Function at 0x44f560
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x528
mov eax, dword [0x47e378]
xor eax, esp
mov dword [esp + 0x524], eax
push esi
mov esi, ecx
mov eax, dword [esi + 0x114]
cmp dword [eax + 0x7e8], 0
push edi
mov edi, dword [esp + 0x534]
jne 0x44f59b
cmp dword [eax + 0x810], 0
je 0x450354
mov eax, dword [esi + 0xc]
push ebx
push ebp
push eax
push 0x104
lea ecx, [esp + 0x230]
push ecx
push 0xba7
push 0
mov dword [esp + 0x24], 0
call sub.hccutils.DLL_LoadSTRING
push 0x104
lea edx, [esp + 0x38]
push 0
push edx
call fcn.004541e0
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x48]
push ecx
push 0x1b94
push 0
call sub.hccutils.DLL_LoadSTRING
add esp, 0x34
lea edx, [esp + 0x20]
push edx
push edi
mov ecx, esi
call fcn.0044f470
mov eax, dword [esi + 0x114]
cmp dword [eax + 0x7e8], 0
mov ebp, dword [sym.imp.KERNEL32.dll_WriteFile]
je 0x44fc92
xor eax, eax
jmp 0x44f620
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44f620
mov ecx, dword [esi + 0xc]
push ecx
push 0x104
lea edx, [esp + 0x28]
push edx
push 0x1b9d
push 0
call sub.hccutils.DLL_LoadSTRING
add esp, 0x14
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ebx, dword [esi + 0x114]
test byte [ebx + 0x7e8], 1
je 0x44f7e1
push 0x104
lea ecx, [esp + 0x24]
push 0
push ecx
call fcn.004541e0
add esp, 0xc
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x32c], cl
add eax, 1
test cl, cl
jne 0x44f6a0
mov eax, dword [ebx + 0x7ec]
sub eax, 2
je 0x44f74d
sub eax, 1
je 0x44f735
sub eax, 1
je 0x44f71d
xor eax, eax
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x430], cl
add eax, 1
test cl, cl
jne 0x44f6d0
mov eax, dword [ebx + 0x7ec]
push 0x10
lea edx, [esp + 0x434]
push edx
push eax
call fcn.00455d05
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x43c]
push ecx
lea edx, [esp + 0x33c]
push 0x46de5c
push edx
call ebx
add esp, 0x18
jmp 0x44f773
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x334]
push ecx
push 0x1ba2
jmp 0x44f763
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x334]
push eax
push 0x1ba1
jmp 0x44f763
mov ecx, dword [esi + 0xc]
push ecx
push 0x104
lea edx, [esp + 0x334]
push edx
push 0x1ba0
push 0
call sub.hccutils.DLL_LoadSTRING
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x104
lea eax, [esp + 0x128]
push 0
push eax
call fcn.004541e0
mov ecx, dword [esi + 0xc]
push ecx
push 0x104
lea edx, [esp + 0x138]
push edx
push 0x1b95
push 0
call sub.hccutils.DLL_LoadSTRING
lea eax, [esp + 0x34c]
push eax
lea ecx, [esp + 0x148]
push ecx
lea edx, [esp + 0x48]
push edx
call ebx
add esp, 0x2c
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
jmp 0x44f7e7
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esi + 0x114]
test byte [ecx + 0x7e8], 2
je 0x44f892
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44f800
xor eax, eax
jmp 0x44f820
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44f820
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x12c]
push eax
push 0x1b96
push 0
call sub.hccutils.DLL_LoadSTRING
mov ecx, dword [esi + 0x114]
mov edx, dword [ecx + 0x7f0]
push edx
lea eax, [esp + 0x13c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call ebx
add esp, 0x20
push 0
lea edx, [esp + 0x14]
push edx
push eax
lea eax, [esp + 0x2c]
push eax
push edi
call ebp
push 0
lea ecx, [esp + 0x14]
push ecx
push 2
push 0x46de54
push edi
call ebp
mov edx, dword [esi + 0x114]
test byte [edx + 0x7e8], 4
je 0x44f942
xor eax, eax
jmp 0x44f8b0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44f8b0
xor eax, eax
jmp 0x44f8d0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44f8d0
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x12c]
push ecx
push 0x1b97
push 0
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esi + 0x114]
mov eax, dword [edx + 0x7f4]
push eax
lea ecx, [esp + 0x13c]
push ecx
lea edx, [esp + 0x3c]
push edx
call ebx
add esp, 0x20
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ecx, dword [esi + 0x114]
test byte [ecx + 0x7e8], 0x10
je 0x44f9f2
xor eax, eax
jmp 0x44f960
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44f960
xor eax, eax
jmp 0x44f980
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44f980
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x12c]
push eax
push 0x1b98
push 0
call sub.hccutils.DLL_LoadSTRING
mov ecx, dword [esi + 0x114]
mov edx, dword [ecx + 0x7fc]
push edx
lea eax, [esp + 0x13c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call ebx
add esp, 0x20
push 0
lea edx, [esp + 0x14]
push edx
push eax
lea eax, [esp + 0x2c]
push eax
push edi
call ebp
push 0
lea ecx, [esp + 0x14]
push ecx
push 2
push 0x46de54
push edi
