Function at 0x54d9b0
Capabilities:
Parse url

Disassembly:
push 0xffffffffffffffff
push 0x65f7af
mov eax, dword fs:[0]
push eax
mov eax, 0x2848
call fcn.006222c0
mov eax, dword [0x758898]
xor eax, esp
mov dword [esp + 0x2844], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x758898]
xor eax, esp
push eax
lea eax, [esp + 0x285c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x286c]
mov eax, esi
mov ebp, ecx
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x54da00
sub eax, edx
cmp eax, 0x2800
ja 0x54e31e
push esi
call fcn.00406c50
add esp, 4
test eax, eax
jne 0x54e31e
lea edx, [esp + 0x58]
mov eax, esi
sub edx, esi
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x54da30
lea ecx, [esp + 0x38]
call fcn.004024f0
mov dword [esp + 0x2864], 0
lea ecx, [esp + 0x30]
call fcn.004024f0
mov byte [esp + 0x2864], 1
lea eax, [esp + 0x58]
push 0x40
push eax
mov byte [esp + 0x27], 0
call fcn.00622170
add esp, 8
test eax, eax
je 0x54dc1e
lea ecx, [esp + 0x58]
push 0x679990
push ecx
call fcn.00622230
mov esi, eax
add esp, 8
test esi, esi
je 0x54dc1e
mov edx, esi
lea eax, [esp + 0x58]
sub edx, eax
cmp edx, 8
jg 0x54dc1e
mov eax, esi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x54dab0
sub eax, edx
cmp eax, 4
jbe 0x54dc1e
add esi, 3
push 0x68a838
push esi
call fcn.006232f0
add esp, 8
test eax, eax
je 0x54dc1e
cmp byte [eax], 0x40
jne 0x54dc1e
inc eax
push 0x68a838
push eax
call fcn.006232f0
mov edi, eax
add esp, 8
cmp byte [edi], 0x40
jne 0x54dc1e
mov edi, edi
lea eax, [edi + 1]
push 0x68a838
push eax
call fcn.006232f0
add esp, 8
test eax, eax
je 0x54db1e
cmp byte [eax], 0x40
jne 0x54db1e
mov edi, eax
jmp 0x54db00
lea ecx, [esp + 0x28]
call fcn.004024f0
mov byte [esp + 0x2864], 2
mov ebx, edi
sub ebx, esi
lea ecx, [ebx + 1]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00402840
push ebx
push esi
push eax
mov dword [esp + 0x38], eax
call fcn.00622730
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x48]
push ecx
push eax
mov byte [eax + ebx], 0
call fcn.0054ce30
add esp, 0x18
test eax, eax
je 0x54dc0d
lea ecx, [esp + 0x20]
mov byte [esp + 0x1f], 1
call fcn.004024f0
mov byte [esp + 0x2864], 3
lea edx, [esp + 0x58]
sub esi, edx
lea eax, [esi + 1]
push eax
lea ecx, [esp + 0x24]
call fcn.00402840
push esi
lea ecx, [esp + 0x5c]
mov ebx, eax
push ecx
push ebx
call fcn.00622730
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [ebx + esi], 0
call fcn.004024f0
mov byte [esp + 0x2864], 4
mov edx, dword [esp + 0x20]
inc edi
push edi
push edx
lea eax, [esp + 0x20]
push 0x678de0
push eax
call fcn.00402f60
mov ecx, dword [esp + 0x28]
push 0x2800
push ecx
lea edx, [esp + 0x70]
push edx
call fcn.00405470
add esp, 0x1c
mov byte [esp + 0x2864], 3
lea ecx, [esp + 0x18]
call fcn.00402560
mov byte [esp + 0x2864], 2
lea ecx, [esp + 0x20]
call fcn.00402560
mov byte [esp + 0x2864], 1
lea ecx, [esp + 0x28]
call fcn.00402560
lea eax, [esp + 0x58]
push 0x679990
push eax
call fcn.00622230
