Function at 0x452ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x190]
cmp eax, dword [ecx + 8]
jbe 0x45474b
sub esp, 0x210
mov eax, dword [esp + 0x224]
test eax, eax
jle 0x452cde
mov ecx, dword [esp + 0x230]
test ecx, ecx
je 0x452ce5
jmp 0x454734
mov ecx, dword [esp + 0x230]
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x220]
cmp ebx, edx
jne 0x452d09
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x50], edx
je 0x45471e
call fcn.00444330
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x214]
cmp ecx, 0xffffffff
jne 0x452d57
mov edx, dword [esp + 0x218]
cmp edx, 0xffffffff
jne 0x452d47
mov ecx, dword [esp + 0x220]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x452d3f
mov ebx, dword [ecx + 0x3c]
jmp 0x452d6c
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
jmp 0x452d6c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
jmp 0x452d6c
mov ecx, dword [esp + 0x220]
mov ebx, dword [esp + 0x214]
mov edx, dword [esp + 0x218]
mov dword [esp + 0x8c], eax
lea edi, [esp + 0x1ec]
mov ebp, eax
xor eax, eax
call fcn.0045e907
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x200], edx
mov ecx, dword [esp + 0x220]
mov esi, dword [ecx + 0xcc]
mov edi, ebp
mov ebp, dword [ecx + 0xd0]
mov dword [esp + 0x5c], ebp
mov ebp, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x228]
test ecx, ecx
je 0x452dcb
xor eax, eax
mov byte [esp + 0x1b], al
xor eax, eax
jmp 0x452dec
mov edi, dword [esp + 0x230]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x8c]
mov byte [esp + 0x1b], cl
mov ecx, dword [esp + 0x228]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], edx
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x7c], ebp
test ebx, ebx
jne 0x452e23
mov edx, dword [edx]
mov dword [esp + 0x1f4], edx
mov edx, dword [esp + 0x80]
lea edi, [edx + 4]
mov dword [esp + 0x200], edi
mov eax, dword [esp + 0x1f4]
mov dword [esp], eax
call fcn.0044d390
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
je 0x452eb9
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x1f0], ecx
lea edi, [esp + 0xdc]
xor eax, eax
call fcn.0045e8e0
mov ecx, dword [esp + 0x22c]
mov ebx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x220]
mov esi, dword [esp + 0x88]
mov edi, dword [esp + 0x7c]
xor eax, eax
mov dword [esp + 0x40], eax
xor eax, eax
mov byte [esp + 0x1a], al
xor eax, eax
mov byte [esp + 0x1c], al
mov eax, dword [esp + 0x224]
mov dword [esp + 0x74], eax
mov dword [esp + 0xa8], ecx
xor ecx, ecx
mov dword [esp + 0x34], ecx
xor eax, eax
mov ecx, dword [esp + 0xa8]
jmp 0x45302f
mov eax, dword [esp + 0x230]
test eax, eax
jne 0x452ed1
movzx ecx, byte [esp + 0x1b]
test cl, cl
je 0x452f95
mov eax, dword [esp + 0x220]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x8c], ecx
mov eax, dword [eax + 0x54]
mov dword [esp + 0x78], eax
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x84], edx
call fcn.00435dc0
lea eax, [0x4d613c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004366c0
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4d6859]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436540
call fcn.00435fe0
call fcn.00435e30
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
lea eax, [esp + 0x1ec]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.004562a0
mov eax, dword [esp + 0x230]
test eax, eax
jmp 0x452f97
test eax, eax
jne 0x452fab
mov dword [esp + 0x23c], 0
add esp, 0x210
ret
lea eax, [0x4d5cc7]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00434610
sete bl
mov dword [esp + 0x1ec], ebp
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 0x1f0], ebp
mov ebp, dword [esp + 0x1fc]
mov dword [esp + 0x1f4], ebp
mov dword [esp + 0x1fc], 0
mov ebp, dword [esp + 0x204]
mov dword [esp + 0x200], ebp
mov dword [esp + 0x204], 0
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x1d8]
mov byte [esp + 0x1a], bl
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x40]
cmp ecx, esi
jle 0x453b46
