Function at 0x44d2f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x44e002
sub esp, 0xa8
mov eax, dword [esp + 0xac]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xa4], ecx
lea edx, [0x7da640]
mov dword [esp], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], ebx
lea ebp, [esp + 0xa0]
mov dword [esp + 8], ebp
call fcn.0040bd10
movzx eax, byte [esp + 0x10]
test al, al
jne 0x44df58
mov eax, dword [esp + 0xac]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x9c], ecx
lea edx, [0x7da640]
mov dword [esp], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 4], edx
lea ebx, [esp + 0x98]
mov dword [esp + 8], ebx
call fcn.0040c0b0
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
cmp eax, ecx
je 0x44df49
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [ecx + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x44df3a
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], eax
call fcn.0044c030
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.0044c030
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x44d420
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44d411
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.0044c0c0
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp], ecx
call fcn.0044c0c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x44de93
test eax, eax
jne 0x44de91
movzx eax, byte [esp + 0x16]
lea ecx, [eax - 1]
cmp cl, 0xf
jbe 0x44de82
cmp al, 0x15
ja 0x44db6b
cmp al, 0x12
jbe 0x44dab2
cmp al, 0x13
jne 0x44d785
mov eax, dword [esp + 0xac]
movzx ecx, word [eax + 0x22]
mov edx, dword [esp + 0xb0]
movzx ebx, word [edx + 0x22]
cmp cx, bx
jne 0x44d776
movzx ecx, word [eax + 0x20]
movzx ebx, word [edx + 0x20]
cmp bx, cx
jne 0x44d776
movzx ebp, byte [eax + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x44d76c
mov ebp, 0x34
add ebp, eax
test byte [ebp], al
movzx ecx, cx
test ecx, ecx
jl 0x44dfa6
cmp ecx, 0x100000
ja 0x44dfa6
movzx esi, byte [edx + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x44d762
mov esi, 0x34
add esi, edx
test byte [esi], al
movzx ebx, bx
test ebx, ebx
jl 0x44df9f
cmp ebx, 0x100000
ja 0x44df9f
mov dword [esp + 0x90], ebp
mov dword [esp + 0x24], ecx
mov dword [esp + 0x8c], esi
mov dword [esp + 0x1c], ebx
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x48]
jmp 0x44d5a6
mov eax, dword [esp + 0x38]
inc eax
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x90]
mov edx, dword [esp + 0xb0]
mov ebp, esi
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x38]
cmp edx, ecx
jge 0x44d5eb
jae 0x44df98
mov eax, dword [ebp + edx*4]
cmp edx, ebx
jae 0x44df98
mov ecx, dword [esi + edx*4]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], edi
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44d562
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
movzx ecx, byte [eax + 0xc]
test cl, 1
je 0x44d758
mov ecx, 0x34
add ecx, eax
test byte [ecx], al
movzx edx, word [eax + 0x22]
and edx, 0x7fff
movzx eax, word [eax + 0x20]
add edx, eax
movzx edx, dx
test edx, edx
jl 0x44df91
movzx eax, ax
cmp eax, edx
ja 0x44df91
cmp edx, 0x100000
ja 0x44df91
sub edx, eax
lea ebx, [eax - 0x100000]
neg ebx
shl eax, 2
neg ebx
sar ebx, 0x1f
and ebx, eax
lea eax, [ecx + ebx]
mov ecx, dword [esp + 0xb0]
movzx ebx, byte [ecx + 0xc]
test bl, 1
je 0x44d74e
mov ebx, 0x34
add ebx, ecx
test byte [ebx], al
movzx ebp, word [ecx + 0x22]
and ebp, 0x7fff
movzx ecx, word [ecx + 0x20]
add ebp, ecx
movzx ebp, bp
test ebp, ebp
jl 0x44df8a
movzx ecx, cx
cmp ecx, ebp
ja 0x44df8a
cmp ebp, 0x100000
ja 0x44df8a
mov dword [esp + 0x20], edx
mov dword [esp + 0x60], eax
sub ebp, ecx
mov dword [esp + 0x18], ebp
lea esi, [ecx - 0x100000]
xchg esi, ebx
neg ebx
xchg esi, ebx
xchg esi, ebx
neg ebx
xchg esi, ebx
shl ecx, 2
sar esi, 0x1f
and esi, ecx
lea ecx, [ebx + esi]
mov dword [esp + 0x50], ecx
xor ebx, ebx
jmp 0x44d6fb
mov esi, dword [esp + 0x2c]
lea ebx, [esi + 1]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x60]
mov eax, ebp
mov ecx, edx
mov edx, esi
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0xb4]
cmp ebx, edx
jge 0x44d73f
jae 0x44df83
mov esi, dword [eax + ebx*4]
cmp ebx, ebp
jae 0x44df83
mov dword [esp + 0x2c], ebx
mov eax, dword [ecx + ebx*4]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 8], edi
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44d6cc
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
mov ebx, 0x24
jmp 0x44d663
mov ecx, 0x24
jmp 0x44d5fd
mov esi, 0x24
jmp 0x44d51a
mov ebp, 0x24
jmp 0x44d4ea
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
cmp al, 0x14
jne 0x44da3c
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.0044cc10
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.0044cc10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x44d7e0
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44d7d1
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x44da2d
mov dword [esp + 0x44], ecx
xor ebx, ebx
jmp 0x44d83f
mov ebp, dword [esp + 0x34]
lea ebx, [ebp + 1]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xac]
mov eax, edi
mov ecx, ebp
mov edx, esi
cmp ebx, ecx
jge 0x44da1e
mov ebp, dword [eax + 0x24]
mov esi, dword [eax + 0x28]
cmp ebx, esi
jae 0x44df7c
lea esi, [ebp + ebx*8]
mov edi, dword [edx + 0x24]
mov edx, dword [edx + 0x28]
cmp ebx, edx
jae 0x44df75
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebp
mov dword [esp + 0x34], ebx
mov dword [esp + 0x64], esi
lea eax, [ebp + ebx*8]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0044c2b0