add esp, 8
test eax, eax
je 0x54dfde
add eax, 4
push 0x2f
push eax
call fcn.00622170
mov esi, eax
add esp, 8
test esi, esi
je 0x54dfde
inc esi
push 0x6aafc0
push esi
mov dword [esp + 0x58], esi
call fcn.00622230
add esp, 8
test eax, eax
jne 0x54dc7d
push str._26
push esi
call fcn.00622230
add esp, 8
test eax, eax
je 0x54dfde
lea ecx, [esp + 0x20]
call fcn.004024f0
mov byte [esp + 0x2864], 5
push esi
lea ecx, [esp + 0x24]
push 0x678ea8
push ecx
call fcn.00402f60
add esp, 0xc
push 0x6aafc0
push str._26
lea ecx, [esp + 0x28]
call fcn.00402c00
mov edx, dword [esp + 0x20]
push 0x6aafc0
push edx
call fcn.00622230
add esp, 8
mov byte [esp + 0x27], 0
test eax, eax
je 0x54dfcd
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x54dcd8
sub ecx, esi
cmp ecx, 3
jbe 0x54df78
lea edi, [eax + 2]
push 0x3b
push edi
call fcn.00622170
add esp, 8
test eax, eax
je 0x54df78
sub eax, edi
mov ebx, eax
je 0x54df3e
push 0x6aafc0
lea ecx, [esp + 0x38]
call fcn.004030a0
mov byte [esp + 0x2864], 6
lea ecx, [esp + 0x18]
call fcn.004024f0
mov byte [esp + 0x2864], 7
mov al, byte [edi]
mov byte [esp + 0x17], 1
mov byte [esp + 0x26], 1
cmp al, 0x78
je 0x54dd9c
cmp al, 0x58
je 0x54dd9c
xor esi, esi
mov byte [esp + 0x26], 0
test ebx, ebx
jbe 0x54de11
movsx eax, byte [esi + edi]
push eax
call fcn.00622b6c
add esp, 4
test eax, eax
jne 0x54dd6b
mov byte [esp + 0x17], al
jmp 0x54dd95
mov cl, byte [esi + edi]
mov byte [esp + 0x44], cl
mov edx, dword [esp + 0x44]
push edx
lea ecx, [esp + 0x38]
call fcn.00415b50
mov al, byte [esi + edi]
mov byte [esp + 0x54], al
mov ecx, dword [esp + 0x54]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00415b50
inc esi
cmp esi, ebx
jb 0x54dd54
jmp 0x54de06
mov byte [esp + 0x4c], al
mov edx, dword [esp + 0x4c]
push edx
lea ecx, [esp + 0x38]
call fcn.00415b50
mov esi, 1
cmp ebx, esi
jbe 0x54de11
jmp 0x54ddc0
movsx eax, byte [esi + edi]
push eax
call fcn.00622bf0
add esp, 4
test eax, eax
jne 0x54ddd7
mov byte [esp + 0x17], al
jmp 0x54de01
mov cl, byte [esi + edi]
mov byte [esp + 0x40], cl
mov edx, dword [esp + 0x40]
push edx
lea ecx, [esp + 0x38]
call fcn.00415b50
mov al, byte [esi + edi]
mov byte [esp + 0x48], al
mov ecx, dword [esp + 0x48]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00415b50
inc esi
cmp esi, ebx
jb 0x54ddc0
cmp byte [esp + 0x17], 0
je 0x54df56
push 0x68a8ac
lea ecx, [esp + 0x38]
mov byte [esp + 0x2b], 1
call fcn.00403060
cmp byte [esp + 0x26], 0
je 0x54de73
push 0x68d014
lea ecx, [esp + 0x40]
call fcn.004030a0
mov byte [esp + 0x2864], 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x40]
call fcn.0040e6d0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00402c00
mov byte [esp + 0x2864], 7
lea ecx, [esp + 0x3c]
jmp 0x54df17
lea ecx, [esp + 0x28]
call fcn.004024f0
mov byte [esp + 0x2864], 9
mov edx, dword [esp + 0x18]
push edx
call fcn.006223c1
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 4
mov word [esp + 0x2c], ax
xor eax, eax