call ebp
mov edx, dword [esi + 0x114]
test byte [edx + 0x7e8], 8
je 0x44faa2
xor eax, eax
jmp 0x44fa10
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44fa10
xor eax, eax
jmp 0x44fa30
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44fa30
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x12c]
push ecx
push 0x1b99
push 0
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esi + 0x114]
mov eax, dword [edx + 0x7f8]
push eax
lea ecx, [esp + 0x13c]
push ecx
lea edx, [esp + 0x3c]
push edx
call ebx
add esp, 0x20
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ecx, dword [esi + 0x114]
test byte [ecx + 0x7e8], 0x20
je 0x44fbb1
mov edx, ecx
mov eax, dword [edx + 0x800]
movzx ecx, ah
movzx edx, al
mov ebx, eax
mov dword [esp + 0x1c], eax
shr ebx, 0x18
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], edx
xor eax, eax
jmp 0x44fae0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44fae0
xor eax, eax
jmp 0x44fb00
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44fb00
test ebx, ebx
mov eax, dword [esi + 0xc]
push eax
lea ecx, [esp + 0x128]
push 0x104
push ecx
jne 0x44fb5d
push 0x1b9a
push ebx
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push edx
push eax
movzx eax, byte [esp + 0x3a]
push eax
lea ecx, [esp + 0x144]
push ecx
lea edx, [esp + 0x44]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x28
jmp 0x44fb90
push 0x1b9c
push 0
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
push edx
push eax
movzx eax, byte [esp + 0x3a]
push eax
push ebx
lea ecx, [esp + 0x148]
push ecx
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x2c
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ebx, dword [esi + 0x114]
test byte [ebx + 0x7e8], 0x40
je 0x44fc92
xor eax, eax
jmp 0x44fbd0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44fbd0
xor eax, eax
jmp 0x44fbf0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44fbf0
push 0x104
lea ecx, [esp + 0x434]
push 0
push ecx
call fcn.004541e0
mov eax, dword [ebx + 0x80c]
mov ecx, dword [ebx + 0x808]
push 0x10
lea edx, [esp + 0x440]
push edx
push eax
push ecx
call fcn.00455dbf
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x148]
push eax
push 0x1b9b
push 0
call sub.hccutils.DLL_LoadSTRING
lea ecx, [esp + 0x460]
push ecx
lea edx, [esp + 0x158]
push edx
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x3c
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ecx, dword [esi + 0x114]
cmp dword [ecx + 0x810], 0
je 0x450352
xor eax, eax
jmp 0x44fcb0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44fcb0
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x28]
push eax
push 0x1b9e
push 0
call sub.hccutils.DLL_LoadSTRING
add esp, 0x14
push 0
lea ecx, [esp + 0x14]
push ecx
push 2
push 0x46de54
push edi
mov ebx, eax
call ebp
push 0
lea edx, [esp + 0x14]
push edx
push ebx
lea eax, [esp + 0x2c]
push eax
push edi
call ebp
push 0
lea ecx, [esp + 0x14]
push ecx
push 2
push 0x46de54
push edi
call ebp
mov edx, dword [esi + 0x114]
test byte [edx + 0x810], 1
je 0x44fe9d
xor eax, eax
jmp 0x44fd30
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44fd30
xor eax, eax
jmp 0x44fd50
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44fd50
xor eax, eax
jmp 0x44fd70
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x32c], cl
add eax, 1
test cl, cl
jne 0x44fd70
mov eax, dword [edx + 0x814]
sub eax, 2
je 0x44fe1d
sub eax, 1
je 0x44fe05
sub eax, 1
je 0x44fded
xor eax, eax
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x430], cl
add eax, 1
test cl, cl
jne 0x44fda0
mov ecx, dword [edx + 0x814]
push 0x10
lea eax, [esp + 0x434]
push eax
push ecx
call fcn.00455d05
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [esp + 0x43c]
push edx
lea eax, [esp + 0x33c]
push 0x46de5c
push eax
call ebx
add esp, 0x18
jmp 0x44fe43
mov ecx, dword [esi + 0xc]
push ecx
push 0x104
lea edx, [esp + 0x334]
push edx
push 0x1ba2
jmp 0x44fe33
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x334]
push ecx
push 0x1ba1
jmp 0x44fe33
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x334]
push eax
push 0x1ba0
push 0
call sub.hccutils.DLL_LoadSTRING
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [esi + 0xc]
push ecx
push 0x104
lea edx, [esp + 0x12c]
push edx
push 0x1b95
push 0
call sub.hccutils.DLL_LoadSTRING
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x13c]
push ecx
lea edx, [esp + 0x3c]
push edx
call ebx
add esp, 0x20
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
jmp 0x44fea3
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esi + 0x114]
test byte [ecx + 0x810], 2
je 0x44ff52
xor eax, eax
