Function at 0x4539c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x190]
cmp eax, dword [ecx + 8]
jbe 0x45546b
sub esp, 0x210
mov eax, dword [esp + 0x224]
test eax, eax
jle 0x4539fe
mov ecx, dword [esp + 0x230]
test ecx, ecx
je 0x453a05
jmp 0x455454
mov ecx, dword [esp + 0x230]
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x220]
cmp ebx, edx
jne 0x453a29
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x50], edx
je 0x45543e
call fcn.004440b0
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x214]
cmp ecx, 0xffffffff
jne 0x453a77
mov edx, dword [esp + 0x218]
cmp edx, 0xffffffff
jne 0x453a67
mov ecx, dword [esp + 0x220]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x453a5f
mov ebx, dword [ecx + 0x3c]
jmp 0x453a8c
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
jmp 0x453a8c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
jmp 0x453a8c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
mov edx, dword [esp + 0x218]
mov dword [esp + 0x8c], eax
lea edi, [esp + 0x1ec]
mov ebp, eax
xor eax, eax
call fcn.0045eda7
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x200], edx
mov ecx, dword [esp + 0x220]
mov esi, dword [ecx + 0xcc]
mov edi, ebp
mov ebp, dword [ecx + 0xd0]
mov dword [esp + 0x5c], ebp
mov ebp, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x228]
test ecx, ecx
je 0x453aeb
xor eax, eax
mov byte [esp + 0x1b], al
xor eax, eax
jmp 0x453b0c
mov edi, dword [esp + 0x230]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x8c]
mov byte [esp + 0x1b], cl
mov ecx, dword [esp + 0x228]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], edx
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x7c], ebp
test ebx, ebx
jne 0x453b43
mov edx, dword [edx]
mov dword [esp + 0x1f4], edx
mov edx, dword [esp + 0x80]
lea edi, [edx + 4]
mov dword [esp + 0x200], edi
mov eax, dword [esp + 0x1f4]
mov dword [esp], eax
call fcn.0044deb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x453bd9
mov dword [esp + 0x1ec], ecx
mov dword [esp + 0x1f0], eax
lea edi, [esp + 0xdc]
xor eax, eax
call fcn.0045ed80
mov ecx, dword [esp + 0x22c]
mov ebx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x220]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x7c]
xor eax, eax
mov dword [esp + 0x40], eax
xor eax, eax
mov byte [esp + 0x1a], al
xor eax, eax
mov byte [esp + 0x1c], al
mov eax, dword [esp + 0x224]
mov dword [esp + 0x74], eax
mov dword [esp + 0xa8], ecx
xor ecx, ecx
mov dword [esp + 0x34], ecx
xor eax, eax
mov ecx, dword [esp + 0xa8]
jmp 0x453d4f
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x453bf1
movzx ecx, byte [esp + 0x1b]
test cl, cl
je 0x453cb5
mov eax, dword [esp + 0x220]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x8c], ecx
mov eax, dword [eax + 0x54]
mov dword [esp + 0x78], eax
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x84], edx
call fcn.00435bc0
lea eax, [0x4aa2a6]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004364c0
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00436140
lea eax, [0x4aa7a5]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436340
call fcn.00435de0
call fcn.00435c30
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
lea eax, [esp + 0x1ec]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00456fc0
mov eax, dword [esp + 0x230]
test eax, eax
jmp 0x453cb7
test eax, eax
jne 0x453ccb
mov dword [esp + 0x23c], 0
add esp, 0x210
ret
lea eax, [0x4a9f0d]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00434410
sete bl
mov dword [esp + 0x1ec], ebp
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 0x1f0], ebp
mov ebp, dword [esp + 0x1fc]
mov dword [esp + 0x1f4], ebp
mov dword [esp + 0x1fc], 0
mov ebp, dword [esp + 0x204]
mov dword [esp + 0x200], ebp
mov dword [esp + 0x204], 0
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x1d8]
mov byte [esp + 0x1a], bl
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x40]
cmp ecx, esi
jle 0x454866
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x1f0]
mov dword [esp + 0x1e4], ebp
mov ebp, dword [esi + 0x10]
test ebp, ebp
je 0x454855
mov dword [esp + 0x1e0], esi
movzx ebp, byte [esi + 0x29]
movzx esi, byte [esi + 0x28]
xchg esi, eax
cmp al, 4
xchg esi, eax
jne 0x453d9f
and ebp, 0xfffffffd
xchg esi, eax
mov byte [esp + 0x1f], al
xchg esi, eax
cmp dword [esp + 0x1f4], ebx
jne 0x453dd6
cmp dword [esp + 0x200], edx
jne 0x453dcd
mov esi, dword [esp + 0x1e8]
cmp dword [esi + 0x3c], ebx
jne 0x453ddd
