Function at 0x64ad00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xec]
cmp eax, dword [ecx + 8]
jbe 0x64b9ca
sub esp, 0x16c
mov eax, dword [esp + 0x174]
test eax, eax
je 0x64b9b1
mov ecx, dword [esp + 0x178]
test ecx, ecx
je 0x64b999
mov edx, dword [esp + 0x170]
movzx ebx, byte [edx + 0x56]
mov byte [ecx + 0xca], bl
movzx ebx, byte [edx + 0x56]
mov byte [ecx + 0x34], bl
movzx ebx, byte [edx + 0x56]
mov byte [eax + 0x190], bl
movzx ebx, byte [edx + 0x56]
mov byte [eax + 0x18], bl
nop
mov dword [esp], eax
call fcn.0065d8d0
nop
mov eax, dword [str.https]
mov ecx, dword [esp + 0x174]
mov edx, dword [ecx + 0xcc]
mov ebx, dword [ecx + 0xc8]
cmp dword [0x7079dc], edx
je 0x64ad99
xor eax, eax
jmp 0x64adb5
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00403310
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
cmp byte [edx + 0x19], al
jne 0x64b970
call fcn.00495780
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
lea edi, [esp + 0xf4]
lea esi, [esp + 0x144]
call fcn.0045723e
nop
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
test ecx, 0x80000000
je 0x64ae1d
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or ecx, eax
shl edx, 1
shl ecx, 1
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
jmp 0x64ae24
mov edx, dword [esp + 0xfc]
mov eax, dword [0x900b48]
sub edx, eax
add edx, 0x886e0900
mov eax, dword [esp + 0x170]
lea ecx, [eax + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00401870
mov eax, dword [esp + 0x178]
movzx ecx, byte [eax + 0xc8]
mov byte [esp + 0x34], cl
mov dword [esp], eax
call fcn.0065e4f0
movzx eax, byte [esp + 0x34]
mov ecx, dword [esp + 0x178]
mov byte [ecx + 0xc8], al
mov edx, dword [esp + 0x174]
mov dword [esp], edx
call fcn.0065d8d0
mov eax, dword [esp + 0x170]
movzx ecx, byte [eax + 0x55]
mov edx, dword [esp + 0x174]
mov byte [edx + 0x11d], cl
mov ecx, dword [edx + 0x60]
mov ebx, dword [edx + 0x58]
mov ebp, dword [edx + 0x5c]
test ebp, ebp
jne 0x64af75
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 8]
test ebp, ebp
jne 0x64aece
mov edi, ebx
movzx ebx, byte [eax + 0x10]
test bl, bl
jne 0x64aed0
mov esi, dword [0x706e60]
mov ebp, dword [0x706e64]
jmp 0x64aed0
mov edi, ebx
test ebp, ebp
je 0x64af75
cmp ebp, ecx
ja 0x64aee0
mov ebx, ebp
jmp 0x64af1c
mov dword [esp + 0x60], esi
mov dword [esp + 0x38], ebp
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
lea eax, [0x7347e0]
mov dword [esp + 0x10], eax
call fcn.00442820
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x60]
mov edi, ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x78], edi
mov dword [esp + 0x4c], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
call fcn.00457450
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x5c], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 0x60], eax
mov eax, dword [0x900e70]
test eax, eax
jne 0x64af60
mov ebx, dword [esp + 0x78]
mov dword [ecx + 0x58], ebx
jmp 0x64af6c
lea edi, [ecx + 0x58]
mov eax, dword [esp + 0x78]
call fcn.00456ac0
mov eax, dword [esp + 0x170]
mov edx, ecx
mov ecx, dword [eax + 0x64]
test ecx, ecx
jne 0x64b92c
lea edi, [esp + 0x108]
xor eax, eax
call fcn.00456d5b
mov ecx, dword [edx + 0x198]
test ecx, ecx
seta cl
mov ebx, dword [edx + 0x19c]
test ebx, ebx
sete bl
xchg ebp, ebx
setg bl
xchg ebp, ebx
and ebx, ecx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64b017
call fcn.00495780
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x198]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 0x19c]
lea edi, [esp]
lea esi, [esp + 0x144]
call fcn.0045723e
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
call fcn.00494c20
lea edi, [esp + 0x108]
lea esi, [esp + 0x1c]
call fcn.0045723e
mov edx, dword [esp + 0x174]
mov eax, dword [edx + 0x198]
mov ecx, dword [edx + 0x19c]
nop
nop
movzx ebx, byte [edx + 2]
mov ebp, dword [esp + 0x170]
mov dword [esp], ebp
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], bl
call fcn.0064ba30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test ecx, ecx
jne 0x64b90f
mov dword [esp + 0x58], eax
mov ecx, dword [eax]
mov dword [esp + 0x3c], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x178]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0065ccc0
lea edi, [esp + 0x130]
lea esi, [esp + 0x108]
call fcn.0045723e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x48]
test ecx, ecx
seta cl
mov edx, dword [eax + 0x4c]
test edx, edx
sete dl
setg bl
and edx, ecx
or ebx, edx
test bl, bl
je 0x64b1cb
call fcn.00495780
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x48]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 0x4c]
lea edi, [esp]
lea esi, [esp + 0x144]
call fcn.0045723e
