Function at 0x445ba0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x340
mov edi, ecx
mov esi, dword [ebp + 8]
mov eax, dword [0x59d024]
xor eax, ebp
mov dword [esp + 0x338], eax
push dword [ebp + 0xc]
call fcn.0047b650
add esp, 4
test al, al
je 0x4462a3
mov dword [esp + 0x40], edi
push 0xa4
call fcn.004eca5e
add esp, 4
mov edi, eax
mov ecx, eax
push 4
call fcn.0044ff20
xor eax, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x60], eax
xor ecx, ecx
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], edi
cmp ecx, 1
jne 0x445c2c
mov esi, ecx
call fcn.004c3380
call fcn.004810a0
mov ecx, esi
test eax, eax
je 0x446297
mov dword [esp + 0x68], 0xffffffff
mov esi, dword [0x5a1e30]
test esi, esi
jne 0x445c4e
mov esi, ecx
call fcn.0043af10
mov ecx, esi
mov esi, eax
mov dword [0x5a1e30], eax
mov edi, dword [ecx*8 + 0x587040]
mov eax, 0x20019
or edi, eax
lea eax, [esp + 0xa0]
push eax
mov ebx, ecx
call fcn.0043eb80
add esp, 4
mov dword [esp + 0x48], ebx
mov edx, dword [ebx*8 + 0x58703c]
mov ecx, esi
push edi
lea eax, [esp + 0xa4]
push eax
mov dword [esp + 0x44], edx
push edx
lea eax, [esp + 0x74]
push eax
call fcn.00443e40
cmp byte [esp + 0xab], 0
jns 0x445cac
push dword [esp + 0xa0]
call fcn.004eca8e
add esp, 4
xor esi, esi
dec esi
mov dword [esp + 0x4c], esi
mov ecx, dword [esp + 0x68]
lea eax, [esp + 0x4c]
push eax
call fcn.004448a0
mov dword [esp + 0x64], esi
mov ecx, dword [esp + 0x4c]
lea eax, [esp + 0x64]
push eax
call fcn.00444ad0
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x446237
xor eax, eax
cmp dword [esp + 0x3c], 0x80000002
sete byte [esp + 0x23]
setne al
lea eax, [eax*4 + 1]
mov dword [esp + 0x44], eax
xor eax, eax
dec eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
lea ebx, [esp + 0xa0]
push ebx
call fcn.00444950
call fcn.00435b50
test eax, eax
je 0x4468cd
mov esi, eax
push eax
call fcn.00508d20
add esp, 4
push eax
push esi
lea edi, [esp + 0x98]
push edi
call fcn.00477810
add esp, 0xc
movzx eax, byte [esp + 0x9b]
mov esi, eax
and esi, 0x7f
test al, al
cmovs esi, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
cmovs edi, ecx
mov dword [esp + 0x1c], edi
movzx edx, byte [esp + 0xab]
mov edi, ebx
test dl, dl
jns 0x445d85
mov edi, dword [esp + 0xa0]
test esi, esi
je 0x445d9a
test dl, dl
mov dword [esp + 0x28], ecx
jns 0x445da1
mov edx, dword [esp + 0xa4]
jmp 0x445da4
xor esi, esi
jmp 0x445e68
and edx, 0x7f
lea ebx, [edi + edx*2]
mov ecx, ebx
cmp edx, esi
jl 0x445e54
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1c]
movzx eax, word [eax]
mov word [esp + 0xc], ax
lea eax, [edi + edx*2]
add eax, 0xfffffffe
mov dword [esp + 0x18], edi
mov ecx, edi
mov edi, ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x34], eax
mov ebx, edx
sub ebx, esi
inc ebx
je 0x445e2e
mov edi, eax
sub edi, ecx
inc edx
mov ebx, edx
mov edx, edi
mov edi, dword [esp + 0x18]
movzx eax, word [esp + 0xc]
cmp word [ecx], ax
je 0x445e02
add ecx, 2
add edx, 0xfffffffe
dec ebx
cmp esi, ebx
jne 0x445deb
jmp 0x445e3c
test ecx, ecx
je 0x445e3c
xor ebx, ebx
movzx edi, word [ecx + ebx*2]
mov eax, dword [esp + 0x1c]
cmp di, word [eax + ebx*2]
jne 0x445e1d
inc ebx
cmp esi, ebx
jne 0x445e08
jmp 0x445e48
add ecx, 2
sar edx, 1
cmp edx, esi