mov dword [esp + 0x1e8], ebp
mov esi, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x1f0]
mov dword [esp + 0x1e4], ebp
mov ebp, dword [esi + 0x10]
test ebp, ebp
je 0x453b35
mov dword [esp + 0x1e0], esi
movzx ebp, byte [esi + 0x29]
movzx esi, byte [esi + 0x28]
xchg esi, eax
cmp al, 4
xchg esi, eax
jne 0x45307f
and ebp, 0xfffffffd
xchg esi, eax
mov byte [esp + 0x1f], al
xchg esi, eax
cmp dword [esp + 0x1f4], ebx
jne 0x4530b6
cmp dword [esp + 0x200], edx
jne 0x4530ad
mov esi, dword [esp + 0x1e8]
cmp dword [esi + 0x3c], ebx
jne 0x4530bd
cmp dword [esi + 0x38], edx
jne 0x4530bd
and ebp, 0xfffffffd
jmp 0x4530bd
mov esi, dword [esp + 0x1e8]
jmp 0x4530bd
mov esi, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x204]
test ebx, ebx
je 0x4530e9
mov ebx, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ebx
mov ebx, dword [esp + 0x1e0]
jmp 0x4533ba
mov ebx, dword [esp + 0x238]
test ebx, 4
je 0x4532ee
mov eax, dword [esi + 0x18]
cmp dword [eax], esi
jne 0x4532ba
mov edx, dword [eax + 0x50]
test edx, edx
je 0x453286
cmp dword [edx + 0x18], eax
jne 0x45324f
movzx eax, byte [esp + 0x1f]
cmp al, 0xc
je 0x4531c0
cmp al, 0x13
jne 0x453189
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x200], eax
mov edi, dword [edx + 4]
mov esi, dword [edx]
mov eax, dword [edx + 0xcc]
mov ecx, dword [edx + 0xd0]
and ebp, 0xfffffffd
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0xa0]
jmp 0x453327
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x453327
mov dword [esp + 0x1dc], edx
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1f4], eax
mov dword [esp], eax
call fcn.0044d390
mov esi, dword [esp + 4]
mov ebp, dword [esp + 8]
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f0], ebp
movzx eax, byte [esi + 0x29]
mov byte [esp + 0x1d], al
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x1fc], edx
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x200], edx
mov edi, dword [ecx + 4]
mov edx, dword [ecx]
mov ebx, dword [ecx + 0xcc]
mov eax, dword [ecx + 0xd0]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c0], ebp
movzx ebp, byte [esp + 0x1d]
mov ecx, eax
mov eax, ebx
mov esi, edx
mov edx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x238]
jmp 0x453327
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x453327
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x453327
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov eax, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], eax
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
jmp 0x453327
mov eax, dword [esp + 0x1e0]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x1c8]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1e8]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1d8], edx
xchg ebp, eax
mov byte [esp + 0x1d], al
xchg ebp, eax
mov dword [esp + 0x2c], edi
mov ebx, dword [esp + 0x1f4]
mov eax, dword [esp + 0x1c4]
mov dword [esp], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
lea ebx, [esp + 0xdc]
mov dword [esp + 0xc], ebx
call fcn.0044de50
mov eax, dword [esp + 0x200]
add eax, dword [esp + 0x10]
mov dword [esp + 0x204], eax
add eax, 4
mov dword [esp + 0x204], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
movzx ebp, byte [esp + 0x1d]
mov ebx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x1d8]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1d8], esi
xchg ebp, eax
test al, 1
xchg ebp, eax
je 0x4533f0
mov dword [esp + 0x1fc], 0
xor ebp, ebp
xor eax, eax
mov dword [esp + 0x1bc], eax
xor eax, eax
jmp 0x453699
xchg ebp, eax
test al, 2
xchg ebp, eax
je 0x45343b
mov ebp, dword [esp + 0x230]
test ebp, ebp
je 0x453413
mov esi, dword [esp + 0x40]
test esi, esi
jle 0x453446
test ebp, ebp
je 0x453417
jmp 0x4546a6
mov esi, dword [esp + 0x40]
mov dword [esp + 0x1fc], 0
xor eax, eax
mov dword [esp + 0x1b0], eax
xor eax, eax
mov dword [esp + 0x1ac], eax
xor eax, eax
jmp 0x45367b
mov ebp, dword [esp + 0x230]
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0x1fc]
