Function at 0x45d100
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
xchg ebp, ebp
push esi
nop
mov dword [esp - 4], 0x559a140a
sub dword [esp - 4], 0x1716fac6
mov dword [esp - 0x10], ebp
xor dword [esp - 4], 0x2276783d
sub dword [esp - 4], 0xd1eeafd
sub dword [esp - 4], 0x85c60a0
xchg ebx, ebx
add dword [esp - 4], 0x11794c76
xor dword [esp - 4], 0x18f36252
sub esp, 4
push dword [ebp + 8]
mov dword [esp - 0x1c], 0x6ef92f17
mov esi, ecx
lea ecx, [ebp - 0x44]
call fcn.00487830
lea ecx, [ebp - 0x44]
xchg ecx, ecx
call fcn.00487c90
test al, al
jne 0x45d18a
xchg edi, edi
mov ecx, esi
call fcn.0045cc80
lea ecx, [ebp - 0x44]
call fcn.00487a70
mov dword [esp - 0xc], esp
pop esi
mov esp, ebp
pop ebp
ret 4
lea eax, [esi + 0x1164]
lea ecx, [eax + 0x40]
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], ecx
mov ebp, ebp
cmp eax, ecx
je 0x45dd5c
push ebx
push edi
mov dword [esp - 0x40], edx
mov eax, dword [eax]
xor ebx, ebx
xor esi, esi
mov dword [ebp + 8], eax
xchg ecx, ecx
xor edi, edi
mov dword [ebp - 0xc], ebx
cmp dword [eax + 0x88], ebx
jbe 0x45dd29
xchg esi, esi
add eax, 8
mov dword [ebp - 8], eax
test esi, esi
mov dword [esp - 0x44], 0x181f75a8
je 0x45d24b
cmp esi, edi
jb 0x45d2a3
add edi, 0x20
mov dword [esp - 0x10], esp
mov dword [ebp - 0x14], edi
lea eax, [edi*4]
push eax
mov ecx, ecx
call fcn.00490c50
add esp, 4
mov dword [ebp - 0x10], eax
test esi, esi
mov dword [esp - 0x20], 0x6e4f635d
je 0x45d22f
mov edi, ebx
mov ecx, eax
mov dword [esp - 0x24], esp
sub edi, eax
mov edx, esi
mov edi, edi
mov ebp, ebp
mov eax, dword [edi + ecx]
lea ecx, [ecx + 4]
mov dword [ecx - 4], eax
sub edx, 1
xchg esp, esp
jne 0x45d21c
mov edi, dword [ebp - 0x14]
test ebx, ebx
je 0x45d246
xchg ebx, ebx
push ebx
call fcn.00490c60
add esp, 4
mov dword [esp - 0x44], 0x6553cc1b
mov ebx, dword [ebp - 0x10]
jmp 0x45d29c
test ebx, ebx
jne 0x45d2a3
nop
mov dword [esp - 0x10], 0x7efe4410
mov dword [esp - 4], 0x17c4cceb
xor dword [esp - 4], 0x33221be2
xor dword [esp - 4], 0x3fb199c1
add dword [esp - 4], 0xd88cb71
mov ebp, ebp
xor dword [esp - 4], 0x5150c3ef
sub dword [esp - 4], 0x79b0d956
sub esp, 4
lea edi, [ebx + 0x20]
mov edx, edx
call fcn.00490c50
add esp, 4
mov ebx, eax
mov eax, dword [ebp - 8]
mov dword [esp - 0x20], edi
mov ecx, dword [eax]
lea edx, [ebx + esi*4]
mov dword [edx], ecx
add eax, 4
mov esp, esp
mov ecx, dword [ebp - 0xc]
inc esi
mov edx, dword [ebp + 8]
mov ebx, ebx
inc ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
mov dword [esp - 0x24], 0x7db173fb
cmp ecx, dword [edx + 0x88]
jb 0x45d1cd
test esi, esi
mov ecx, ecx
je 0x45dd24
lea esi, [ebx + esi*4]
mov dword [ebp - 0x24], ebx
mov dword [esp - 0x20], 0x6fd74c79