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
jge 0x445dd7
mov ecx, edi
mov ebx, edi
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x18]
jmp 0x445e54
mov ebx, dword [esp + 0x24]
mov ecx, ebx
mov eax, dword [esp + 0x10]
jmp 0x445e54
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x24]
mov esi, ecx
sub esi, edi
sar esi, 1
cmp ecx, ebx
mov ecx, 0xffffffff
cmove esi, ecx
mov ecx, dword [esp + 0x28]
test al, al
jns 0x445e75
push ecx
call fcn.004eca8e
add esp, 4
mov edi, 7
test esi, esi
je 0x445f10
cmp byte [esp + 0xab], 0
jns 0x445e9b
push dword [esp + 0xa0]
call fcn.004eca8e
add esp, 4
xor esi, esi
test edi, edi
je 0x445eaa
cmp edi, 7
jne 0x44623f
mov ecx, dword [esp + 0x4c]
lea eax, [esp + 0xa0]
push eax
call fcn.00444ad0
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xa0], 0
mov eax, dword [esp + 0x64]
mov dword [esp + 0x64], ecx
test eax, eax
je 0x445f03
mov ecx, eax
push 1
call fcn.00444750
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xa0], 0
test ecx, ecx
je 0x445eff
push 1
call fcn.00444750
mov ecx, dword [esp + 0x64]
test ecx, ecx
jne 0x445cfc
jmp 0x446246
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x98], eax
mov esi, dword [esp + 0x64]
lea edi, [esp + 0x80]
mov ecx, edi
push str.Publisher
call fcn.0051d070
mov ecx, esi
lea eax, [esp + 0x90]
push eax
push edi
call fcn.004447d0
mov ebx, eax
cmp byte [esp + 0x8b], 0
jns 0x445f69
push dword [esp + 0x80]
call fcn.004eca8e
add esp, 4
mov edi, 7
test bl, bl
je 0x4460d4
call fcn.00435b20
test eax, eax
je 0x4468d0
mov esi, eax
push eax
call fcn.00508d20
add esp, 4
push eax
push esi
lea ebx, [esp + 0x88]
push ebx
call fcn.00477810
add esp, 0xc
movzx ecx, byte [esp + 0x8b]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov edx, dword [esp + 0x80]
cmovs ebx, edx
mov dword [esp + 0x28], ebx
movzx ebx, byte [esp + 0x9b]
lea eax, [esp + 0x90]
test bl, bl
jns 0x445fe3
mov eax, dword [esp + 0x90]
cmp dword [esp + 0xc], 0
je 0x445fff
test bl, bl
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], edx
jns 0x446006
mov ebx, dword [esp + 0x94]
jmp 0x446009
xor esi, esi
jmp 0x4460c3
and ebx, 0x7f
lea ecx, [eax + ebx*2]
mov edx, ecx
cmp ebx, dword [esp + 0xc]
jl 0x4460ab
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x28]
movzx ecx, word [ecx]
mov word [esp + 0x1c], cx
lea esi, [eax + ebx*2]
add esi, 0xfffffffe
mov edx, eax
mov dword [esp + 0x34], esi
mov ecx, ebx
sub ecx, dword [esp + 0xc]
inc ecx
je 0x446096
sub esi, edx
inc ebx
mov ecx, ebx
mov ebx, esi
movzx esi, word [esp + 0x1c]
cmp word [edx], si
je 0x44605d
add edx, 2
add ebx, 0xfffffffe
dec ecx
cmp dword [esp + 0xc], ecx
jne 0x446044
jmp 0x446096
test edx, edx
je 0x446096
mov dword [esp + 0x38], eax
xor ecx, ecx
mov edi, dword [esp + 0xc]
movzx eax, word [edx + ecx*2]
mov esi, dword [esp + 0x28]
cmp ax, word [esi + ecx*2]
jne 0x446080
inc ecx
cmp edi, ecx
jne 0x446067
jmp 0x44609e
add edx, 2
sar ebx, 1
cmp ebx, edi
mov eax, dword [esp + 0x38]
mov edi, 7
mov esi, dword [esp + 0x34]
jge 0x446034
mov ecx, dword [esp + 0x10]
mov edx, ecx
jmp 0x4460ab
mov eax, dword [esp + 0x38]
mov edi, 7
mov ecx, dword [esp + 0x10]
mov esi, edx
sub esi, eax
sar esi, 1
cmp edx, ecx
mov ebx, 0xffffffff
cmove esi, ebx
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