test eax, eax
jne 0x45346e
mov eax, dword [esp + 0x204]
add eax, 0xfffffffc
mov dword [esp + 0x44], eax
mov eax, dword [eax]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x44]
jmp 0x453470
xor eax, eax
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x1fc]
mov dword [esp], ecx
call fcn.0044d390
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4534ae
movzx ebx, byte [esp + 0x1b]
mov ebp, dword [esp + 0x230]
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x1d8]
jmp 0x453653
movzx ebx, byte [esp + 0x1b]
test bl, bl
je 0x4534e8
mov ebp, dword [esp + 0x1d8]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x8c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4534df
mov esi, dword [esp + 0x1c4]
cmp byte [esi + 0x28], 0x12
jne 0x4534f6
xor edx, edx
jmp 0x4534f8
mov esi, dword [esp + 0x1c4]
jmp 0x4534f6
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x1c4]
mov edx, ebx
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
mov edi, ebp
mov ebp, dword [esp + 0x230]
test ebp, ebp
jne 0x45351e
test dl, dl
jne 0x45351e
test ebp, ebp
jmp 0x45364d
mov dword [esp], esi
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.0044da80
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x78], ecx
mov edx, dword [eax + 0x54]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x1cc], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0x1fc]
mov dword [esp + 0x88], esi
call fcn.00435dc0
lea eax, [0x4d613c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004366c0
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4db90f]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.004366c0
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.004366c0
lea eax, [0x4d6796]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436540
call fcn.00435fe0
call fcn.00435e30
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1ec]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xc], ebx
call fcn.004562a0
mov edx, dword [esp + 0x230]
test edx, edx
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d4]
movzx ebx, byte [esp + 0x1b]
mov ebp, edx
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x1d8]
jne 0x454690
mov edx, dword [esp + 0x80]
mov ebx, esi
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1ac], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov esi, dword [esp + 0x1d8]
mov ebp, dword [esp + 0x1b0]
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x1bc], eax
xor eax, eax
mov dword [esp + 0x1b0], ebp
mov esi, dword [esp + 0x204]
mov dword [esp + 0x208], esi
add esi, 0xfffffffc
mov dword [esp + 0x208], esi
mov esi, dword [esp + 0x204]
mov dword [esp + 0x20c], esi
mov esi, dword [esp + 0x1f4]
mov dword [esp + 0x1f8], esi
movzx esi, byte [esp + 0x1a]
xchg esi, eax
test al, al
xchg esi, eax
je 0x45375a
mov ebp, dword [esp + 0x1ec]
mov dword [esp + 0x1e0], ebp
mov ebp, dword [ebp + 0xc]
test ebp, ebp
jne 0x453701
mov dword [esp + 0x1f8], 0
jmp 0x453753
mov eax, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x1e0]
mov ecx, dword [ecx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0044d140
mov eax, dword [esp + 0x1ec]
mov eax, dword [eax + 0xc]
add eax, dword [esp + 8]
inc eax
mov dword [esp + 0x1f8], eax
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
mov ebp, dword [esp + 0x1b0]
mov ebp, dword [esp + 0x230]
test ebp, ebp
jne 0x453770
mov ebp, dword [esp + 0x228]
test ebp, ebp
jmp 0x4537cc
mov eax, dword [ebp]
lea ecx, [esp + 0x1ec]
mov dword [esp], ecx
mov ebx, dword [esp + 0x234]
mov dword [esp + 4], ebx
mov edx, ebp
call eax
movzx eax, byte [esp + 8]
test al, al
je 0x453b23
mov ebx, dword [esp + 0x228]
test ebx, ebx
mov eax, 0
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x228]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
je 0x4538f9
mov ebp, dword [esp + 0x1f4]
mov ebx, dword [esp + 0x40]
test ebx, ebx
jne 0x4537f6
mov ebx, dword [esp + 0x238]
test ebx, 2
