Function at 0x449f80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x44ac98
sub esp, 0xa0
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x65a300]
mov dword [esp], edx
mov ebx, dword [esp + 0xac]
mov dword [esp + 4], ebx
lea ebp, [esp + 0x98]
mov dword [esp + 8], ebp
call fcn.0040b550
movzx eax, byte [esp + 0x10]
test al, al
jne 0x44abbd
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x9c], ecx
lea edx, [0x65a300]
mov dword [esp], edx
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
lea ebx, [esp + 0x98]
mov dword [esp + 8], ebx
call fcn.0040b950
mov eax, dword [esp + 0xc]
test byte [eax], al
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
cmp eax, ecx
je 0x44abae
movzx edx, byte [eax + 0xf]
mov ebx, edx
and edx, 0x1f
movzx ebp, byte [ecx + 0xf]
and ebp, 0x1f
xchg ebp, eax
cmp dl, al
xchg ebp, eax
jne 0x44ab9f
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], dl
mov dword [esp], eax
call fcn.00448d90
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00448d90
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
je 0x44a0ae
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44a09f
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.00448e20
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0xa8]
mov dword [esp], ecx
call fcn.00448e20
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x44aafa
test eax, eax
jne 0x44aaf8
movzx ebx, byte [esp + 0x16]
cmp bl, 1
jb 0x44a11b
cmp bl, 0x10
jbe 0x44aae9
cmp bl, 0x15
ja 0x44a7da
cmp bl, 0x12
jbe 0x44a725
cmp bl, 0x13
jne 0x44a401
mov ebx, dword [esp + 0xa8]
movzx ebp, word [ebx + 0x22]
mov esi, dword [esp + 0xa4]
cmp word [esi + 0x22], bp
jne 0x44a3f2
movzx ebp, word [esi + 0x20]
movzx edi, word [ebx + 0x20]
cmp di, bp
jne 0x44a3f2
nop
mov eax, edi
movzx edi, byte [esi + 0xc]
xchg edi, eax
test al, 1
xchg edi, eax
je 0x44a3e8
mov ecx, 0x34
movzx ebp, bp
lea edi, [ecx + esi]
cmp ebp, 0x100000
ja 0x44ac38
nop
mov ecx, esi
movzx esi, byte [ebx + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x44a3de
mov edx, 0x34
movzx esi, ax
mov eax, ebx
add ebx, edx
cmp esi, 0x100000
ja 0x44ac2c
mov dword [esp + 0x90], edi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0xac]
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x48]
jmp 0x44a22b
mov eax, dword [esp + 0x2c]
inc eax
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xac]
mov ebp, esi
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0x2c]
cmp ebx, ebp
jge 0x44a27a
jae 0x44ac23
mov edi, dword [edi + ebx*4]
cmp ebx, esi
jae 0x44ac1a
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + ebx*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00449f80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44a1e3
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
nop
movzx ebx, byte [ecx + 0xc]
test bl, 1
je 0x44a3d4
mov ebx, 0x34
movzx ebp, word [ecx + 0x22]
and ebp, 0x7fff
movzx esi, word [ecx + 0x20]
add ebp, esi
movzx ebp, bp
add ebx, ecx
cmp ebp, 0x100000
ja 0x44ac0e
movzx esi, si
cmp esi, ebp
ja 0x44ac05
nop
sub ebp, esi
lea edi, [esi - 0x100000]
xchg edi, ebx
neg ebx
xchg edi, ebx
shl esi, 2
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, esi
add ebx, edi
movzx esi, byte [eax + 0xc]
xchg esi, eax
test al, 1
xchg esi, eax
je 0x44a3ca
mov ecx, 0x34
mov dword [esp + 0x60], ebx
movzx esi, word [eax + 0x22]
and esi, 0x7fff
movzx edi, word [eax + 0x20]
add esi, edi
movzx esi, si
lea ebx, [ecx + eax]
cmp esi, 0x100000
ja 0x44abf9
movzx eax, di
cmp eax, esi
ja 0x44abf2
mov dword [esp + 0x20], ebp
sub esi, eax
mov dword [esp + 0x18], esi
lea edi, [eax - 0x100000]
xchg edi, ebx
neg ebx
xchg edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
shl eax, 2
sar edi, 0x1f
and edi, eax
add ebx, edi
mov dword [esp + 0x50], ebx
mov edi, dword [esp + 0x60]
xor eax, eax
jmp 0x44a377
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xac]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x50]
mov esi, dword [esp + 0x60]
mov ebx, ebp
mov ebp, ecx
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x60]
cmp eax, ebp
jge 0x44a3bb
jae 0x44abeb
mov edi, dword [edi + eax*4]
cmp eax, esi