push eax
push eax
push eax
push eax
push 0xffffffffffffffff
lea ecx, [esp + 0x40]
push ecx
push eax
push 0xfde9
mov word [esp + 0x4e], ax
call ebx
mov esi, eax
test esi, esi
je 0x54df0b
push esi
lea ecx, [esp + 0x2c]
call fcn.00402840
push 0
push 0
push esi
push eax
push 0xffffffffffffffff
lea edx, [esp + 0x40]
push edx
push 0
push 0xfde9
call ebx
test eax, eax
je 0x54df0b
mov eax, dword [esp + 0x28]
push eax
call fcn.004af0a0
mov esi, eax
add esp, 4
test esi, esi
je 0x54df0b
mov ecx, dword [esp + 0x34]
push esi
push ecx
lea ecx, [esp + 0x28]
call fcn.00402c00
push esi
call fcn.005f4e52
add esp, 4
mov byte [esp + 0x2864], 7
lea ecx, [esp + 0x28]
call fcn.00402560
mov byte [esp + 0x2864], 6
lea ecx, [esp + 0x18]
call fcn.00402560
mov byte [esp + 0x2864], 5
lea ecx, [esp + 0x34]
call fcn.00402560
push 0x6aafc0
push edi
call fcn.00622230
add esp, 8
test eax, eax
jne 0x54dcd3
jmp 0x54df78
mov byte [esp + 0x2864], 6
lea ecx, [esp + 0x18]
call fcn.00402560
mov byte [esp + 0x2864], 5
lea ecx, [esp + 0x34]
call fcn.00402560
cmp byte [esp + 0x27], 0
je 0x54dfcd
mov eax, dword [esp + 0x20]
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x54df88
mov edx, dword [esp + 0x50]
sub ecx, esi
lea esi, [esp + 0x2858]
sub esi, edx
cmp ecx, esi
jge 0x54dfcd
mov byte [edx], 0
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x54dfa7
lea edi, [esp + 0x58]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x54dfb7
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x2864], 1
lea ecx, [esp + 0x20]
call fcn.00402560
lea edx, [esp + 0x58]
push edx
call fcn.0054c4f0
push 0x3c
mov byte [ebp + 0x7918], al
mov eax, dword [esp + 0x2878]
lea esi, [ebp + 4]
push 0
push esi
mov dword [ebp + 0x7914], eax
call fcn.00621270
lea eax, [ebp + 0x2840]
lea ecx, [ebp + 0x5040]
mov byte [eax], 0
mov dword [ebp + 0x14], eax
lea eax, [ebp + 0x5108]
mov byte [ecx], 0
mov dword [ebp + 0x28], ecx
add esp, 0x10
xor ecx, ecx
lea edi, [ebp + 0x40]
lea ebx, [ebp + 0x7908]
lea edx, [ebp + 0x50a4]
mov dword [ebp + 0x30], eax
lea eax, [esp + 0x58]
mov word [ebp + 0x1c], cx
mov byte [ebp + 0x791c], cl
mov byte [ebp + 0x791d], cl
mov byte [ebp + 0x791e], cl
mov byte [edi], 0
mov byte [ebx], 0
mov byte [ebp + 0x5108], 0
mov byte [edx], 0
mov dword [esi], 0x3c
mov dword [ebp + 0x3c], 0x2800
mov dword [ebp + 0x18], 0x2800
mov dword [ebp + 0x2c], 0x64
mov dword [ebp + 0xc], 0xa
mov dword [ebp + 0x34], 0x2800
mov dword [ebp + 0x24], 0x64
mov dword [ebp + 0x38], edi
mov dword [ebp + 8], ebx
mov dword [ebp + 0x20], edx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x54e0a3
push esi
push 0
sub eax, ecx
push eax
lea edx, [esp + 0x64]
push edx
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x54e2f9
push 0x26
lea ebx, [ebp + 0x5108]
push ebx
call fcn.00622170
add esp, 8
test eax, eax
je 0x54e0f1
push str._IDMAppersandRpl_SS_P789EO96_
push ebx
call fcn.00622230
add esp, 8
test eax, eax
jne 0x54e0f1
mov byte [ebp + 0x791c], 1