jne 0x453851
xchg esi, eax
test al, al
xchg esi, eax
jmp 0x453801
xchg esi, eax
test al, al
xchg esi, eax
mov ebx, dword [esp + 0x238]
jne 0x453851
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044d140
mov eax, dword [esp + 0x30]
cmp dword [esp + 8], eax
jne 0x453856
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x30]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
lea esi, [ebp + 1]
jmp 0x453878
lea ebp, [eax - 1]
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c4]
cmp byte [ebp + 0x2b], 3
ja 0x453896
xor eax, eax
mov dword [esp + 0x1a0], eax
xor eax, eax
jmp 0x4538e0
mov dword [esp + 0x68], esi
lea ebx, [ebp + 0x2b]
mov ebp, dword [ebp + 0x1c]
lea ebx, [ebx + ebp*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x1c0]
mov esi, dword [esi + 0xa0]
xchg ebp, eax
movzx eax, al
xchg ebp, eax
dec ebp
add ebx, esi
and ebx, ebp
mov ebp, dword [esp + 0x1c4]
mov esi, dword [esp + 0x68]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x238]
mov ebx, dword [esp + 0x1a0]
test ebx, ebx
jne 0x4544ca
movzx ebx, byte [esp + 0x1c]
jmp 0x4545d6
movzx ebp, byte [esp + 0x1b]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x453a14
mov ebp, dword [esp + 0x1f4]
mov dword [esp + 0x20], ebp
mov ebx, dword [esp + 0x40]
test ebx, ebx
jg 0x453934
mov ebx, dword [esp + 0x238]
test ebx, 2
je 0x453934
xor eax, eax
mov byte [esp + 0x1e], al
xor eax, eax
jmp 0x453986
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044d140
mov eax, dword [esp + 0x1f4]
cmp dword [esp + 8], eax
setb al
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x238]
mov ebp, dword [esp + 0x20]
movzx esi, byte [esp + 0x1a]
mov edi, dword [esp + 0x2c]
mov byte [esp + 0x1e], al
xor eax, eax
movzx ebx, byte [esp + 0x1e]
test bl, bl
je 0x453996
xchg esi, eax
test al, al
xchg esi, eax
jne 0x453996
dec ebp
mov ebx, dword [esp + 0x1c4]
cmp byte [ebx + 0x2b], 3
ja 0x4539a7
xor esi, esi
jmp 0x4539e5
mov dword [esp + 0x64], ebp
lea esi, [ebx + 0x2b]
mov ebx, dword [ebx + 0x1c]
lea ebx, [esi + ebx*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg esi, ebx
sete bl
xchg esi, ebx
mov ebp, dword [esp + 0x1c0]
mov ebp, dword [ebp + 0xa0]
xchg esi, eax
movzx eax, al
xchg esi, eax
dec esi
add ebx, ebp
and ebx, esi
mov ebp, dword [esp + 0x64]
mov esi, ebx
mov ebx, dword [esp + 0x1c4]
test esi, esi
jne 0x4539f3
movzx esi, byte [esp + 0x1c]
jmp 0x45406b
mov dword [esp + 0x19c], esi
lea edi, [esp + 0xb0]
call fcn.0045e905
movzx ecx, byte [esp + 0x1c]
mov edi, dword [esp + 0x34]
jmp 0x453e4e
movzx esi, byte [esp + 0x1c]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov ebp, dword [esp + 0x40]
inc ebp
cmp byte [ebx + 0x28], 4
jne 0x453ab8
mov esi, dword [esp + 0x5c]
test esi, esi
je 0x453aaf
mov ebx, dword [esp + 0x1c8]
mov ebx, dword [ebx + esi*4 - 4]
mov dword [esp + 0x58], ebx
mov ebx, dword [esp + 0x74]
test ebx, ebx
jne 0x453aa5
mov ebx, dword [esp + 0x230]
test ebx, ebx
jne 0x453aac
mov eax, dword [esp + 0x228]
mov dword [esp], eax
movzx edx, byte [esp + 0x1b]
mov byte [esp + 4], dl
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.00454d40
mov ebp, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x230]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0x2c]
jmp 0x453aac
mov ebx, dword [esp + 0x230]
dec esi
jmp 0x453ac3
mov ebx, dword [esp + 0x230]
jmp 0x453ac3
mov ebx, dword [esp + 0x230]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x40], ebp
mov ebx, dword [esp + 0x1c4]
movzx ebx, byte [ebx + 0x28]
cmp bl, 0x12
mov ebp, dword [esp + 0x1b0]
test ebp, ebp
je 0x453d32
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x1f4]
cmp dword [esp + 0x1fc], esi
jne 0x453b1b
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x200]
cmp dword [esp + 0x204], esi
je 0x453d46
cmp bl, 0x12
jmp 0x452fc1
cmp bl, 0x12
jmp 0x452fc1
mov eax, dword [esp + 0x40]
mov dword [esp + 0x23c], eax
add esp, 0x210
ret
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x40]