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
call fcn.00494c20
lea edi, [esp + 0x90]
lea esi, [esp + 0x1c]
call fcn.0045723e
lea edi, [esp + 0xe0]
lea esi, [esp + 0x130]
call fcn.0045723e
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
test ecx, 0x80000000
je 0x64b15f
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or ecx, eax
mov eax, edx
shl edx, 1
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
add edx, 0xd7b17f80
adc ebx, 0xd
jmp 0x64b16d
mov edx, dword [esp + 0xe8]
mov ebx, dword [esp + 0xec]
test ebx, ebx
sete cl
test edx, edx
sete dl
and edx, ecx
test dl, dl
je 0x64b184
test eax, 0x3fffffff
je 0x64b1b1
lea edi, [esp]
lea esi, [esp + 0x90]
call fcn.0045723e
lea edi, [esp + 0x14]
lea esi, [esp + 0x130]
call fcn.0045723e
call fcn.00493a00
movzx eax, byte [esp + 0x28]
test al, al
je 0x64b1c4
lea edi, [esp + 0x130]
lea esi, [esp + 0x90]
call fcn.0045723e
mov eax, dword [esp + 0x170]
lea edi, [esp + 0xcc]
lea esi, [esp + 0x130]
call fcn.0045723e
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xd0]
test edx, 0x80000000
je 0x64b218
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
mov edx, ebx
shl ebx, 1
mov ebp, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x64b228
mov ebx, dword [esp + 0xd4]
mov ebp, dword [esp + 0xd8]
mov edx, ecx
test ebx, ebx
sete cl
test ebp, ebp
sete bl
and ebx, ecx
test bl, bl
je 0x64b240
test edx, 0x3fffffff
je 0x64b283
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x64]
mov dword [esp], edx
lea edi, [esp + 4]
lea esi, [esp + 0x130]
call fcn.0045723e
mov ecx, dword [esp + 0x44]
call ecx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x64b8cb
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x28]
test ecx, ecx
setg dl
mov ebx, dword [eax + 0x24]
test ebx, ebx
seta bl
test ecx, ecx
sete cl
and ecx, ebx
or ecx, edx
test cl, cl
jne 0x64b2a4
xor ecx, ecx
jmp 0x64b2f8
mov eax, dword [esp + 0x58]
lea esi, [eax + 8]
lea edi, [esp + 0x158]
call fcn.0045723e
lea edi, [esp]
lea esi, [esp + 0x158]
call fcn.0045723e
call fcn.004950d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x170]
cmp dword [ecx + 0x24], eax
setb al
mov edx, dword [esp + 0x18]
mov ebx, dword [ecx + 0x28]
cmp edx, ebx
sete dl
setg bl
and eax, edx
or eax, ebx
mov ecx, eax
mov eax, dword [esp + 0x170]
test cl, cl
je 0x64b31d
nop
nop
mov ecx, dword [esp + 0x174]
movzx edx, byte [ecx + 2]
test dl, dl
je 0x64b311
xor edx, edx
jmp 0x64b31f
nop
mov byte [ecx + 2], 1
mov edx, 1
jmp 0x64b31f
xor edx, edx
mov byte [esp + 0x33], dl
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x64]
mov dword [esp + 8], ebx
call fcn.0064d160
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x174]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0065efc0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x33]
test dl, dl
je 0x64b38b
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x174]
mov dword [esp], eax
call fcn.0064fba0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x6c]
movzx edx, byte [esp + 0x33]
test eax, eax
jne 0x64b3a3
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.004ea110
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x170]
mov dword [esp], edx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
call fcn.0064d4c0
lea eax, [0x7356a0]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 8], ecx
call fcn.004092b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x64b3f6
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x6c]
jmp 0x64b41d
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 4]
test al, al
je 0x64b415
mov ecx, dword [0x706604]
lea eax, [0x7ca578]
jmp 0x64b41d
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x40], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x7cac80]
mov dword [esp + 8], edx
lea edx, [0x7c995c]
mov dword [esp + 0xc], edx
call fcn.0045f290
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x64b492
test al, al
jne 0x64b492
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0064c890
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0x40]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov byte [esp + 0x32], al
lea edi, [esp + 0x11c]
lea esi, [esp + 0x108]
call fcn.0045723e
mov ecx, dword [esp + 0x170]
mov edx, dword [ecx + 0x44]
test edx, edx
setg bl
mov ebp, dword [ecx + 0x40]
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
test edx, edx
sete dl
and edx, ebp
or edx, ebx
test dl, dl
je 0x64b5df
call fcn.00495780
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x40]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 0x44]
lea edi, [esp]
lea esi, [esp + 0x144]
call fcn.0045723e
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
call fcn.00494c20