cmp dword [esi + 0x38], edx
jne 0x453ddd
and ebp, 0xfffffffd
jmp 0x453ddd
mov esi, dword [esp + 0x1e8]
jmp 0x453ddd
mov esi, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x204]
test ebx, ebx
je 0x453e09
mov ebx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ebx
mov ebx, dword [esp + 0x1e0]
jmp 0x4540da
mov ebx, dword [esp + 0x238]
test ebx, 4
je 0x45400e
mov eax, dword [esi + 0x18]
cmp dword [eax], esi
jne 0x453fda
mov edx, dword [eax + 0x50]
test edx, edx
je 0x453fa6
cmp dword [edx + 0x18], eax
jne 0x453f6f
movzx eax, byte [esp + 0x1f]
cmp al, 0xc
je 0x453ee0
cmp al, 0x13
jne 0x453ea9
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x200], eax
mov edi, dword [edx + 4]
mov esi, dword [edx]
mov eax, dword [edx + 0xcc]
mov ecx, dword [edx + 0xd0]
and ebp, 0xfffffffd
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0xa0]
jmp 0x454047
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x454047
mov dword [esp + 0x1dc], edx
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1f4], eax
mov dword [esp], eax
call fcn.0044deb0
mov esi, dword [esp + 4]
mov ebp, dword [esp + 8]
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f0], ebp
movzx eax, byte [esi + 0x29]
mov byte [esp + 0x1d], al
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x1fc], edx
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x200], edx
mov edi, dword [ecx + 4]
mov edx, dword [ecx]
mov ebx, dword [ecx + 0xcc]
mov eax, dword [ecx + 0xd0]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c0], ebp
movzx ebp, byte [esp + 0x1d]
mov ecx, eax
mov eax, ebx
mov esi, edx
mov edx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x238]
jmp 0x454047
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x454047
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x454047
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], eax
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x454047
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1d8], edx
xchg ebp, eax
mov byte [esp + 0x1d], al
xchg ebp, eax
mov dword [esp + 0x2c], edi
mov ebx, dword [esp + 0x1f4]
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0xdc]
mov dword [esp + 0xc], ebx
call fcn.0044e970
mov eax, dword [esp + 0x200]
add eax, dword [esp + 0x10]
mov dword [esp + 0x204], eax
add eax, 4
mov dword [esp + 0x204], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
movzx ebp, byte [esp + 0x1d]
mov ebx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x1d8]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1d8], esi
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x454110
mov dword [esp + 0x1fc], 0
xor ebp, ebp
xor eax, eax
mov dword [esp + 0x1bc], eax
xor eax, eax
jmp 0x4543b9
xchg ebp, eax
test al, 2
xchg ebp, eax
je 0x45415b
mov ebp, dword [esp + 0x230]
test ebp, ebp
je 0x454133
mov esi, dword [esp + 0x40]
test esi, esi
jle 0x454166
test ebp, ebp
je 0x454137
jmp 0x4553c6
mov esi, dword [esp + 0x40]
mov dword [esp + 0x1fc], 0
xor eax, eax
mov dword [esp + 0x1b0], eax
xor eax, eax
mov dword [esp + 0x1ac], eax
xor eax, eax
jmp 0x45439b
mov ebp, dword [esp + 0x230]
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0x1fc]
test eax, eax
jne 0x45418e
mov eax, dword [esp + 0x204]
add eax, 0xfffffffc
mov dword [esp + 0x44], eax
mov eax, dword [eax]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x44]
jmp 0x454190
xor eax, eax
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x1fc]
mov dword [esp], ecx
call fcn.0044deb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4541ce
movzx ebx, byte [esp + 0x1b]
mov ebp, dword [esp + 0x230]
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x1d8]
jmp 0x454373
movzx ebx, byte [esp + 0x1b]
test bl, bl
je 0x454208
mov ebp, dword [esp + 0x1d8]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x8c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4541ff
mov esi, dword [esp + 0x1c4]
cmp byte [esi + 0x28], 0x12
jne 0x454216
xor edx, edx
jmp 0x454218
mov esi, dword [esp + 0x1c4]
jmp 0x454216
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x1c4]
mov edx, ebx
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
mov edi, ebp
mov ebp, dword [esp + 0x230]
test ebp, ebp
jne 0x45423e
test dl, dl
jne 0x45423e
test ebp, ebp
jmp 0x45436d
mov dword [esp], esi
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.0044e5a0
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