test cl, cl
jns 0x4460d0
push edx
call fcn.004eca8e
add esp, 4
test esi, esi
je 0x4460f6
cmp byte [esp + 0x9b], 0
jns 0x445e82
push dword [esp + 0x90]
call fcn.004eca8e
add esp, 4
jmp 0x445e82
xor eax, eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov esi, dword [esp + 0x64]
lea edi, [esp + 0x74]
mov ecx, edi
push str.InstallLocation
call fcn.0051d070
mov ecx, esi
lea eax, [esp + 0x80]
push eax
push edi
call fcn.004447d0
mov ebx, eax
cmp byte [esp + 0x7f], 0
jns 0x446146
push dword [esp + 0x74]
call fcn.004eca8e
add esp, 4
mov edi, 7
test bl, bl
je 0x446215
movzx eax, byte [esp + 0x8b]
test al, al
jns 0x44616f
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
jmp 0x446179
and eax, 0x7f
lea ecx, [esp + 0x80]
mov edi, dword [ebp + 0xc]
movzx edx, byte [edi + 0xb]
test dl, dl
jns 0x44618b
mov esi, dword [edi]
mov edx, dword [edi + 4]
jmp 0x446190
and edx, 0x7f
mov esi, edi
push eax
push ecx
push edx
push esi
call fcn.004b3d50
add esp, 0x10
xor edi, edi
test eax, eax
jne 0x446215
mov eax, dword [esp + 0x14]
mov cl, byte [esp + 0x23]
mov byte [eax + 1], cl
test byte [esp + 0x30], 1
jne 0x44620a
mov ecx, dword [esp + 0x64]
lea eax, [esp + 0x74]
push eax
call fcn.00444950
cmp byte [esp + 0x63], 0
jns 0x4461d5
push dword [esp + 0x58]
call fcn.004eca8e
add esp, 4
cmp dword [esp + 0x3c], reloc.OLEAUT32.dll_SysReAllocString
sete al
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x60], ecx
movq xmm0, qword [esp + 0x74]
movq qword [esp + 0x58], xmm0
mov ecx, dword [esp + 0x2c]
or cl, al
mov dword [esp + 0x2c], ecx
mov al, 1
mov dword [esp + 0x30], eax
mov edi, dword [esp + 0x44]
jmp 0x446215
mov dword [esp + 0x2c], 0
xor edi, edi
inc edi
cmp byte [esp + 0x8b], 0
jns 0x4460d4
push dword [esp + 0x80]
call fcn.004eca8e
add esp, 4
jmp 0x4460d4
xor esi, esi
mov edi, dword [esp + 0x14]
jmp 0x446261
cmp edi, 5
je 0x446246
mov esi, edi
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x64], 0
test ecx, ecx
mov edi, dword [esp + 0x14]
je 0x446261
push 1
call fcn.00444750
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x4c], 0
test ecx, ecx
je 0x446278
push 1
call fcn.00444a70
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x68], 0
test ecx, ecx
je 0x44628f
push 1
call fcn.00444750
test esi, esi
jne 0x4462ae
mov ecx, dword [esp + 0x48]
inc ecx
cmp ecx, 3
jne 0x445c11
jmp 0x4462b3
mov dword [esi], 0
jmp 0x44683f
cmp esi, 2
jne 0x4462c8
test byte [esp + 0x30], 1
jne 0x4462cf
mov eax, dword [ebp + 8]
mov dword [eax], 0
jmp 0x446818
test byte [esp + 0x2c], 1
je 0x4462ba
xor eax, eax
dec eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x40]
mov esi, dword [ebp + 0xc]
push esi
lea eax, [esp + 0x50]
push eax
call fcn.004473c0
mov edi, dword [esp + 0x4c]
cmp edi, dword [esp + 0x50]
je 0x44640f
mov eax, dword [esp + 0x14]
lea ebx, [eax + 0x20]
mov ecx, ebx
push edi
call fcn.0046cfa0
call fcn.0043a660
mov dword [esp + 0xc], eax
xor eax, eax
dec eax
lea edi, [esp + 0xa0]
mov dword [edi + 0x24], eax
mov dword [edi + 0x20], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
mov ecx, esi
lea esi, [esp + 0x80]
mov dword [esp + 0x1c], ebx
push ebx
push esi
call fcn.0046e230
lea ebx, [esp + 0x90]
mov ecx, esi
push 0xd
push str.installer.exe
push ebx