jmp 0x44fec0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44fec0
xor eax, eax
jmp 0x44fee0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44fee0
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x12c]
push eax
push 0x1b96
push 0
call sub.hccutils.DLL_LoadSTRING
mov ecx, dword [esi + 0x114]
mov edx, dword [ecx + 0x818]
push edx
lea eax, [esp + 0x13c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call ebx
add esp, 0x20
push 0
lea edx, [esp + 0x14]
push edx
push eax
lea eax, [esp + 0x2c]
push eax
push edi
call ebp
push 0
lea ecx, [esp + 0x14]
push ecx
push 2
push 0x46de54
push edi
call ebp
mov edx, dword [esi + 0x114]
test byte [edx + 0x810], 4
je 0x450002
xor eax, eax
jmp 0x44ff70
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x44ff70
xor eax, eax
jmp 0x44ff90
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x44ff90
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x12c]
push ecx
push 0x1b97
push 0
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esi + 0x114]
mov eax, dword [edx + 0x81c]
push eax
lea ecx, [esp + 0x13c]
push ecx
lea edx, [esp + 0x3c]
push edx
call ebx
add esp, 0x20
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ecx, dword [esi + 0x114]
test byte [ecx + 0x810], 0x10
je 0x4500b2
xor eax, eax
jmp 0x450020
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x450020
xor eax, eax
jmp 0x450040
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x450040
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x12c]
push eax
push 0x1b98
push 0
call sub.hccutils.DLL_LoadSTRING
mov ecx, dword [esi + 0x114]
mov edx, dword [ecx + 0x824]
push edx
lea eax, [esp + 0x13c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call ebx
add esp, 0x20
push 0
lea edx, [esp + 0x14]
push edx
push eax
lea eax, [esp + 0x2c]
push eax
push edi
call ebp
push 0
lea ecx, [esp + 0x14]
push ecx
push 2
push 0x46de54
push edi
call ebp
mov edx, dword [esi + 0x114]
test byte [edx + 0x810], 8
je 0x450162
xor eax, eax
jmp 0x4500d0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x4500d0
xor eax, eax
jmp 0x4500f0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x4500f0
mov eax, dword [esi + 0xc]
push eax
push 0x104
lea ecx, [esp + 0x12c]
push ecx
push 0x1b99
push 0
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esi + 0x114]
mov eax, dword [edx + 0x820]
push eax
lea ecx, [esp + 0x13c]
push ecx
lea edx, [esp + 0x3c]
push edx
call ebx
add esp, 0x20
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ecx, dword [esi + 0x114]
test byte [ecx + 0x810], 0x20
je 0x450271
mov edx, ecx
mov eax, dword [edx + 0x828]
movzx ecx, ah
movzx edx, al
mov ebx, eax
mov dword [esp + 0x14], eax
shr ebx, 0x18
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
xor eax, eax
jmp 0x4501a0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x4501a0
xor eax, eax
jmp 0x4501c0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x4501c0
test ebx, ebx
mov eax, dword [esi + 0xc]
push eax
lea ecx, [esp + 0x128]
push 0x104
push ecx
jne 0x45021d
push 0x1b9a
push ebx
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push edx
push eax
movzx eax, byte [esp + 0x32]
push eax
lea ecx, [esp + 0x144]
push ecx
lea edx, [esp + 0x44]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x28
jmp 0x450250
push 0x1b9c
push 0
call sub.hccutils.DLL_LoadSTRING
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push edx
push eax
movzx eax, byte [esp + 0x32]
push eax
push ebx
lea ecx, [esp + 0x148]
push ecx
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x2c
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
mov ebx, dword [esi + 0x114]
test byte [ebx + 0x810], 0x40
je 0x450352
xor eax, eax
jmp 0x450290
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x20], cl
add eax, 1
test cl, cl
jne 0x450290
xor eax, eax
jmp 0x4502b0
mov cl, byte [esp + eax + 0x228]
mov byte [esp + eax + 0x124], cl
add eax, 1
test cl, cl
jne 0x4502b0
push 0x104
lea ecx, [esp + 0x434]
push 0
push ecx
call fcn.004541e0
mov eax, dword [ebx + 0x834]
mov ecx, dword [ebx + 0x830]
push 0x10
lea edx, [esp + 0x440]
push edx
push eax
push ecx
call fcn.00455dbf
mov edx, dword [esi + 0xc]
push edx
push 0x104
lea eax, [esp + 0x148]
push eax
push 0x1b9b
push 0
call sub.hccutils.DLL_LoadSTRING
lea ecx, [esp + 0x460]
push ecx
lea edx, [esp + 0x158]
push edx
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x3c
push 0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
push edi
call ebp
push 0
lea eax, [esp + 0x14]
push eax
push 2
push 0x46de54
push edi
call ebp
pop ebp
pop ebx
mov ecx, dword [esp + 0x52c]
pop edi
pop esi
xor ecx, esp
call fcn.00454162
add esp, 0x528
ret 4