Function at 0x445c30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x1c]
cmp eax, dword [ecx + 8]
jbe 0x44692b
sub esp, 0x9c
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x98], ecx
lea edx, [0x5bfd20]
mov dword [esp], edx
mov ebx, dword [esp + 0xa8]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x94]
mov dword [esp + 8], ebp
call fcn.00406bf0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x44687c
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x90], ecx
lea edx, [0x5bfd20]
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 4], edx
lea ebx, [esp + 0x8c]
mov dword [esp + 8], ebx
call fcn.00406fc0
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
cmp eax, ecx
je 0x44686d
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [ecx + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x44685e
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], eax
call fcn.00444930
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
call fcn.00444930
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x44]
cmp eax, edx
je 0x445d64
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x445d55
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.004449c0
mov eax, dword [esp + 4]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
call fcn.004449c0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x58]
test ecx, ecx
jne 0x4467ab
test eax, eax
jne 0x4467a9
movzx eax, byte [esp + 0x16]
lea ecx, [eax - 1]
cmp cl, 0xf
jbe 0x44679a
cmp al, 0x15
ja 0x446465
cmp al, 0x12
jbe 0x4463ac
cmp al, 0x13
jne 0x446079
mov eax, dword [esp + 0xa0]
movzx ecx, word [eax + 0x22]
mov edx, dword [esp + 0xa4]
movzx ebx, word [edx + 0x22]
cmp cx, bx
jne 0x44606a
movzx ecx, word [eax + 0x20]
movzx ebx, word [edx + 0x20]
cmp bx, cx
jne 0x44606a
movzx ebp, byte [eax + 0xc]
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x446060
mov ebp, 0x34
mov esi, eax
add ebp, esi
test byte [ebp], al
movzx ecx, cx
cmp ecx, 0x100000
ja 0x4468ca
movzx esi, byte [edx + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x446056
mov esi, 0x34
mov edi, edx
add esi, edi
test byte [esi], al
movzx ebx, bx
cmp ebx, 0x100000
ja 0x4468c3
mov dword [esp + 0x84], ebp
mov dword [esp + 0x24], ecx
mov dword [esp + 0x80], esi
mov dword [esp + 0x1c], ebx
xor edi, edi
jmp 0x445eba
mov eax, dword [esp + 0x2c]
lea edi, [eax + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
cmp edi, ecx
jge 0x445f06
jae 0x4468bc
mov edx, dword [ebp + edi*4]
cmp edi, ebx
jae 0x4468bc
mov dword [esp + 0x2c], edi
mov eax, dword [esi + edi*4]
mov dword [esp + 4], eax
mov dword [esp], edx
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x445e8f
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
movzx ecx, byte [eax + 0xc]
test cl, 1
je 0x44604c
mov ecx, 0x34
mov ebx, eax
add ecx, ebx
test byte [ecx], al
movzx ebx, word [eax + 0x22]
and ebx, 0x7fff
movzx eax, word [eax + 0x20]
movzx ebp, ax
add eax, ebx
movzx eax, ax
cmp ebp, eax
ja 0x4468b5
cmp eax, 0x100000
ja 0x4468b5
sub eax, ebp
lea ebx, [ebp - 0x100000]
neg ebx
shl ebp, 2
neg ebx
sar ebx, 0x1f
and ebx, ebp
add ecx, ebx
movzx ebx, byte [edx + 0xc]
test bl, 1
je 0x446042
mov ebx, 0x34
mov ebp, edx
add ebx, ebp
test byte [ebx], al
movzx ebp, word [edx + 0x22]
and ebp, 0x7fff
movzx edx, word [edx + 0x20]
movzx esi, dx
add edx, ebp
movzx edx, dx
cmp esi, edx
ja 0x4468ae
cmp edx, 0x100000
ja 0x4468ae
mov dword [esp + 0x20], eax
mov dword [esp + 0x5c], ecx
sub edx, esi
mov dword [esp + 0x18], edx
lea ebp, [esi - 0x100000]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
shl esi, 2
sar ebp, 0x1f
and ebp, esi
add ebx, ebp
mov dword [esp + 0x48], ebx
xor ebp, ebp
jmp 0x445fe8
mov esi, dword [esp + 0x34]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x48]
cmp ebp, eax
jge 0x446033
jae 0x4468a7
mov esi, dword [ecx + ebp*4]
cmp ebp, edx
jae 0x4468a7
mov dword [esp + 0x34], ebp
mov eax, dword [ebx + ebp*4]
mov dword [esp + 4], eax
mov dword [esp], esi
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x445fd1
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov ebx, 0x24
jmp 0x445f6f
mov ecx, 0x24
jmp 0x445f18
mov esi, 0x24
jmp 0x445e60
mov ebp, 0x24
jmp 0x445e36
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
cmp al, 0x14
jne 0x446336
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.00445500
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.00445500
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x44]
cmp ecx, edx
je 0x4460d8
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x4460c9
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x446327
mov dword [esp + 0x44], ecx
xor ebx, ebx
jmp 0x446139
mov ebp, dword [esp + 0x30]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xa4]
cmp ebx, ecx
jge 0x446318
mov ebp, dword [eax + 0x28]
mov esi, dword [eax + 0x24]
cmp ebx, ebp
jae 0x4468a0
lea ebp, [esi + ebx*8]
mov edi, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
cmp ebx, edi
jae 0x446899
mov dword [esp + 0x7c], esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x64], ebp
mov dword [esp + 0x78], edx
lea eax, [esi + ebx*8]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00444ae0
mov eax, dword [esp + 8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x78]
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov dword [esp + 4], ebx
lea ebx, [edx + ecx*8]
mov dword [esp + 0x50], ebx
mov dword [esp], ebx
call fcn.00444ae0