mov dword [ebp - 0x20], esi
mov edi, ebx
mov dword [ebp - 0x14], edi
cmp ebx, esi
mov dword [esp - 0x34], 0x2dad97a7
je 0x45dd24
mov edi, edi
mov ebx, dword [edi]
mov dword [esp - 0x10], 0x4b546811
mov dword [ebp - 0xc], ebx
mov eax, dword [ebx + 4]
xor eax, 0x1d6a61f8
mov ecx, ecx
dec eax
cmp eax, 3
ja case.default.0x45d326
jmp dword [eax*4 + 0x45dd70]
mov edx, dword [ebx + 0xc]
mov eax, dword [ebp + 8]
xor edx, 0x1d6a61f8
mov ebx, ebx
mov ecx, dword [ebx]
xor ecx, 0x1d6a61f8
push edx
mov dword [esp - 0x44], edx
mov eax, dword [eax]
push ecx
xor eax, 0x1d6a61f8
lea ecx, [ebp - 0x44]
mov dword [esp - 0x3c], 0x76ad1a61
push eax
call fcn.004886d0
xor eax, 0x1d6a61f8
mov ebx, ebx
mov dword [ebx + 8], eax
jmp case.default.0x45d326
add ebx, 0x10
lea eax, [ebx + 4]
xchg ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [eax]
mov dword [ebp - 8], eax
mov dword [esp - 0x14], esp
cmp eax, 2
jbe 0x45d38b
mov ebx, dword [ebx]
inc eax
mov dword [esp - 0x24], esp
mov ecx, 0x4cd4e4be
add ecx, 0xdb0ecc9
sub ecx, 0x3c52c62
mov ecx, ecx
add ecx, 0x56d2c30
xor ecx, 0x5c2dd157
mul ecx
pushf
mov dword [esp - 0x40], 0x1cc1e295
mov ecx, 0xecbfa6e
add ecx, 0x57c9b608
xor ecx, 0x4a66a8b6
sub ecx, 0x355a012
xchg edi, edi
sub ecx, 0x1d6628a9
add ecx, 0x16b87d73
add ecx, 0xdd103287
mov dword [esp - 0x1c], 0x227ea715
popf
cmovb eax, ecx
push eax
mov dword [esp - 0x28], 0x79cbc4d3
call fcn.00490c90
mov esi, eax
add esp, 4
mov eax, dword [ebp - 8]
mov dword [esp - 0x40], 0x5762af8
xor edi, edi
mov dword [ebp - 0x10], esi
test eax, eax
mov dword [esp - 0x14], 0x5871505f
je 0x45d47a
mov edx, esi
sub ebx, esi
mov dword [esp - 0x28], 0x794aee4d
mov esi, eax
mov ecx, edi
lea edx, [edx + 2]
and ecx, 3
mov esp, esp
mov eax, 0x7a8a1e2e
sub eax, 0x2c3f3135
add eax, 0x129cb485
xchg edi, edi
sub eax, 0x28606151
xor eax, 0x432d04dc
shl ecx, 3
inc edi
xchg ecx, ecx
sar eax, cl
cbw
xor ax, word [ebx + edx - 2]
mov word [edx - 2], ax
mov dword [esp - 0x2c], esi
cmp edi, esi
jb 0x45d430
mov esi, dword [ebp - 0x10]
mov dword [esp - 0x10], esp
mov eax, dword [ebp - 8]
xor ecx, ecx
push ecx
push ecx
xchg edi, edi
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x1c]
push ecx
xchg esi, esi
push ecx
mov eax, dword [eax]
push eax
xchg ebp, ebp
push esi
mov dword [ebp - 0x1c], eax
mov eax, dword [0x4c0b80]
mov dword [esp - 0x44], 0x6cf6bb3f
xor eax, dword [0x4c0968]
push ecx
nop
mov dword [esp - 4], 0x74afee35
mov dword [esp - 0x10], 0x17a9d437
xor dword [esp - 4], 0x17c9300b
xor dword [esp - 4], 0x5972cfd9
xor dword [esp - 4], 0x349805d1
xchg esi, esi
sub dword [esp - 4], 0x9756e7
xor dword [esp - 4], 0x5be96f7e