jmp 0x453b4a
mov eax, dword [esp + 0x34]
movzx edx, byte [esp + 0x1b]
test dl, dl
jne 0x453b55
mov eax, esi
mov edx, dword [esp + 0x230]
test edx, edx
je 0x453b72
cmp ecx, eax
jle 0x453b72
mov edx, dword [esp + 0x200]
mov ebx, dword [ebp + 0x40]
cmp ebx, edx
jne 0x453b80
mov dword [esp + 0x23c], eax
add esp, 0x210
ret
mov dword [esp + 0x88], edx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], eax
mov dword [esp + 0x1e8], ebp
mov eax, dword [ebp + 0x50]
mov dword [esp + 0x8c], eax
mov ecx, dword [ebp + 0x54]
mov dword [esp + 0x78], ecx
call fcn.00435dc0
lea eax, [0x4d5c4f]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.004366c0
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00436340
lea eax, [0x4d5ded]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436540
lea eax, [0x4d4b0c]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436540
call fcn.00435fe0
call fcn.00435e30
mov eax, dword [esp + 0x1e8]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x84], eax
call fcn.00435dc0
lea eax, [0x4d540b]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436540
lea eax, [0x50168c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436540
lea eax, [0x4d4a4c]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004366c0
mov eax, dword [esp + 0x40]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004364c0
lea eax, [0x4d4af8]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.004366c0
mov eax, dword [esp + 0x22c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004364c0
call fcn.00435fe0
call fcn.00435e30
lea eax, [0x4ddc39]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00434610
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x40]
jmp 0x453b4a
mov dword [esp + 0x84], esi
call fcn.00435dc0
lea eax, [0x4dc65f]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436540
lea eax, [0x4d499c]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00436540
call fcn.00435fe0
call fcn.00435e30
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1ec]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004562a0
lea eax, [0x4d7710]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00434610
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x19c]
movzx ebx, byte [edx + ecx]
mov byte [esp + 0x1c], bl
mov ebp, dword [esp + 0x1f0]
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0044d140
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x19c]
lea eax, [ecx + eax + 8]
mov ebp, dword [esp + 8]
add ebp, dword [eax]
mov ebx, dword [esp + 0x1c4]
movzx ecx, byte [esp + 0x1c]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x34], edi
mov byte [esp + 0x1c], cl
mov dword [esp + 0x20], ebp
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 0
call fcn.0044dff0
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x454047
cmp eax, 0x100000
jae 0x45446a
shl eax, 4
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x19c]
mov edx, dword [ecx + eax + 4]
mov dword [esp + 0xb4], edx
movzx edx, byte [ecx + eax]
mov byte [esp + 0xd8], dl
mov edx, dword [ecx + eax + 0xc]
mov dword [esp + 0xd4], edx
mov edx, dword [esp + 0x238]
test edx, 1
jne 0x453f2a
mov eax, dword [esp + 0x34]
test eax, eax
sete cl
movzx edx, byte [esp + 0xd8]
lea ebx, [esp + 0xb0]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1d8]
mov dword [esp + 8], esi
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
movzx ecx, byte [esp + 0x1c]
mov byte [esp + 0xe], cl
call fcn.00455bc0
movzx eax, byte [esp + 0x10]
test al, al
je 0x45403e
lea eax, [esp + 0xb0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c0]
mov dword [esp + 4], ecx
call fcn.0044da80
mov eax, dword [esp + 8]
mov dword [esp + 0x1a8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x1c4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
call fcn.0044ddf0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b8], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
call fcn.00435dc0