lea edi, [esp + 0x7c]
lea esi, [esp + 0x1c]
call fcn.0045723e
lea edi, [esp + 0xb8]
lea esi, [esp + 0x11c]
call fcn.0045723e
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
test ecx, 0x80000000
je 0x64b574
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or ecx, eax
mov eax, edx
shl edx, 1
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
add edx, 0xd7b17f80
adc ebx, 0xd
jmp 0x64b582
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xc4]
test edx, edx
sete cl
test ebx, ebx
sete dl
and edx, ecx
test dl, dl
je 0x64b599
test eax, 0x3fffffff
je 0x64b5c3
lea edi, [esp]
lea esi, [esp + 0x7c]
call fcn.0045723e
lea edi, [esp + 0x14]
lea esi, [esp + 0x11c]
call fcn.0045723e
call fcn.00493a00
movzx eax, byte [esp + 0x28]
test al, al
je 0x64b5d3
lea edi, [esp + 0x11c]
lea esi, [esp + 0x7c]
call fcn.0045723e
movzx eax, byte [esp + 0x32]
mov ecx, dword [esp + 0x170]
lea edi, [esp + 0xa4]
lea esi, [esp + 0x11c]
call fcn.0045723e
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
test edx, 0x80000000
je 0x64b62c
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
mov ecx, ebx
shl ebx, 1
mov ebp, edx
shl edx, 1
shr ebx, 0x1f
or ebx, edx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x64b63a
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
test ebx, ebx
sete dl
test ebp, ebp
sete bl
and ebx, edx
test bl, bl
je 0x64b652
test ecx, 0x3fffffff
je 0x64b693
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x64]
mov dword [esp], edx
lea edi, [esp + 4]
lea esi, [esp + 0x11c]
call fcn.0045723e
mov ecx, dword [esp + 0x44]
call ecx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x64b887
movzx eax, byte [esp + 0x32]
movzx ecx, byte [esp + 0x34]
test cl, cl
je 0x64b6a5
mov ecx, dword [esp + 0x174]
jmp 0x64b6d8
mov ecx, dword [esp + 0x174]
mov edx, dword [ecx + 0x20]
mov ebx, dword [ecx + 0x1c]
test edx, edx
jne 0x64b6cb
mov word [esp + 0x35], 0x4547
mov byte [esp + 0x37], 0x54
mov edx, 3
lea ebx, [esp + 0x35]
cmp edx, 4
jne 0x64b6e8
cmp dword [ebx], 0x44414548
jne 0x64b6e8
mov edx, dword [esp + 0x178]
mov byte [edx + 0xc8], 1
jmp 0x64b6ef
mov edx, dword [esp + 0x178]
mov ebx, dword [esp + 0x170]
movzx ebp, byte [ebx + 0x54]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64b704
nop
mov byte [edx], 1
mov dword [esp], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
call fcn.0064d530
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x170]
mov edx, dword [ecx + 0x50]
mov ebx, dword [esp + 0x178]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0065e5e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x70], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0x170]
mov dword [esp], esi
mov edi, dword [esp + 0x54]
mov dword [esp + 4], edi
call fcn.0064d970
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x64b817
movzx eax, byte [esp + 0x33]
test al, al
jne 0x64b7c2
nop
mov eax, dword [esp + 0x174]
movzx eax, byte [eax + 2]
test al, al
jne 0x64b7c2
nop
mov eax, dword [esp + 0x178]
movzx eax, byte [eax + 2]
test al, al
jne 0x64b7c2
movzx eax, byte [esp + 0x32]
test al, al
je 0x64b7db
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0064c890
jmp 0x64b7f2
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0064cd40
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov dword [esp + 0x184], 0
add esp, 0x16c
ret
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0064c890
mov eax, dword [0x706dec]
mov ecx, dword [esp + 0x74]
cmp dword [0x706de8], ecx
je 0x64b847
mov eax, 1
jmp 0x64b863
mov dword [esp], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00404110
movzx eax, byte [esp + 0xc]
xor eax, 1
mov byte [esp + 0x17c], al
mov eax, dword [esp + 0x70]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0064c890
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0x70]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0064c890
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0x70]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], edx
mov dword [esp + 0x184], ebx
add esp, 0x16c
ret
mov eax, dword [ecx]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov edx, ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 8]
test ebx, ebx
setne bl
xor ebx, 1
mov byte [esp + 0x17c], bl
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], ecx
add esp, 0x16c
ret
mov eax, dword [0x706dd8]
mov ecx, dword [0x706ddc]
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], ecx
add esp, 0x16c
ret
lea eax, [0x7345e0]
mov dword [esp], eax
lea eax, [0x7c9d8c]
mov dword [esp + 4], eax
call fcn.00430590
lea eax, [0x7345e0]
mov dword [esp], eax
lea eax, [0x7c9d84]
mov dword [esp + 4], eax
call fcn.00430590
nop
call fcn.00455690
jmp fcn.0064ad00