mov edx, dword [eax + 0x54]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x1cc], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0x1fc]
mov dword [esp + 0x88], esi
call fcn.00435bc0
lea eax, [0x4aa2a6]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004364c0
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00436140
lea eax, [0x4ae0d5]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.004364c0
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.004364c0
lea eax, [0x4aa6ef]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436340
call fcn.00435de0
call fcn.00435c30
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1ec]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xc], ebx
call fcn.00456fc0
mov edx, dword [esp + 0x230]
test edx, edx
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d4]
movzx ebx, byte [esp + 0x1b]
mov ebp, edx
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x1d8]
jne 0x4553b0
mov edx, dword [esp + 0x80]
mov ebx, esi
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1ac], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov esi, dword [esp + 0x1d8]
mov ebp, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x1bc], eax
xor eax, eax
mov dword [esp + 0x1b0], ebp
mov esi, dword [esp + 0x204]
mov dword [esp + 0x208], esi
add esi, 0xfffffffc
mov dword [esp + 0x208], esi
mov esi, dword [esp + 0x204]
mov dword [esp + 0x20c], esi
mov esi, dword [esp + 0x1f4]
mov dword [esp + 0x1f8], esi
movzx esi, byte [esp + 0x1a]
xchg esi, eax
test al, al
xchg esi, eax
je 0x45447a
mov ebp, dword [esp + 0x1ec]
mov dword [esp + 0x1e0], ebp
mov ebp, dword [ebp + 0xc]
test ebp, ebp
jne 0x454421
mov dword [esp + 0x1f8], 0
jmp 0x454473
mov eax, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x1e0]
mov ecx, dword [ecx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044dd40
mov eax, dword [esp + 0x1ec]
mov eax, dword [eax + 0xc]
add eax, dword [esp + 8]
inc eax
mov dword [esp + 0x1f8], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
mov ebp, dword [esp + 0x1b0]
mov ebp, dword [esp + 0x230]
test ebp, ebp
jne 0x454490
mov ebp, dword [esp + 0x228]
test ebp, ebp
jmp 0x4544ec
mov eax, dword [ebp]
lea ecx, [esp + 0x1ec]
mov dword [esp], ecx
mov ebx, dword [esp + 0x234]
mov dword [esp + 4], ebx
mov edx, ebp
call eax
movzx eax, byte [esp + 8]
test al, al
je 0x454843
mov ebx, dword [esp + 0x228]
test ebx, ebx
mov eax, 0
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x228]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
je 0x454619
mov ebp, dword [esp + 0x1f4]
mov ebx, dword [esp + 0x40]
test ebx, ebx
jne 0x454516
mov ebx, dword [esp + 0x238]
test ebx, 2
jne 0x454571
xchg esi, eax
test al, al
xchg esi, eax
jmp 0x454521
xchg esi, eax
test al, al
xchg esi, eax
mov ebx, dword [esp + 0x238]
jne 0x454571
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044dd40
mov eax, dword [esp + 0x30]
cmp dword [esp + 8], eax
jne 0x454576
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x30]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
lea esi, [ebp + 1]
jmp 0x454598
lea ebp, [eax - 1]
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c4]
cmp byte [ebp + 0x2b], 3
ja 0x4545b6
xor eax, eax
mov dword [esp + 0x1a0], eax
xor eax, eax
jmp 0x454600
mov dword [esp + 0x68], esi
lea ebx, [ebp + 0x2b]
mov ebp, dword [ebp + 0x1c]
lea ebx, [ebx + ebp*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x1c0]
mov esi, dword [esi + 0xa0]
xchg ebp, eax
movzx eax, al
xchg ebp, eax
dec ebp
add ebx, esi
and ebx, ebp
mov ebp, dword [esp + 0x1c4]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x238]
mov ebx, dword [esp + 0x1a0]
test ebx, ebx
jne 0x4551ea
movzx ebx, byte [esp + 0x1c]
jmp 0x4552f6
movzx ebp, byte [esp + 0x1b]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x454734
mov ebp, dword [esp + 0x1f4]
mov dword [esp + 0x20], ebp
mov ebx, dword [esp + 0x40]
test ebx, ebx
jg 0x454654
mov ebx, dword [esp + 0x238]
test ebx, 2
je 0x454654
xor eax, eax
mov byte [esp + 0x1e], al
xor eax, eax
jmp 0x4546a6
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044dd40
mov eax, dword [esp + 0x1f4]
cmp dword [esp + 8], eax
setb al
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x20]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
mov byte [esp + 0x1e], al
xor eax, eax
movzx ebx, byte [esp + 0x1e]
test bl, bl
je 0x4546b6
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4546b6
dec ebp
mov ebx, dword [esp + 0x1c4]
cmp byte [ebx + 0x2b], 3
ja 0x4546c7
