, [ebp + 1]
jmp 0x457aa8
lea ebp, [eax - 1]
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c4]
cmp byte [ebp + 0x2b], 3
ja 0x457ac6
xor eax, eax
mov dword [esp + 0x1a0], eax
xor eax, eax
jmp 0x457b10
mov dword [esp + 0x68], esi
lea ebx, [ebp + 0x2b]
mov ebp, dword [ebp + 0x1c]
lea ebx, [ebx + ebp*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x1c0]
mov esi, dword [esi + 0xa0]
xchg ebp, eax
movzx eax, al
xchg ebp, eax
dec ebp
add ebx, esi
and ebx, ebp
mov ebp, dword [esp + 0x1c4]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x238]
mov ebx, dword [esp + 0x1a0]
test ebx, ebx
jne 0x4586fa
movzx ebx, byte [esp + 0x1c]
jmp 0x458806
movzx ebp, byte [esp + 0x1b]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x457c44
mov ebp, dword [esp + 0x1f4]
mov dword [esp + 0x20], ebp
mov ebx, dword [esp + 0x40]
test ebx, ebx
jg 0x457b64
mov ebx, dword [esp + 0x238]
test ebx, 2
je 0x457b64
xor eax, eax
mov byte [esp + 0x1e], al
xor eax, eax
jmp 0x457bb6
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450d60
mov eax, dword [esp + 0x1f4]
cmp dword [esp + 8], eax
setb al
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x20]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
mov byte [esp + 0x1e], al
xor eax, eax
movzx ebx, byte [esp + 0x1e]
test bl, bl
je 0x457bc6
xchg esi, eax
test al, al
xchg esi, eax
jne 0x457bc6
dec ebp
mov ebx, dword [esp + 0x1c4]
cmp byte [ebx + 0x2b], 3
ja 0x457bd7
xor esi, esi
jmp 0x457c15
mov dword [esp + 0x64], ebp
lea esi, [ebx + 0x2b]
mov ebx, dword [ebx + 0x1c]
lea ebx, [esi + ebx*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg esi, ebx
sete bl
xchg esi, ebx
mov ebp, dword [esp + 0x1c0]
mov ebp, dword [ebp + 0xa0]
xchg esi, eax
movzx eax, al
xchg esi, eax
dec esi
add ebx, ebp
and ebx, esi
mov ebp, dword [esp + 0x64]
mov esi, ebx
mov ebx, dword [esp + 0x1c4]
test esi, esi
jne 0x457c23
movzx esi, byte [esp + 0x1c]
jmp 0x45829b
mov dword [esp + 0x19c], esi
lea edi, [esp + 0xb0]
call fcn.00463d45
movzx ecx, byte [esp + 0x1c]
mov edi, dword [esp + 0x34]
jmp 0x45807e
movzx esi, byte [esp + 0x1c]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov ebp, dword [esp + 0x40]
inc ebp
cmp byte [ebx + 0x28], 4
jne 0x457ce8
mov esi, dword [esp + 0x5c]
test esi, esi
je 0x457cdf
mov ebx, dword [esp + 0x1c8]
mov ebx, dword [ebx + esi*4 - 4]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x74]
test ebx, ebx
jne 0x457cd5
mov ebx, dword [esp + 0x230]
test ebx, ebx
jne 0x457cdc
mov eax, dword [esp + 0x228]
mov dword [esp], eax
movzx edx, byte [esp + 0x1b]
mov byte [esp + 4], dl
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00458f70
mov ebp, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x230]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0x2c]
jmp 0x457cdc
mov ebx, dword [esp + 0x230]
dec esi
jmp 0x457cf3
mov ebx, dword [esp + 0x230]
jmp 0x457cf3
mov ebx, dword [esp + 0x230]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x40], ebp
mov ebx, dword [esp + 0x1c4]
movzx ebx, byte [ebx + 0x28]
cmp bl, 0x12
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
je 0x457f62
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x1f4]
cmp dword [esp + 0x1fc], esi
jne 0x457d4b
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x200]
cmp dword [esp + 0x204], esi
je 0x457f76
cmp bl, 0x12
jmp 0x4571f1
cmp bl, 0x12
jmp 0x4571f1
mov eax, dword [esp + 0x40]
mov dword [esp + 0x23c], eax
add esp, 0x210
ret
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x40]
jmp 0x457d7a
mov eax, dword [esp + 0x34]
movzx edx, byte [esp + 0x1b]
test dl, dl
jne 0x457d85
mov eax, esi
mov edx, dword [esp + 0x230]
test edx, edx
je 0x457da2
cmp ecx, eax
jle 0x457da2
mov edx, dword [esp + 0x200]
mov ebx, dword [ebp + 0x40]
cmp ebx, edx
jne 0x457db0
mov dword [esp + 0x23c], eax
add esp, 0x210
ret
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0x1e8], ebp
mov eax, dword [ebp + 0x50]
mov dword [esp + 0x8c], eax
mov ecx, dword [ebp + 0x54]
mov dword [esp + 0x78], ecx
call fcn.00438220
lea eax, [0x6a81d4]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00438b20
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004387a0
lea eax, [0x6a83d0]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004389a0
lea eax, [0x6a6705]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.004389a0
call fcn.00438440
call fcn.00438290
mov eax, dword [esp + 0x1e8]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x84], eax
call fcn.00438220
lea eax, [0x6a7534]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004389a0
lea eax, [0x70eb68]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.004389a0
lea eax, [0x6a65df]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438b20
mov eax, dword [esp + 0x40]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438920
lea eax, [0x6a66f1]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00438b20
mov eax, dword [esp + 0x22c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438920