jae 0x44abe4
mov dword [esp + 0x34], eax
mov ecx, dword [ebx + eax*4]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00449f80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44a34f
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, 0x24
jmp 0x44a2ec
mov ebx, 0x24
jmp 0x44a28d
mov edx, 0x24
jmp 0x44a1a3
mov ecx, 0x24
jmp 0x44a17a
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp bl, 0x14
jne 0x44a6af
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.004498a0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.004498a0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
je 0x44a45a
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44a44b
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
mov ebp, dword [esp + 0xa8]
cmp dword [ebp + 0x28], ebx
jne 0x44a6a0
mov dword [esp + 0x44], ebx
xor eax, eax
jmp 0x44a4b7
mov esi, dword [esp + 0x38]
lea eax, [esi + 1]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov edx, ecx
mov ebx, esi
mov ebp, edi
cmp eax, ebx
jge 0x44a691
mov esi, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x44abdf
lea edi, [esi + eax*8]
mov edx, dword [ebp + 0x24]
mov ebp, dword [ebp + 0x28]
cmp eax, ebp
jae 0x44abd8
mov dword [esp + 0x88], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x64], edi
mov dword [esp + 0x84], edx
lea ecx, [esi + eax*8]
mov ecx, dword [ecx]
mov dword [esp], edi
mov dword [esp + 4], ecx
call fcn.00448fb0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x84]
lea edx, [ecx + eax*8]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x80], ebx
lea ebp, [ecx + eax*8]
mov ebp, dword [ebp]
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.00448fb0
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.004498a0
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.004498a0
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
jne 0x44a682
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44a682
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004499a0
mov eax, dword [esp + 8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call fcn.004499a0
mov eax, dword [esp + 0x40]
cmp dword [esp + 8], eax
jne 0x44a673
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44a673
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x88]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x64]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00449260
mov eax, dword [esp + 8]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
lea edx, [edx + ecx*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 0x54]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00449260
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00449f80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44a498
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.00449f80
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44a6f3
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x24]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00449f80
movzx eax, byte [esp + 0xc]
jmp 0x44a6e5
cmp bl, 0x11
je 0x44a77d
cmp bl, 0x12
jne 0x44ac44
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0xa4]
cmp dword [edx + 0x24], ecx
je 0x44a759
xor eax, eax
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov ecx, dword [edx + 0x20]
mov eax, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00449f80
movzx eax, byte [esp + 0xc]
jmp 0x44a74b
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x20]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0xac]
mov dword [esp + 8], ecx
call fcn.00449f80
movzx eax, byte [esp + 0xc]
test al, al
je 0x44a7d6
mov eax, dword [esp + 0xa8]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xa4]
cmp dword [ecx + 0x28], eax
sete al
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
xor eax, eax
jmp 0x44a7c8
cmp bl, 0x17
ja 0x44a864
cmp bl, 0x16
jne 0x44a826
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00449f80
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x20]
mov ecx, dword [esp + 0xa8]
mov ecx, dword [ecx + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00449f80
movzx eax, byte [esp + 0xc]
mov byte [esp + 0xb0], al