xor esi, esi
jmp 0x454705
mov dword [esp + 0x64], ebp
lea esi, [ebx + 0x2b]
mov ebx, dword [ebx + 0x1c]
lea ebx, [esi + ebx*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg esi, ebx
sete bl
xchg esi, ebx
mov ebp, dword [esp + 0x1c0]
mov ebp, dword [ebp + 0xa0]
xchg esi, eax
movzx eax, al
xchg esi, eax
dec esi
add ebx, ebp
and ebx, esi
mov ebp, dword [esp + 0x64]
mov esi, ebx
mov ebx, dword [esp + 0x1c4]
test esi, esi
jne 0x454713
movzx esi, byte [esp + 0x1c]
jmp 0x454d8b
mov dword [esp + 0x19c], esi
lea edi, [esp + 0xb0]
call fcn.0045eda5
movzx ecx, byte [esp + 0x1c]
mov edi, dword [esp + 0x34]
jmp 0x454b6e
movzx esi, byte [esp + 0x1c]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov ebp, dword [esp + 0x40]
inc ebp
cmp byte [ebx + 0x28], 4
jne 0x4547d8
mov esi, dword [esp + 0x5c]
test esi, esi
je 0x4547cf
mov ebx, dword [esp + 0x1c8]
mov ebx, dword [ebx + esi*4 - 4]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x74]
test ebx, ebx
jne 0x4547c5
mov ebx, dword [esp + 0x230]
test ebx, ebx
jne 0x4547cc
mov eax, dword [esp + 0x228]
mov dword [esp], eax
movzx edx, byte [esp + 0x1b]
mov byte [esp + 4], dl
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00455a60
mov ebp, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x230]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0x2c]
jmp 0x4547cc
mov ebx, dword [esp + 0x230]
dec esi
jmp 0x4547e3
mov ebx, dword [esp + 0x230]
jmp 0x4547e3
mov ebx, dword [esp + 0x230]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x40], ebp
mov ebx, dword [esp + 0x1c4]
movzx ebx, byte [ebx + 0x28]
cmp bl, 0x12
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
je 0x454a52
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x1f4]
cmp dword [esp + 0x1fc], esi
jne 0x45483b
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x200]
cmp dword [esp + 0x204], esi
je 0x454a66
cmp bl, 0x12
jmp 0x453ce1
cmp bl, 0x12
jmp 0x453ce1
mov eax, dword [esp + 0x40]
mov dword [esp + 0x23c], eax
add esp, 0x210
ret
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x40]
jmp 0x45486a
mov eax, dword [esp + 0x34]
movzx edx, byte [esp + 0x1b]
test dl, dl
jne 0x454875
mov eax, esi
mov edx, dword [esp + 0x230]
test edx, edx
je 0x454892
cmp ecx, eax
jle 0x454892
mov edx, dword [esp + 0x200]
mov ebx, dword [ebp + 0x40]
cmp ebx, edx
jne 0x4548a0
mov dword [esp + 0x23c], eax
add esp, 0x210
ret
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0x1e8], ebp
mov eax, dword [ebp + 0x50]
mov dword [esp + 0x8c], eax
mov ecx, dword [ebp + 0x54]
mov dword [esp + 0x78], ecx
call fcn.00435bc0
lea eax, [0x4a9ea9]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.004364c0
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00436140
lea eax, [0x4aa01d]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4a91df]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436340
call fcn.00435de0
call fcn.00435c30
mov eax, dword [esp + 0x1e8]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x84], eax
call fcn.00435bc0
lea eax, [0x4a98cb]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4c8568]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4a9133]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004364c0
mov eax, dword [esp + 0x40]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004362c0
lea eax, [0x4a91cb]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.004364c0
mov eax, dword [esp + 0x22c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004362c0
call fcn.00435de0
call fcn.00435c30
lea eax, [0x4afc85]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00434410
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x40]
jmp 0x45486a
mov dword [esp + 0x84], esi
call fcn.00435bc0
lea eax, [0x4aeb6a]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4a909f]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436340
call fcn.00435de0
call fcn.00435c30
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1ec]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00456fc0
lea eax, [0x4ab085]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00434410
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x19c]
movzx ebx, byte [edx + ecx]
mov byte [esp + 0x1c], bl
mov ebp, dword [esp + 0x1f0]
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0044dd40
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x19c]
lea eax, [ecx + eax + 8]
mov ebp, dword [esp + 8]
add ebp, dword [eax]
mov ebx, dword [esp + 0x1c4]