sub dword [esp - 4], 0x561cd448
sub esp, 4
xchg esp, esp
call eax
mov ebx, eax
lea edi, [ebx + 1]
xchg ebp, ebp
push edi
call fcn.00490c90
mov ecx, dword [0x4c0b80]
add esp, 4
mov dword [esp - 0x20], 0x63b96b4b
xor ecx, dword [0x4c0968]
mov dword [ebp - 0x10], eax
nop
sub esp, 4
xchg ebx, ebx
mov dword [esp], 0x6865c46b
xor dword [esp], 0x5bd451ec
xor dword [esp], 0x650891b3
mov dword [esp - 0x3c], ebp
sub dword [esp], 0x23971826
add dword [esp], 0x56eb39e
xor dword [esp], 0x38909fac
mov edi, edi
nop
sub esp, 4
mov dword [esp], 0x565ac549
sub dword [esp], 0x579ac8c
mov dword [esp - 0x28], esi
xor dword [esp], 0x1fba87f6
xor dword [esp], 0x236c2c03
xor dword [esp], 0x553c7c0f
mov dword [esp - 0x38], 0x57ad4636
xor dword [esp], 0x390bcf47
push edi
push eax
push dword [ebp - 0x1c]
mov dword [esp - 0xc], ebx
push esi
nop
sub esp, 4
mov dword [esp - 0x10], 0x4c265ff3
mov dword [esp], 0x2760127f
xor dword [esp], 0x67aee8c1
sub dword [esp], 0x270506e0
mov ebx, ebx
xor dword [esp], 0x7e41b135
sub dword [esp], 0x678842eb
nop
mov dword [esp - 0x30], ebx
mov dword [esp - 4], 0x1dec0796
add dword [esp - 4], 0x1258ea9a
sub dword [esp - 4], 0x2ec17ff5
add dword [esp - 4], 0xd0da290
xchg esi, esi
xor dword [esp - 4], 0xe91e922
sub esp, 4
call ecx
mov dword [esp - 0x1c], 0x38a6b7dd
mov edi, dword [ebp - 0x10]
push esi
mov byte [edi + ebx], 0x70
xor byte [edi + ebx], 0x2d
mov dword [esp - 0x30], 0x73d9471
xor byte [edi + ebx], 0x48
xor byte [edi + ebx], 5
add byte [edi + ebx], 0x58
sub byte [edi + ebx], 0x68
mov ecx, ecx
call fcn.00490c60
mov ecx, dword [ebp - 0xc]
add esp, 4
mov edi, edi
mov eax, dword [ebp + 8]
mov ecx, dword [ecx]
mov eax, dword [eax]
xchg edx, edx
xor ecx, 0x1d6a61f8
and ecx, 0xfffffff1
xor eax, 0x1d6a61f8
push edi
mov dword [esp - 0x14], edi
or ecx, 1
push ecx
push eax
mov esp, esp
lea ecx, [ebp - 0x44]
call fcn.00488750
mov ebx, eax
mov dword [ebp - 0x1c], eax
mov dword [esp - 0xc], 0x5252f737
lea edx, [ebx + 1]
mov cl, byte [ebx]
inc ebx
mov dword [esp - 0x40], 0x399bf1d0
test cl, cl
jne 0x45d66e
nop
mov dword [esp - 0x30], edx
mov dword [esp - 4], 0x7881de27
sub dword [esp - 4], 0x2a363275
xor dword [esp - 4], 0x31430291
sub dword [esp - 4], 0x2cf4079f
mov dword [esp - 0x40], 0x47a62dcf
xor dword [esp - 4], 0x5214a184
sub esp, 4
nop
mov ecx, ecx
mov dword [esp - 4], 0x1e8c89da
add dword [esp - 4], 0x43be6678
xor dword [esp - 4], 0x190297
sub dword [esp - 4], 0x5e44bb75
mov dword [esp - 0x38], 0x29809c27
xor dword [esp - 4], 0x52e46468
sub dword [esp - 4], 0x56eb5338
sub esp, 4
sub ebx, edx
mov dword [esp - 0x30], 0x73ae8b0d
push ebx
push eax
mov eax, dword [0x4c0b78]
xchg ebx, ebx
xor eax, dword [0x4c0968]