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
call fcn.00445500
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
call fcn.00445500
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x40]
cmp eax, edx
jne 0x446309
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x446309
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00445600
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
call fcn.00445600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x40]
cmp eax, edx
jne 0x4462fa
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x4462fa
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x7c]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [esp], ecx
call fcn.00444e00
mov eax, dword [esp + 8]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x78]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x50]
mov dword [esp], edx
call fcn.00444e00
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x446120
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 8], ecx
call fcn.00445c30
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44637a
xor eax, eax
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
jmp 0x44636c
cmp al, 0x11
je 0x446406
cmp al, 0x12
jne 0x4468d1
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x24]
cmp ecx, ebx
je 0x4463e2
xor eax, eax
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [eax + 0x20]
mov ecx, dword [edx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
jmp 0x4463d4
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x20]
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 8], ecx
call fcn.00445c30
movzx eax, byte [esp + 0xc]
test al, al
je 0x446461
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x28]
cmp eax, ecx
sete al
mov byte [esp + 0xac], al
add esp, 0x9c
ret
xor eax, eax
jmp 0x446453
cmp al, 0x17
ja 0x4464ef
cmp al, 0x16
jne 0x4464b1
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00445c30
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xac], al
add esp, 0x9c
ret
cmp al, 0x18
jne 0x446503
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
cmp al, 0x19
jne 0x44678c
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
cmp ecx, ebx
jne 0x44677d
mov dword [esp + 0x44], ecx
xor ebx, ebx
jmp 0x446549
mov ebp, dword [esp + 0x38]
lea ebx, [ebp + 1]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xa4]
cmp ebx, ecx
jge 0x44676e
mov ebp, dword [eax + 0x28]
mov esi, dword [eax + 0x24]
cmp ebx, ebp
jae 0x446892
lea ebp, [ebx + ebx*2]
mov edi, dword [edx + 0x28]
mov edx, dword [edx + 0x24]
cmp ebx, edi
jae 0x44688b
mov dword [esp + 0x40], ebp
mov dword [esp + 0x74], edx
mov dword [esp + 0x70], esi
mov dword [esp + 0x38], ebx
mov eax, dword [esi + ebp*4]
mov dword [esp], eax
call fcn.00445500
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.00445500
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x3c]
cmp eax, edx
jne 0x44675f
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x44675f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.00445600
mov eax, dword [esp + 4]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.00445600
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x3c]
cmp eax, edx
jne 0x446750
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x446750
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp + 4], ebp
mov dword [esp], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
call fcn.00445c30
movzx eax, byte [esp + 0xc]
test al, al
je 0x446741
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.00445580
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.00445580
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x3c]
cmp eax, edx
jne 0x446732
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
je 0x446732
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov ecx, dword [ecx + eax*4 + 8]
mov edx, dword [esp + 0x74]
mov eax, dword [edx + eax*4 + 8]
cmp ecx, eax
je 0x446530
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
cmp al, 0x1a
je 0x4464f4
jmp 0x4468d1
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
test ecx, ecx
je 0x4467b1
test eax, eax
jne 0x4467c0
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov dword [esp + 0x54], eax
mov eax, dword [ecx]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.00444dc0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00445500
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x54]
mov edx, dword [edx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
call fcn.00444dc0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00445500
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x28]
cmp ecx, edx
jne 0x44684f
mov ebx, dword [esp + 0x6c]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0044ba10
movzx eax, byte [esp + 0x10]
test al, al
jne 0x445dc6
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 0
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
mov byte [esp + 0xac], 1
add esp, 0x9c
ret
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425900
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.00425900
ud2
call fcn.00425960
ud2
call fcn.00425960
ud2
call fcn.004276b0
lea eax, [0x5fe145]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00427f70
call fcn.00427890
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00427dc0
call fcn.004278d0
call fcn.00427720
lea eax, [0x5fe145]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00426ea0
ud2
call fcn.0044a1d0
jmp fcn.00445c30