add esp, 0xa0
ret
cmp bl, 0x18
jne 0x44a878
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
cmp bl, 0x19
jne 0x44aadb
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x28]
mov edx, dword [esp + 0xa4]
cmp dword [edx + 0x28], ecx
jne 0x44aacc
mov eax, dword [edx + 0x20]
mov dword [esp], eax
call fcn.004498a0
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp], ebx
call fcn.004498a0
mov eax, dword [esp + 0x44]
cmp dword [esp + 8], eax
je 0x44a8e4
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44a8d5
mov edx, dword [esp + 0xa4]
mov ebx, dword [edx + 0x28]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xa8]
xor eax, eax
jmp 0x44a938
mov esi, dword [esp + 0x30]
lea eax, [esi + 1]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
mov edx, ecx
mov ebx, esi
mov ebp, edi
cmp eax, ebx
jge 0x44aabd
mov esi, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
cmp eax, ecx
jae 0x44abd3
lea edi, [eax + eax*2]
mov edx, dword [ebp + 0x24]
mov ebp, dword [ebp + 0x28]
cmp eax, ebp
jae 0x44abcc
mov dword [esp + 0x74], edx
mov dword [esp + 0x70], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], edi
mov eax, dword [esi + edi*4]
mov dword [esp], eax
call fcn.004498a0
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.004498a0
mov eax, dword [esp + 0x3c]
cmp dword [esp + 8], eax
jne 0x44aaae
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44aaae
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4 + 4]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + eax*4 + 4]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov edx, dword [esp + 0xac]
mov dword [esp + 8], edx
call fcn.00449f80
movzx eax, byte [esp + 0xc]
test al, al
je 0x44aa9f
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + eax*4]
mov dword [esp], edx
call fcn.00449920
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + edx*4]
mov dword [esp], ebp
call fcn.00449920
mov eax, dword [esp + 0x3c]
cmp dword [esp + 8], eax
jne 0x44aa90
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x44aa90
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x70]
mov ebx, dword [ebx + edx*4 + 8]
mov ebp, dword [esp + 0x74]
mov edx, dword [ebp + edx*4 + 8]
cmp ebx, edx
je 0x44a919
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
cmp bl, 0x1a
je 0x44a869
jmp 0x44ac44
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
test ecx, ecx
je 0x44ab00
test eax, eax
jne 0x44ab0f
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov dword [esp + 0x58], eax
mov eax, dword [ecx]
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00448fb0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.004498a0
mov eax, dword [esp + 8]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x58]
mov edx, dword [edx]
mov ebx, dword [esp + 0xa8]
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.00448fb0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.004498a0
mov eax, dword [esp + 0x28]
cmp dword [esp + 8], eax
jne 0x44ab90
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
mov dword [esp + 8], eax
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44a108
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 0
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov byte [esp + 0xb0], 1
add esp, 0xa0
ret
mov ecx, ebp
call fcn.00450870
call fcn.00450870
mov ecx, ebp
call fcn.00450870
call fcn.00450870
mov ecx, esi
call fcn.00450870
mov ecx, ebp
call fcn.00450870
mov ecx, esi
call fcn.004508d0
mov ecx, esi
mov edx, 0x100000
call fcn.00450890
mov eax, esi
mov ecx, ebp
call fcn.004508d0
mov ecx, ebp
mov edx, 0x100000
call fcn.00450890
mov eax, ebx
mov ecx, esi
call fcn.00450870
mov eax, ebx
mov ecx, ebp
call fcn.00450870
mov ecx, esi
mov edx, 0x100000
call fcn.00450890
mov ecx, ebp
mov edx, 0x100000
call fcn.00450890
call fcn.0042b960
lea eax, [0x6a9e6e]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0042c200
movzx eax, byte [esp + 0x17]
and eax, 0x1f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bf10
call fcn.0042bb80
call fcn.0042b9d0
lea eax, [0x6a96e8]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0042ab30
nop
call fcn.0044efb0
jmp fcn.00449f80