nop
sub esp, 4
mov dword [esp], 0x11dce133
mov dword [esp - 0x2c], 0x7dbde803
add dword [esp], 0x5e7603da
sub dword [esp], 0x4c1046f
sub dword [esp], 0x20a11219
sub dword [esp], 0x2c1b0cfa
mov ebp, ebp
xor dword [esp], 0x3a642f07
sub dword [esp], 0x24b1ee8c
nop
mov dword [esp - 4], 0x22aa2664
mov dword [esp - 0x2c], esp
add dword [esp - 4], 0x6a10af8
add dword [esp - 4], 0x38cf0e9c
xor dword [esp - 4], 0x513af7a8
xor dword [esp - 4], 0x76fb9ccd
mov dword [esp - 0x44], 0x70b1773f
sub dword [esp - 4], 0x1785f47f
sub dword [esp - 4], 0x2e546235
sub esp, 4
mov dword [esp - 0x18], ebx
call eax
mov edi, eax
mov ecx, 0x774ca9f4
sub ecx, 0xcada2b7
mov dword [esp - 0x38], 0x24260341
xor ecx, 0x4cb1d957
xor ecx, 0x2e995d33
xor ecx, 0x8b7835b
lea esi, [edi + 1]
mov dword [esp - 0x20], 0xafea7bb
mov eax, esi
mul ecx
pushf
mov ecx, 0x4e7746a0
mov dword [esp - 0x44], 0x4ada124b
sub ecx, 0x4782008a
add ecx, 0x78c18238
xor ecx, 0x6e3e7d84
add ecx, 0x1bb29b2d
mov dword [esp - 0x44], 0x6220e209
add ecx, 0xd2c4af08
popf
cmovb eax, ecx
push eax
mov dword [esp - 0x40], 0x21af07f9
call fcn.00490c90
mov ecx, dword [0x4c0b78]
add esp, 4
mov dword [esp - 0x18], 0x3ffd346d
xor ecx, dword [0x4c0968]
mov dword [ebp - 8], eax
push esi
push eax
mov dword [esp - 0x10], 0xba878ea
push ebx
push dword [ebp - 0x1c]
nop
mov dword [esp - 0x30], 0x4a8e3c9e
mov dword [esp - 4], 0x155cfc37
add dword [esp - 4], 0x4695a0cc
sub dword [esp - 4], 0x5621ec7f
mov dword [esp - 0x44], 0x4829374f
add dword [esp - 4], 0x26c6c934
add dword [esp - 4], 0xb9901a8
sub dword [esp - 4], 0x38307b60
sub esp, 4
xchg esp, esp
nop
mov dword [esp - 4], 0x7327091
xor dword [esp - 4], 0x223832b2
xchg edx, edx
add dword [esp - 4], 0x396e6ac2
xor dword [esp - 4], 0x61e3316b
add dword [esp - 4], 0x3179b908
mov dword [esp - 0x3c], 0x71187e54
sub dword [esp - 4], 0x711458ad
sub esp, 4
call ecx
mov dword [esp - 0x10], 0x7d273b60
mov ebx, dword [ebp - 8]
xor eax, eax
mov ecx, ebx
mov esp, esp
mov word [ebx + edi*2], ax
mov dword [ebp - 0x2c], eax
lea edx, [ecx + 2]
xchg ebp, ebp
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45d8e2
mov dword [esp - 0xc], 0x22a80ff8
sub ecx, edx
lea edx, [ebp - 0x2c]
sar ecx, 1
mov dword [esp - 0x3c], 0x5f383129
mov dword [ebp - 0x28], ecx
cmp ecx, 2
jbe 0x45d992
mov dword [esp - 0x38], 0x31e6dd03
mov eax, ecx
mov ecx, 0x1a6cc251
xor ecx, 0x64b2ada
xchg ebp, ebp
xor ecx, 0x3d0dd3d0
add ecx, 0x4aafcc03
sub ecx, 0x23337142
mov dword [esp - 0xc], ecx
sub ecx, 0x48a6961a
mul ecx
pushf
mov ecx, 0x74af254
mov ebx, ebx
sub ecx, 0xa74e11
add ecx, 0x5186ab60
sub ecx, 0x46f43d39
add ecx, 0x531a7d33
mov dword [esp - 0xc], edx
sub ecx, 0x27672657