call fcn.004b3860
mov ecx, edi
push ebx
call fcn.0046a860
mov ecx, ebx
call fcn.004b3560
mov ecx, esi
call fcn.004b3560
mov esi, 0x586ad0
push esi
call fcn.00508d20
add esp, 4
mov ecx, edi
push eax
push esi
call fcn.0046b520
xor eax, eax
mov dword [ebx + 4], eax
mov dword [ebx], eax
mov dword [ebx + 8], eax
mov ebx, dword [esp + 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
test al, al
je 0x4468c1
mov ecx, dword [0x5a1e30]
test ecx, ecx
jne 0x4463bd
call fcn.0043af10
mov ecx, eax
mov dword [0x5a1e30], eax
mov edi, dword [esp + 0x14]
lea esi, [edi + 0x2c]
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.0043aa60
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
cmp byte [edi + 0x37], 0
movzx eax, byte [esp + 0x9b]
js 0x44685a
test al, al
js 0x44641d
mov eax, dword [esp + 0x98]
mov dword [esi + 8], eax
movq xmm0, qword [esp + 0x90]
movq qword [esi], xmm0
jmp 0x446432
mov eax, dword [ebp + 8]
mov dword [eax], 0
jmp 0x4467e7
mov ecx, esi
push dword [esp + 0x94]
push dword [esp + 0x94]
call fcn.00468340
movzx ebx, byte [edi + 0x37]
test bl, bl
jns 0x44643d
mov ebx, dword [edi + 0x30]
cmp byte [esp + 0x9b], 0
jns 0x446456
push dword [esp + 0x90]
call fcn.004eca8e
add esp, 4
lea esi, [esp + 0xa0]
mov ecx, esi
call fcn.0046aab0
xor ecx, ecx
test ebx, ebx
je 0x4467de
lea eax, [edi + 8]
mov dword [esp + 0x28], eax
lea eax, [edi + 0x50]
mov dword [esp + 0xc], eax
xor ebx, ebx
cmp byte [edi + 1], 0
mov eax, 8
mov edi, 0x73
cmove edi, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
lea eax, [eax + 0x44]
mov dword [esp + 0x18], eax
sete bl
xor esi, esi
dec esi
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa8], esi
call fcn.004b3320
lea eax, [esp + 0xa0]
push eax
push edi
call fcn.00472ce0
add esp, 8
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0xa0]
mov edi, dword [esp + 0x28]
push edi
push dword [esp + 0x1c]
call fcn.004479c0
add esp, 8
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
mov dword [esp + 0x98], esi
lea esi, [esp + 0x90]
mov ecx, esi
call fcn.004b3320
add ebx, 0x6b
push esi
push ebx
call fcn.00472ce0
add esp, 8
mov ebx, dword [ebp + 0xc]
mov ecx, ebx
mov edx, esi
push edi
mov edi, dword [esp + 0x18]
push dword [esp + 0x10]
call fcn.004479c0
add esp, 8
mov ecx, esi
call fcn.004b3560
lea ecx, [esp + 0xa0]
call fcn.004b3560
mov byte [edi], 0
lea ecx, [edi + 0x14]
push ebx
call fcn.0046cfa0
lea eax, [edi + 0x68]
mov ecx, ebx
mov edx, dword [esp + 0x1c]
push eax
call fcn.004468e0
add esp, 4
test al, al
je 0x44660e
lea eax, [edi + 0x74]
mov dword [esp + 0xc], eax
xor ebx, ebx
dec ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov ecx, dword [ebp + 0xc]
push 0x5a1e7c
push esi
call fcn.0046e230
push esi
call fcn.0047b650
add esp, 4
test al, al
je 0x4466ca
push 0x294
push 0xff
lea esi, [esp + 0xa8]
push esi
call fcn.004f0310
add esp, 0xc
xor eax, eax
inc eax
mov ecx, esi
push eax
push eax
lea eax, [esp + 0x98]
push eax
call fcn.004819f0
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov ecx, esi
lea eax, [esp + 0x80]
push eax
call fcn.00481c50
movzx eax, byte [esp + 0x8b]
test al, al
jns 0x446615
mov eax, dword [esp + 0x84]
jmp 0x446618
xor ecx, ecx
jmp 0x4467de
and eax, 0x7f
test eax, eax
je 0x4466b2