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.004366c0
lea eax, [0x4d4d23]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004366c0
call fcn.00435e30
call fcn.00435dc0
lea eax, [0x501630]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004366c0
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.004366c0
lea eax, [0x5016ac]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004366c0
mov eax, dword [esp + 0x4c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004364c0
call fcn.00435fe0
call fcn.00435e30
mov eax, dword [esp + 0x34]
lea edi, [eax + 1]
jmp 0x453df6
mov edi, dword [esp + 0x34]
jmp 0x453df6
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
movzx esi, byte [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x238]
test ebp, 1
je 0x454085
mov esi, 1
jmp 0x4540e7
mov eax, dword [esp + 0x34]
test eax, eax
sete cl
movzx edx, byte [ebx + 0x28]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1c0]
mov dword [esp + 4], ebp
mov edi, dword [esp + 0x1d8]
mov dword [esp + 8], edi
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.00455bc0
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, eax
xor eax, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4540f6
mov esi, dword [esp + 0x34]
jmp 0x454454
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.0044da80
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x1a4], ecx
mov edx, dword [esp + 0x1c4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
call fcn.0044ddf0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b4], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x38]
cmp ebx, 0xf
je 0x45416b
mov ebp, dword [esp + 0x1a4]
jmp 0x4541ad
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
lea ecx, [0x4d7689]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.004027f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x4541a2
mov ebx, 5
lea ebp, [0x4d4c60]
jmp 0x4541ad
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x1a4]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x1a4], ebp
call fcn.00435dc0
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.004366c0
lea eax, str.___.01246:__
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004366c0
call fcn.00435e30
mov eax, dword [esp + 0x20c]
mov ecx, dword [esp + 0x1c4]
mov dword [esp], ecx
mov edx, dword [esp + 0x1c0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], eax
call fcn.00454760
call fcn.00435dc0
lea eax, [0x4d47dc]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004366c0
call fcn.00435e30
call fcn.00435dc0
lea eax, [0x501630]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004366c0
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.004366c0
lea eax, [0x5016ac]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004366c0
mov eax, dword [esp + 0x48]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004364c0
call fcn.00435e30
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044d140
mov eax, dword [esp + 0x1f4]
cmp dword [esp + 8], eax
jae 0x45432c
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0044d140
mov eax, dword [esp + 0x1f4]
sub eax, dword [esp + 8]
mov dword [esp + 0x88], eax
call fcn.00435dc0
lea eax, [0x4d47ce]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436540
call fcn.00435e30
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x45435d
cmp dword [ecx + 0x70], 2
jb 0x454351
cmp dword [ecx + 0x50], eax
je 0x45436d
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jmp 0x454367
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jmp 0x454367
mov ecx, dword [esp + 0x8c]
cmp ecx, 2
jl 0x45441c
mov eax, dword [esp + 0x204]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x200]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x60], edx
call fcn.00435dc0
lea eax, [0x4d4980]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00436540
lea eax, [0x4d499c]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00436540