add ecx, 0xc31696b9
popf
cmovb eax, ecx
xchg esi, esi
push eax
call fcn.00490c90
mov ecx, dword [ebp - 0x28]
mov ebx, ebx
mov edx, eax
add esp, 4
mov dword [ebp - 0x2c], edx
mov esi, esi
xor esi, esi
test ecx, ecx
je 0x45d9e8
mov edi, edi
mov edi, ebx
sub edi, edx
mov ecx, esi
lea edx, [edx + 2]
xchg ebx, ebx
and ecx, 3
mov eax, 0x48f17767
add eax, 0x2d1a12d1
xchg esi, esi
sub eax, 0x3466f318
sub eax, 0x8bb7e58
add eax, 0x2d1f1c6d
xor eax, 0x1da271c4
mov dword [esp - 0x28], esp
shl ecx, 3
inc esi
sar eax, cl
cbw
xchg ebx, ebx
xor ax, word [edx + edi - 2]
mov word [edx - 2], ax
cmp esi, dword [ebp - 0x28]
jb 0x45d99e
mov dword [esp - 0x3c], esp
mov ebx, dword [ebp - 0xc]
lea eax, [ebp - 0x2c]
nop
mov dword [esp - 0xc], 0x214551a0
mov dword [esp - 4], 0x18e7a5de
add dword [esp - 4], 0x662d4eb6
sub dword [esp - 4], 0x9aadafa
mov dword [esp - 0xc], ebp
xor dword [esp - 4], 0x38243ad5
add dword [esp - 4], 0x720f450
sub dword [esp - 4], 0x9e9bf3c
mov dword [esp - 0x3c], 0x67daa078
sub dword [esp - 4], 0x4a855863
sub esp, 4
push eax
lea esi, [ebx + 8]
mov dword [esp - 0x34], 0x4a80beca
push esi
call fcn.00485980
add esp, 0xc
xchg esi, esi
test eax, eax
je 0x45daf3
mov ecx, dword [ebx + 0x28]
test ecx, ecx
mov dword [esp - 0x38], 0x56e0bb8a
je 0x45daf3
dec dword [ecx + 4]
cmp dword [ecx + 4], 0
mov dword [esp - 0x44], ecx
jg 0x45dac3
mov eax, dword [ecx]
nop
mov dword [esp - 0x28], 0x45f2156f
sub esp, 4
mov dword [esp], 0x44bce407
sub dword [esp], 0x2e2475f5
mov dword [esp - 0x34], ebx
add dword [esp], 0x4b89b86d
sub dword [esp], 0x1d23195d
sub dword [esp], 0x25bdd647
sub dword [esp], 0x1f4136da
mov dword [esp - 0x30], 0x3c315a0c
call dword [eax]
mov dword [ebx + 0x28], 0x6eac0a02
xor dword [ebx + 0x28], 0x50a2a3f
mov dword [esp - 0x3c], edi
sub dword [ebx + 0x28], 0xe725a5b
sub dword [ebx + 0x28], 0x371097cd
sub dword [ebx + 0x28], 0x1cfcf3b4
sub dword [ebx + 0x28], 0x9263a61
mov ebp, ebp
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.00484bc0
mov ecx, ecx
cmp dword [ebp - 0x28], 2
jbe 0x45db19
push dword [ebp - 0x2c]
mov dword [esp - 0x18], 0x3aabc94
call fcn.00490c60
add esp, 4
push dword [ebp - 8]
xchg esp, esp
call fcn.00490c60
mov edx, dword [ebx]
add esp, 4
mov dword [esp - 0x18], 0x510b4c41
mov ecx, dword [ebx + 0x1c]
xor edx, 0x1d6a61f8
mov edi, dword [ebp + 8]
mov esi, esi
xor ecx, 0x5d3156cb
and edx, 0xfffffff2
push ecx
or edx, 2
mov dword [esp - 0x28], 0x610f02df
lea ecx, [ebp - 0x44]
mov eax, dword [edi]
xor eax, 0x1d6a61f8
push edx
mov ebp, ebp
push eax
call fcn.00488710
mov ecx, dword [ebx + 0x18]
mov dword [esp - 0x40], 0x6c060020
mov esi, eax
xor ecx, 0x5d3156cb
cmp ecx, esi