movzx ecx, byte [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x34], edi
mov byte [esp + 0x1c], cl
mov dword [esp + 0x20], ebp
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0
call fcn.0044eb10
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x454d67
cmp eax, 0x100000
jae 0x45518a
shl eax, 4
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x19c]
mov edx, dword [ecx + eax + 4]
mov dword [esp + 0xb4], edx
movzx edx, byte [ecx + eax]
mov byte [esp + 0xd8], dl
mov edx, dword [ecx + eax + 0xc]
mov dword [esp + 0xd4], edx
mov edx, dword [esp + 0x238]
test edx, 1
jne 0x454c4a
mov eax, dword [esp + 0x34]
test eax, eax
sete cl
movzx edx, byte [esp + 0xd8]
lea ebx, [esp + 0xb0]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1d8]
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
movzx ecx, byte [esp + 0x1c]
mov byte [esp + 0xe], cl
call fcn.004568e0
movzx eax, byte [esp + 0x10]
test al, al
je 0x454d5e
lea eax, [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 4], ecx
call fcn.0044e5a0
mov eax, dword [esp + 8]
mov dword [esp + 0x1a8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x1c4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
call fcn.0044e910
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b8], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
call fcn.00435bc0
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.004364c0
lea eax, [0x4a93a5]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004364c0
call fcn.00435c30
call fcn.00435bc0
lea eax, [0x4c8520]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004364c0
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.004364c0
lea eax, [0x4a8eca]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004364c0
mov eax, dword [esp + 0x4c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004362c0
call fcn.00435de0
call fcn.00435c30
mov eax, dword [esp + 0x34]
lea edi, [eax + 1]
jmp 0x454b16
mov edi, dword [esp + 0x34]
jmp 0x454b16
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
movzx esi, byte [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x238]
test ebp, 1
je 0x454da5
mov esi, 1
jmp 0x454e07
mov eax, dword [esp + 0x34]
test eax, eax
sete cl
movzx edx, byte [ebx + 0x28]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 4], ebp
mov edi, dword [esp + 0x1d8]
mov dword [esp + 8], edi
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.004568e0
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, eax
xor eax, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x454e16
mov esi, dword [esp + 0x34]
jmp 0x455174
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.0044e5a0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x1a4], ecx
mov edx, dword [esp + 0x1c4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
call fcn.0044e910
mov eax, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b4], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x38]
cmp ebx, 0xf
je 0x454e8b
mov ebp, dword [esp + 0x1a4]
jmp 0x454ecd
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
lea ecx, [0x4aaffe]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.00402920
movzx eax, byte [esp + 0xc]
test al, al
je 0x454ec2
mov ebx, 5
lea ebp, [0x4a92e3]
jmp 0x454ecd
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x1a4]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x1a4], ebp
call fcn.00435bc0
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.004364c0
lea eax, str.___._:__MSZ___
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004364c0
call fcn.00435c30
mov eax, dword [esp + 0x20c]
mov ecx, dword [esp + 0x1c4]
mov dword [esp], ecx
mov edx, dword [esp + 0x1c0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], eax
call fcn.00455480
call fcn.00435bc0
lea eax, [0x4a8ee7]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004364c0
call fcn.00435c30
call fcn.00435bc0
lea eax, [0x4c8520]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004364c0
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.004364c0
lea eax, [0x4a8eca]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004364c0
mov eax, dword [esp + 0x48]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004362c0
call fcn.00435c30
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044dd40
mov eax, dword [esp + 0x1f4]
cmp dword [esp + 8], eax
jae 0x45504c
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044dd40
mov eax, dword [esp + 0x1f4]
sub eax, dword [esp + 8]