call fcn.00438440
call fcn.00438290
lea eax, [0x6b66ed]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00436590
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x40]
jmp 0x457d7a
mov dword [esp + 0x84], esi
call fcn.00438220
lea eax, [0x6b3a3c]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004389a0
lea eax, [0x6a6483]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.004389a0
call fcn.00438440
call fcn.00438290
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1ec]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0045a4d0
lea eax, [0x6ab409]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00436590
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x19c]
movzx ebx, byte [edx + ecx]
mov byte [esp + 0x1c], bl
mov ebp, dword [esp + 0x1f0]
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00450d60
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x19c]
lea eax, [ecx + eax + 8]
mov ebp, dword [esp + 8]
add ebp, dword [eax]
mov ebx, dword [esp + 0x1c4]
movzx ecx, byte [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x34], edi
mov byte [esp + 0x1c], cl
mov dword [esp + 0x20], ebp
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0
call fcn.00451ec0
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x458277
cmp eax, 0x100000
jae 0x45869a
shl eax, 4
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x19c]
mov edx, dword [ecx + eax + 4]
mov dword [esp + 0xb4], edx
movzx edx, byte [ecx + eax]
mov byte [esp + 0xd8], dl
mov edx, dword [ecx + eax + 0xc]
mov dword [esp + 0xd4], edx
mov edx, dword [esp + 0x238]
test edx, 1
jne 0x45815a
mov eax, dword [esp + 0x34]
test eax, eax
sete cl
movzx edx, byte [esp + 0xd8]
lea ebx, [esp + 0xb0]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1d8]
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
movzx ecx, byte [esp + 0x1c]
mov byte [esp + 0xe], cl
call fcn.00459df0
movzx eax, byte [esp + 0x10]
test al, al
je 0x45826e
lea eax, [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 4], ecx
call fcn.00451950
mov eax, dword [esp + 8]
mov dword [esp + 0x1a8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x1c4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
call fcn.00451cc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b8], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
call fcn.00438220
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.00438b20
lea eax, [0x6a6a57]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00438b20
call fcn.00438290
call fcn.00438220
lea eax, [0x70ea7c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438b20
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00438b20
lea eax, [0x70eb94]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438b20
mov eax, dword [esp + 0x4c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438920
call fcn.00438440
call fcn.00438290
mov eax, dword [esp + 0x34]
lea edi, [eax + 1]
jmp 0x458026
mov edi, dword [esp + 0x34]
jmp 0x458026
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
movzx esi, byte [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x238]
test ebp, 1
je 0x4582b5
mov esi, 1
jmp 0x458317
mov eax, dword [esp + 0x34]
test eax, eax
sete cl
movzx edx, byte [ebx + 0x28]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 4], ebp
mov edi, dword [esp + 0x1d8]
mov dword [esp + 8], edi
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.00459df0
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, eax
xor eax, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x458326
mov esi, dword [esp + 0x34]
jmp 0x458684
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.00451950
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x1a4], ecx
mov edx, dword [esp + 0x1c4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
call fcn.00451cc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b4], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x38]
cmp ebx, 0xf
je 0x45839b
mov ebp, dword [esp + 0x1a4]
jmp 0x4583dd
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
lea ecx, [0x6ab373]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.00402a70
movzx eax, byte [esp + 0xc]
test al, al
je 0x4583d2
mov ebx, 5
lea ebp, [0x6a6958]
jmp 0x4583dd
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x1a4]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x1a4], ebp
call fcn.00438220
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00438b20
lea eax, [0x70eb50]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438b20
call fcn.00438290
mov eax, dword [esp + 0x20c]
mov ecx, dword [esp + 0x1c4]
mov dword [esp], ecx
mov edx, dword [esp + 0x1c0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], eax
call fcn.00458990
call fcn.00438220
lea eax, [0x6a610f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438b20
call fcn.00438290
call fcn.00438220
lea eax, [0x70ea7c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438b20