lea eax, [0x4d4994]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.004366c0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00436540
call fcn.00435e30
call fcn.00435dc0
call fcn.00435fe0
call fcn.00435e30
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x238]
mov edi, dword [esp + 0x2c]
mov esi, eax
xor eax, eax
movzx eax, byte [ebx + 0x28]
movzx ebp, byte [esp + 0x1b]
mov dword [esp + 0x34], esi
mov esi, eax
xor eax, eax
jmp 0x453a19
mov ecx, 0x100000
call fcn.0045e7c0
mov dword [esp + 0x74], ebx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x40], ecx
mov ebp, dword [esp + 0x1ec]
movzx esi, byte [edx + eax]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov edi, dword [esp + 0x1f0]
mov ebp, dword [ebp]
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0044d140
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x1a0]
lea eax, [ecx + eax + 8]
mov ebp, dword [esp + 8]
add ebp, dword [eax]
lea esi, [ebp + 1]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x1c4]
mov dword [esp + 0x88], esi
mov dword [esp], ebp
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xdc]
mov dword [esp + 0x10], ecx
call fcn.0044dff0
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4545af
cmp eax, 0x100000
jae 0x454686
shl eax, 4
mov edx, dword [esp + 0x1a0]
lea ebx, [edx + eax]
cmp byte [ebx], 0x15
jne 0x454549
movzx ebx, byte [esp + 0x1c]
cmp bl, 9
je 0x454549
cmp bl, 0x12
je 0x454549
cmp bl, 0xe
je 0x454549
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
jmp 0x454474
mov ebx, dword [esp + 0x74]
test ebx, ebx
jle 0x45456d
lea ecx, [ebx - 1]
mov ebp, dword [esp + 0x22c]
mov edi, dword [esp + 0x228]
mov ebx, ecx
mov ecx, dword [esp + 0x40]
jmp 0x454474
mov ebp, dword [esp + 0x22c]
mov esi, dword [esp + 0x40]
cmp ebp, esi
jle 0x4545a1
cmp esi, 0x100000
jae 0x45467a
mov ecx, dword [esp + 0x88]
mov edi, dword [esp + 0x228]
mov dword [edi + esi*4], ecx
lea ecx, [esi + 1]
jmp 0x454474
mov edi, dword [esp + 0x228]
mov ecx, esi
jmp 0x454474
xor eax, eax
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x1c4]
mov edi, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x1c]
mov esi, dword [esp + 0x88]
cmp byte [ebp + 0x28], 0x15
jne 0x4545fc
cmp bl, 9
je 0x4545fc
cmp bl, 0x12
je 0x4545fc
cmp bl, 0xe
je 0x4545fc
mov ebx, dword [esp + 0x228]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x74]
jmp 0x45463c
mov ebx, dword [esp + 0x74]
test ebx, ebx
jle 0x454614
dec ebx
mov ebp, dword [esp + 0x40]
mov esi, ebx
mov ebx, dword [esp + 0x228]
jmp 0x45463c
mov ebp, dword [esp + 0x40]
cmp ecx, ebp
jle 0x454631
cmp ebp, 0x100000
jae 0x45466e
mov ebx, dword [esp + 0x228]
mov dword [ebx + ebp*4], esi
inc ebp
jmp 0x454638
mov ebx, dword [esp + 0x228]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x1c4]
movzx ebx, byte [eax + 0x28]
dec ebp
xor eax, eax
mov dword [esp + 0x40], ebp
mov byte [esp + 0x1c], bl
mov dword [esp + 0x74], esi
mov ebx, dword [esp + 0x1c4]
mov ebp, dword [esp + 0x228]
movzx esi, byte [esp + 0x1a]
jmp 0x4538f9
mov eax, ebp
mov ecx, 0x100000
call fcn.0045e7c0
mov eax, esi
mov ecx, 0x100000
call fcn.0045e7c0
mov ecx, 0x100000
call fcn.0045e7c0
lea eax, [0x4d81d0]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00434610
mov dword [esp], ebx
mov eax, dword [esp + 0x1c0]
mov dword [esp + 4], eax
call fcn.0044da80
mov eax, dword [esp + 8]
mov dword [esp + 0x1cc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x74], ecx
call fcn.00435dc0
lea eax, [0x4de719]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.004366c0
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
call fcn.004366c0
call fcn.00435fe0
call fcn.00435e30
lea eax, [0x4d58ba]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00434610
lea eax, [0x4e0584]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00434610
lea eax, [0x4e0390]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.00434610
nop
call fcn.0045d330
jmp fcn.00452ca0