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
lea esi, [esp + 0x74]
mov ecx, esi
call fcn.004b3320
mov ecx, dword [ebp + 0xc]
push esi
lea eax, [esp + 0x84]
push eax
call fcn.0046d680
mov eax, dword [edi + 0x78]
cmp eax, dword [edi + 0x7c]
jne 0x4466a6
mov ecx, dword [esp + 0xc]
push esi
call fcn.0043f520
lea ecx, [esp + 0xa0]
lea ebx, [esp + 0x68]
push ebx
call fcn.00481c50
lea ecx, [esp + 0x80]
push ebx
call fcn.0046d000
mov ecx, ebx
call fcn.004b3560
mov ecx, esi
call fcn.004b3560
movzx eax, byte [esp + 0x8b]
test al, al
jns 0x44669b
mov eax, dword [esp + 0x84]
jmp 0x44669e
and eax, 0x7f
xor ebx, ebx
dec ebx
jmp 0x446618
mov ecx, dword [esp + 0xc]
push esi
call fcn.00520b70
jmp 0x44665a
lea ecx, [esp + 0x80]
call fcn.004b3560
lea ecx, [esp + 0xa0]
call fcn.00481ba0
lea ecx, [esp + 0x90]
call fcn.004b3560
mov ecx, dword [ebp + 0xc]
push 0x5a1e88
lea esi, [esp + 0xa4]
push esi
call fcn.0046e230
push esi
call fcn.0047b5c0
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.004b3560
test bl, bl
je 0x44671b
mov eax, dword [edi + 0x78]
cmp eax, dword [edi + 0x7c]
jne 0x446888
mov ecx, dword [esp + 0xc]
push 0x5a1e88
call fcn.0043f520
mov ecx, dword [ebp + 0xc]
push 0x5a1e94
lea esi, [esp + 0xa4]
push esi
call fcn.0046e230
push esi
call fcn.0047b5c0
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.004b3560
test bl, bl
je 0x446760
mov eax, dword [edi + 0x78]
cmp eax, dword [edi + 0x7c]
jne 0x44689b
mov ecx, dword [esp + 0xc]
push 0x5a1e94
call fcn.0043f520
mov ecx, dword [ebp + 0xc]
push 0x5a1ea0
lea esi, [esp + 0xa4]
push esi
call fcn.0046e230
push esi
call fcn.0047b5c0
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.004b3560
test bl, bl
je 0x4467a5
mov eax, dword [edi + 0x78]
cmp eax, dword [edi + 0x7c]
jne 0x4468ae
mov ecx, dword [esp + 0xc]
push 0x5a1ea0
call fcn.0043f520
movzx eax, byte [edi + 1]
lea ecx, [edi + 0x8c]
mov esi, edi
add esi, 0x98
test eax, eax
cmovne esi, ecx
mov ebx, edi
lea edi, [esp + 0x58]
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x1c]
push esi
push eax
push edi
call fcn.00446ba0
add esp, 0xc
mov ecx, ebx
mov dword [esp + 0x14], 0
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x446814
mov esi, dword [esp + 0x50]
mov eax, edi
cmp esi, edi
je 0x446807
add esi, 0xfffffff4
mov ecx, esi
call fcn.004b3560
cmp esi, edi
jne 0x4467f5
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x50], edi
push eax
call fcn.004eca8e
add esp, 4
mov edi, dword [esp + 0x14]
cmp byte [esp + 0x63], 0
jns 0x44682b
push dword [esp + 0x58]
call fcn.004eca8e
add esp, 4
test edi, edi
je 0x44683f
mov ecx, edi
call fcn.004506e0
push edi
call fcn.004eca8e
add esp, 4
mov ecx, dword [esp + 0x338]
xor ecx, ebp
call fcn.004ed092
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov edx, eax
and edx, 0x7f
test al, al
cmovs edx, dword [esp + 0x94]
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x90]
cmovns eax, ecx
mov ecx, esi
push edx
push eax
call fcn.00468270
jmp 0x446432
mov ecx, dword [esp + 0xc]
push 0x5a1e88
call fcn.00520b70
jmp 0x44671b
mov ecx, dword [esp + 0xc]
push 0x5a1e94
call fcn.00520b70
jmp 0x446760
mov ecx, dword [esp + 0xc]
push 0x5a1ea0
call fcn.00520b70
jmp 0x4467a5
mov ecx, ebx
call fcn.004c2ef0
jmp 0x4463a7
int3
int3