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.00438b20
lea eax, [0x70eb94]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438b20
mov eax, dword [esp + 0x48]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438920
call fcn.00438290
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450d60
mov eax, dword [esp + 0x1f4]
cmp dword [esp + 8], eax
jae 0x45855c
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450d60
mov eax, dword [esp + 0x1f4]
sub eax, dword [esp + 8]
mov dword [esp + 0x88], eax
call fcn.00438220
lea eax, [0x6a60fb]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004389a0
call fcn.00438290
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x45858d
cmp dword [ecx + 0x70], 2
jb 0x458581
cmp dword [ecx + 0x50], eax
je 0x45859d
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jmp 0x458597
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jmp 0x458597
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jl 0x45864c
mov eax, dword [esp + 0x204]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x60], edx
call fcn.00438220
lea eax, [0x6a6467]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004389a0
lea eax, [0x6a6483]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004389a0
lea eax, [0x6a647b]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438b20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.004389a0
call fcn.00438290
call fcn.00438220
call fcn.00438440
call fcn.00438290
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, eax
xor eax, eax
movzx eax, byte [ebx + 0x28]
movzx ebp, byte [esp + 0x1b]
mov dword [esp + 0x34], esi
mov esi, eax
xor eax, eax
jmp 0x457c49
mov ecx, 0x100000
call fcn.00463b30
mov dword [esp + 0x74], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x40], ecx
mov ebp, dword [esp + 0x1ec]
movzx esi, byte [edx + eax]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov edi, dword [esp + 0x1f0]
mov ebp, dword [ebp]
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.00450d60
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x1a0]
lea eax, [ecx + eax + 8]
mov ebp, dword [esp + 8]
add ebp, dword [eax]
lea esi, [ebp + 1]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x88], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xdc]
mov dword [esp + 0x10], ecx
call fcn.00451ec0
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4587df
cmp eax, 0x100000
jae 0x4588b6
shl eax, 4
mov edx, dword [esp + 0x1a0]
lea ebx, [edx + eax]
cmp byte [ebx], 0x15
jne 0x458779
movzx ebx, byte [esp + 0x1c]
cmp bl, 9
je 0x458779
cmp bl, 0x12
je 0x458779
cmp bl, 0xe
je 0x458779
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
jmp 0x4586a4
mov ebx, dword [esp + 0x74]
test ebx, ebx
jle 0x45879d
lea ecx, [ebx - 1]
mov ebp, dword [esp + 0x22c]
mov edi, dword [esp + 0x228]
mov ebx, ecx
mov ecx, dword [esp + 0x40]
jmp 0x4586a4
mov ebp, dword [esp + 0x22c]
mov esi, dword [esp + 0x40]
cmp ebp, esi
jle 0x4587d1
cmp esi, 0x100000
jae 0x4588aa
mov ecx, dword [esp + 0x88]
mov edi, dword [esp + 0x228]
mov dword [edi + esi*4], ecx
lea ecx, [esi + 1]
jmp 0x4586a4
mov edi, dword [esp + 0x228]
mov ecx, esi
jmp 0x4586a4
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x1c]
mov esi, dword [esp + 0x88]
cmp byte [ebp + 0x28], 0x15
jne 0x45882c
cmp bl, 9
je 0x45882c
cmp bl, 0x12
je 0x45882c
cmp bl, 0xe
je 0x45882c
mov ebx, dword [esp + 0x228]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x74]
jmp 0x45886c
mov ebx, dword [esp + 0x74]
test ebx, ebx
jle 0x458844
dec ebx
mov ebp, dword [esp + 0x40]
mov esi, ebx
mov ebx, dword [esp + 0x228]
jmp 0x45886c
mov ebp, dword [esp + 0x40]
cmp ecx, ebp
jle 0x458861
cmp ebp, 0x100000
jae 0x45889e
mov ebx, dword [esp + 0x228]
mov dword [ebx + ebp*4], esi
inc ebp
jmp 0x458868
mov ebx, dword [esp + 0x228]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x1c4]
movzx ebx, byte [eax + 0x28]
dec ebp
xor eax, eax
mov dword [esp + 0x40], ebp
mov byte [esp + 0x1c], bl
mov dword [esp + 0x74], esi
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x228]
movzx esi, byte [esp + 0x1a]
jmp 0x457b29
mov eax, ebp
mov ecx, 0x100000
call fcn.00463b30
mov eax, esi
mov ecx, 0x100000
call fcn.00463b30
mov ecx, 0x100000
call fcn.00463b30
lea eax, [0x6ac641]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00436590
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.00451950
mov eax, dword [esp + 8]
mov dword [esp + 0x1cc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x74], ecx
call fcn.00438220
lea eax, [0x6b7e60]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.00438b20
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
call fcn.00438b20
call fcn.00438440
call fcn.00438290
lea eax, [0x6a7bc2]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00436590
lea eax, [0x6bc589]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00436590
lea eax, [0x6bbfa5]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.00436590
nop
call fcn.004626a0
jmp fcn.00456ed0