mov dword [esp + 0x88], eax
call fcn.00435bc0
lea eax, [0x4a8edb]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436340
call fcn.00435c30
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x45507d
cmp dword [ecx + 0x70], 2
jb 0x455071
cmp dword [ecx + 0x50], eax
je 0x45508d
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jmp 0x455087
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jmp 0x455087
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jl 0x45513c
mov eax, dword [esp + 0x204]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x60], edx
call fcn.00435bc0
lea eax, [0x4a9087]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4a909f]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4a9097]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004364c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00436340
call fcn.00435c30
call fcn.00435bc0
call fcn.00435de0
call fcn.00435c30
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, eax
xor eax, eax
movzx eax, byte [ebx + 0x28]
movzx ebp, byte [esp + 0x1b]
mov dword [esp + 0x34], esi
mov esi, eax
xor eax, eax
jmp 0x454739
mov ecx, 0x100000
call fcn.0045ec60
mov dword [esp + 0x74], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x40], ecx
mov ebp, dword [esp + 0x1ec]
movzx esi, byte [edx + eax]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov edi, dword [esp + 0x1f0]
mov ebp, dword [ebp]
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0044dd40
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x1a0]
lea eax, [ecx + eax + 8]
mov ebp, dword [esp + 8]
add ebp, dword [eax]
lea esi, [ebp + 1]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x88], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xdc]
mov dword [esp + 0x10], ecx
call fcn.0044eb10
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4552cf
cmp eax, 0x100000
jae 0x4553a6
shl eax, 4
mov edx, dword [esp + 0x1a0]
lea ebx, [edx + eax]
cmp byte [ebx], 0x15
jne 0x455269
movzx ebx, byte [esp + 0x1c]
cmp bl, 9
je 0x455269
cmp bl, 0x12
je 0x455269
cmp bl, 0xe
je 0x455269
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
jmp 0x455194
mov ebx, dword [esp + 0x74]
test ebx, ebx
jle 0x45528d
lea ecx, [ebx - 1]
mov ebp, dword [esp + 0x22c]
mov edi, dword [esp + 0x228]
mov ebx, ecx
mov ecx, dword [esp + 0x40]
jmp 0x455194
mov ebp, dword [esp + 0x22c]
mov esi, dword [esp + 0x40]
cmp ebp, esi
jle 0x4552c1
cmp esi, 0x100000
jae 0x45539a
mov ecx, dword [esp + 0x88]
mov edi, dword [esp + 0x228]
mov dword [edi + esi*4], ecx
lea ecx, [esi + 1]
jmp 0x455194
mov edi, dword [esp + 0x228]
mov ecx, esi
jmp 0x455194
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x1c]
mov esi, dword [esp + 0x88]
cmp byte [ebp + 0x28], 0x15
jne 0x45531c
cmp bl, 9
je 0x45531c
cmp bl, 0x12
je 0x45531c
cmp bl, 0xe
je 0x45531c
mov ebx, dword [esp + 0x228]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x74]
jmp 0x45535c
mov ebx, dword [esp + 0x74]
test ebx, ebx
jle 0x455334
dec ebx
mov ebp, dword [esp + 0x40]
mov esi, ebx
mov ebx, dword [esp + 0x228]
jmp 0x45535c
mov ebp, dword [esp + 0x40]
cmp ecx, ebp
jle 0x455351
cmp ebp, 0x100000
jae 0x45538e
mov ebx, dword [esp + 0x228]
mov dword [ebx + ebp*4], esi
inc ebp
jmp 0x455358
mov ebx, dword [esp + 0x228]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x1c4]
movzx ebx, byte [eax + 0x28]
dec ebp
xor eax, eax
mov dword [esp + 0x40], ebp
mov byte [esp + 0x1c], bl
mov dword [esp + 0x74], esi
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x228]
movzx esi, byte [esp + 0x1a]
jmp 0x454619
mov eax, ebp
mov ecx, 0x100000
call fcn.0045ec60
mov eax, esi
mov ecx, 0x100000
call fcn.0045ec60
mov ecx, 0x100000
call fcn.0045ec60
lea eax, [0x4ab784]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00434410
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.0044e5a0
mov eax, dword [esp + 8]
mov dword [esp + 0x1cc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x74], ecx
call fcn.00435bc0
lea eax, [0x4b053e]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.004364c0
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
call fcn.004364c0
call fcn.00435de0
call fcn.00435c30
lea eax, [0x4a9c18]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00434410
lea eax, [0x4b1e39]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00434410
lea eax, [0x4b1c42]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.00434410
nop
call fcn.0045d7d0
jmp fcn.004539c0