push 0x5b
push ebx
call fcn.00622170
add esp, 8
test eax, eax
je 0x54e119
push str._IDM_LSB_Rpl_SS_P789EO96_
push ebx
call fcn.00622230
add esp, 8
test eax, eax
jne 0x54e119
mov byte [ebp + 0x791d], 1
push 0x5d
push ebx
call fcn.00622170
add esp, 8
test eax, eax
je 0x54e141
push str._IDM_RSB_Rpl_SS_P789EO96_
push ebx
call fcn.00622230
add esp, 8
test eax, eax
jne 0x54e141
mov byte [ebp + 0x791e], 1
push 3
push 0x679bec
lea ebx, [ebp + 0x7908]
push ebx
call fcn.006255fd
add esp, 0xc
test eax, eax
je 0x54e1d6
push 3
push 0x679be0
push ebx
call fcn.006255fd
add esp, 0xc
test eax, eax
je 0x54e1d6
push 4
push str.rtmp
push ebx
call fcn.006255fd
add esp, 0xc
test eax, eax
je 0x54e1d6
cmp byte [ebp + 0x7918], 0
jne 0x54e1e3
lea eax, [ebp + 0x5108]
push 0x25
push eax
call fcn.00622170
add esp, 8
test eax, eax
je 0x54e1d6
mov bl, 0x30
cmp byte [eax], 0x25
jne 0x54e260
cmp byte [eax + 1], 0x32
lea ecx, [eax + 1]
jne 0x54e260
cmp byte [eax + 2], bl
jne 0x54e260
cmp byte [ecx], 0
je 0x54e1d6
push 0x25
push ecx
call fcn.00622170
add esp, 8
test eax, eax
jne 0x54e1a3
cmp byte [ebp + 0x7918], 0
je 0x54e36c
mov eax, dword [ebp + 0x30]
push eax
lea ecx, [esp + 0x30]
call fcn.004030a0
mov byte [esp + 0x2864], 0xa
mov ebx, dword [esp + 0x2870]
mov ecx, dword [ebp + 0x30]
push ebx
push ecx
call fcn.005b8290
lea eax, [ebp + 0x7908]
push 0x679bec
push eax
call fcn.006226ae
add esp, 0x10
test eax, eax
jne 0x54e35b
mov edx, dword [ebp + 0x30]
push edx
call fcn.0054c4f0
add esp, 4
test al, al
je 0x54e35b
mov ecx, dword [esp + 0x2c]
mov eax, dword [ebp + 0x30]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x54e26c
test dl, dl
je 0x54e25c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x54e26c
add eax, 2
add ecx, 2
test dl, dl
jne 0x54e240
xor eax, eax
jmp 0x54e271
mov ecx, ebp
call fcn.0054cbf0
jmp 0x54e612
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x54e35b
push edi
lea ecx, [esp + 0x2c]
call fcn.004030a0
mov byte [esp + 0x2864], 0xb
mov eax, 0x2800
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x18], eax
mov ecx, 0x64
mov dword [ebp + 0x34], eax
lea eax, [esp + 0x58]
mov dword [esi], 0x3c
mov dword [ebp + 0x2c], ecx
mov dword [ebp + 0xc], 0xa
mov dword [ebp + 0x24], ecx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x54e2b8
push esi
sub eax, edx
push 0x10000000
push eax
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
jne 0x54e325
mov byte [esp + 0x2864], 0xa
lea ecx, [esp + 0x28]
call fcn.00402560
mov byte [esp + 0x2864], 1
lea ecx, [esp + 0x2c]
call fcn.00402560
mov byte [esp + 0x2864], 0
lea ecx, [esp + 0x30]
call fcn.00402560
mov dword [esp + 0x2864], 0xffffffff
lea ecx, [esp + 0x38]
call fcn.00402560
xor eax, eax
jmp 0x54e63c
mov ecx, dword [ebp + 0x30]
push ebx
push ecx
call fcn.005b8290
mov ecx, dword [esp + 0x30]
mov edx, dword [ebp + 0x38]
add esp, 8
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x54e340
mov byte [esp + 0x2864], 0xa