je 0x45dc12
mov edx, edx
mov ecx, dword [ebx + 0x28]
test ecx, ecx
je 0x45dc12
dec dword [ecx + 4]
mov edi, edi
cmp dword [ecx + 4], 0
jg 0x45dbd9
mov eax, dword [ecx]
nop
mov dword [esp - 0x28], 0x414cd712
sub esp, 4
mov dword [esp], 0x44a4a443
xor dword [esp], 0x396e25e5
mov dword [esp - 0x20], ebx
sub dword [esp], 0x5d67dd32
add dword [esp], 0x1f755648
xor dword [esp], 0x61570900
xchg edx, edx
sub dword [esp], 0x5e80f3bb
call dword [eax]
mov dword [ebx + 0x28], 0x14757dac
add dword [ebx + 0x28], 0x5ef3d919
mov dword [esp - 0x30], edx
sub dword [ebx + 0x28], 0x603c7247
add dword [ebx + 0x28], 0x3850cf78
sub dword [ebx + 0x28], 0x3efe4c8
sub dword [ebx + 0x28], 0xe4a3528
mov dword [esp - 0x44], edx
sub dword [ebx + 0x28], 0x39439a06
mov edx, dword [ebx]
xor esi, 0x5d3156cb
mov dword [esp - 0x20], 0x661e14c6
mov ecx, dword [ebx + 0x24]
xor edx, 0x1d6a61f8
xor ecx, 0x1d6a61f8
mov dword [ebx + 0x18], esi
mov ecx, ecx
mov eax, dword [edi]
and edx, 0xfffffff4
push ecx
mov dword [esp - 0x14], esi
or edx, 4
lea ecx, [ebp - 0x44]
xor eax, 0x1d6a61f8
push edx
xchg edx, edx
push eax
call fcn.004886d0
mov ecx, dword [ebx + 0x20]
mov edi, edi
mov esi, eax
xor ecx, 0x1d6a61f8
cmp ecx, esi
je 0x45dceb
mov ebx, ebx
mov ecx, dword [ebx + 0x28]
test ecx, ecx
je 0x45dceb
mov edx, edx
dec dword [ecx + 4]
cmp dword [ecx + 4], 0
jg 0x45dcb0
mov eax, dword [ecx]
mov dword [esp - 0x44], edi
nop
sub esp, 4
mov dword [esp], 0x5656c71d
sub dword [esp], 0x27a30d20
xchg ebx, ebx
xor dword [esp], 0x21811dda
add dword [esp], 0x3b2af495
sub dword [esp], 0x4a5d98bb
xchg ebp, ebp
call dword [eax]
mov dword [ebx + 0x28], 0x4856b858
xor dword [ebx + 0x28], 0x35848fa3
mov dword [esp - 0x24], 0x7265c90d
sub dword [ebx + 0x28], 0x708ae13f
xor dword [ebx + 0x28], 0x425fcce1
xor dword [ebx + 0x28], 0x5fd4e13a
add dword [ebx + 0x28], 0x6cb569f0
mov ebp, ebp
xor dword [ebx + 0x28], 0x7d81e557
push dword [ebp - 0x10]
xor esi, 0x1d6a61f8
mov ecx, ecx
mov dword [ebx + 0x20], esi
call fcn.00490c60
mov edi, dword [ebp - 0x14]
mov dword [esp - 0x38], 0x34003cb
add esp, 4
mov esi, dword [ebp - 0x20]
add edi, 4
mov dword [ebp - 0x14], edi
mov dword [esp - 0x24], esp
cmp edi, esi
jne 0x45d305
mov ebx, dword [ebp - 0x24]
mov ecx, dword [ebp - 4]
xchg edx, edx
test ebx, ebx
je 0x45dd41
push ebx
mov dword [esp - 0x20], ecx
call fcn.00490c60
mov ecx, dword [ebp - 4]
add esp, 4
mov dword [esp - 0x18], ebp
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x18], eax
mov dword [esp - 0x14], esp
cmp eax, ecx
jne 0x45d1a9
pop edi
pop ebx
mov dword [esp - 0x14], edx
lea ecx, [ebp - 0x44]
call fcn.00487a70
pop esi
mov esp, ebp
mov esp, esp
pop ebp
ret 4