mov eax, dword [esp + 8]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x88]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov dword [esp + 4], ebx
lea ebx, [edx + ecx*8]
mov dword [esp + 0x54], ebx
mov dword [esp], ebx
call fcn.0044c2b0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.0044cc10
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.0044cc10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jne 0x44da0f
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44da0f
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.0044cd20
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.0044cd20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jne 0x44da00
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44da00
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x84]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp], ecx
call fcn.0044c590
mov eax, dword [esp + 8]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x88]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x54]
mov dword [esp], edx
call fcn.0044c590
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44d820
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44da80
xor eax, eax
mov byte [esp + 0xb8], al
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xb0]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
jmp 0x44da72
cmp al, 0x11
je 0x44db0c
cmp al, 0x12
jne 0x44dfad
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x24]
cmp ecx, ebx
je 0x44dae8
xor eax, eax
mov byte [esp + 0xb8], al
add esp, 0xa8
ret
mov eax, dword [eax + 0x20]
mov ecx, dword [edx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
jmp 0x44dada
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x44db67
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xb0]
mov ecx, dword [ecx + 0x28]
cmp eax, ecx
sete al
mov byte [esp + 0xb8], al
add esp, 0xa8
ret
xor eax, eax
jmp 0x44db59
cmp al, 0x17
ja 0x44dbf5
cmp al, 0x16
jne 0x44dbb7
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xb0]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb8], al
add esp, 0xa8
ret
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xb0]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb8], al
add esp, 0xa8
ret
cmp al, 0x18
jne 0x44dc09
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
cmp al, 0x19
jne 0x44de74
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x44de65
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.0044cc10
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.0044cc10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x44dc79
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44dc6a
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xb0]
xor ebx, ebx
jmp 0x44dccd
mov ebp, dword [esp + 0x30]
lea ebx, [ebp + 1]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xac]
mov eax, edi
mov ecx, ebp
mov edx, esi
cmp ebx, ecx
jge 0x44de56
mov ebp, dword [eax + 0x28]
mov esi, dword [eax + 0x24]
cmp ebx, ebp
jae 0x44df6e
lea ebp, [ebx + ebx*2]
mov edi, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
cmp ebx, edi
jae 0x44df67
mov dword [esp + 0x74], edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x30], ebx
mov dword [esp + 0x70], esi
mov eax, dword [esi + ebp*4]
mov dword [esp], eax
call fcn.0044cc10
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.0044cc10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x44de47
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44de47
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp + 4], ebp
mov dword [esp], edx
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], edx
call fcn.0044d2f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x44de38
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.0044cc90
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.0044cc90
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jne 0x44de29
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
je 0x44de29
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov ecx, dword [ecx + eax*4 + 8]
mov edx, dword [esp + 0x74]
mov eax, dword [edx + eax*4 + 8]
cmp ecx, eax
je 0x44dcae
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
cmp al, 0x1a
je 0x44dbfa
jmp 0x44dfad
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
test ecx, ecx
je 0x44de99
test eax, eax
jne 0x44dea8
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov dword [esp + 0x58], eax
mov eax, dword [ecx]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.0044c550
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.0044cc10
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x58]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.0044c550
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.0044cc10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jne 0x44df2b
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00402600
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44d47a
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 0
add esp, 0xa8
ret
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
mov byte [esp + 0xb8], 1
add esp, 0xa8
ret
call fcn.00428ae0
ud2
call fcn.00428ae0
ud2
call fcn.00428ae0
ud2
call fcn.00428ae0
ud2
call fcn.00428ae0
ud2
call fcn.00428be0
ud2
call fcn.00428be0
ud2
call fcn.00428ae0
ud2
call fcn.00428be0
ud2
call fcn.00428be0
ud2
call fcn.0042a7b0
lea eax, [0x85c2e1]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0042b030
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ad50
call fcn.0042a9c0
call fcn.0042a820
lea eax, [0x85b93f]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00429ef0
ud2
call fcn.00451680
jmp fcn.0044d2f0