lea ecx, [esp + 0x28]
call fcn.00402560
mov byte [esp + 0x2864], 1
lea ecx, [esp + 0x2c]
jmp 0x54e4c6
push edi
lea ecx, [esp + 0x1c]
call fcn.004030a0
mov byte [esp + 0x2864], 0xc
mov eax, 0x64
mov edi, 0x2800
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x24], eax
lea eax, [esp + 0x58]
mov dword [esi], 0x3c
mov dword [ebp + 0x3c], edi
mov dword [ebp + 0x18], edi
mov dword [ebp + 0xc], 0xa
mov dword [ebp + 0x34], edi
lea edx, [eax + 1]
jmp 0x54e3b0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x54e3b0
push esi
sub eax, edx
push 0x10000000
push eax
lea edx, [esp + 0x64]
push edx
call dword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
jne 0x54e3e0
mov byte [esp + 0x2864], 1
lea ecx, [esp + 0x18]
jmp 0x54e2f4
lea eax, [ebp + 0x5108]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x54e3f0
sub eax, edx
xor ecx, ecx
test eax, eax
jle 0x54e463
nop
cmp byte [ecx + ebp + 0x5108], 0x7f
lea esi, [ebp + 0x5108]
ja 0x54e417
inc ecx
cmp ecx, eax
jl 0x54e400
jmp 0x54e463
push 0x25
push esi
call fcn.00622170
add esp, 8
test eax, eax
jne 0x54e463
push esi
call fcn.004af0a0
add esp, 4
test eax, eax
je 0x54e463
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x54e438
sub ecx, esi
cmp ecx, edi
jae 0x54e45a
lea esi, [ebp + 0x5108]
mov ecx, eax
sub esi, eax
nop
mov dl, byte [ecx]
mov byte [ecx + esi], dl
inc ecx
test dl, dl
jne 0x54e450
push eax
call fcn.005f4e52
add esp, 4
mov eax, dword [esp + 0x18]
push 0x23
push eax
call fcn.00622170
mov esi, eax
add esp, 8
test esi, esi
je 0x54e4a5
push 0x67a490
lea edi, [ebp + 0x7908]
push edi
call fcn.006226ae
add esp, 8
test eax, eax
je 0x54e4a2
push 0x679be4
push edi
call fcn.006226ae
add esp, 8
test eax, eax
jne 0x54e4a5
mov byte [esi], 0
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0x38]
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x54e4b0
mov byte [esp + 0x2864], 1
lea ecx, [esp + 0x18]
call fcn.00402560
mov ecx, ebp
call fcn.0054cbf0
cmp byte [ebp + 0x791c], 0
je 0x54e4fa
lea eax, [ebp + 0x5108]
push str._IDMAppersandRpl_SS_P789EO96_
push eax
call fcn.00622230
add esp, 8
test eax, eax
je 0x54e4fa
mov byte [ebp + 0x791c], 0
cmp byte [ebp + 0x791d], 0
je 0x54e522
lea eax, [ebp + 0x5108]
push str._IDM_LSB_Rpl_SS_P789EO96_
push eax
call fcn.00622230
add esp, 8
test eax, eax
je 0x54e522
mov byte [ebp + 0x791d], 0
cmp byte [ebp + 0x791e], 0
je 0x54e54a
lea eax, [ebp + 0x5108]
push str._IDM_RSB_Rpl_SS_P789EO96_
push eax
call fcn.00622230
add esp, 8
test eax, eax
je 0x54e54a
mov byte [ebp + 0x791e], 0
cmp byte [esp + 0x1f], 0
je 0x54e5a1
mov ecx, dword [esp + 0x38]
mov eax, ecx
lea esi, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x54e560
sub eax, esi
cmp eax, 0x64
jae 0x54e5a1
mov eax, dword [esp + 0x30]
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x54e575
sub eax, esi
cmp eax, 0x64
jae 0x54e5a1
mov edx, dword [ebp + 0x20]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x54e586
mov ecx, dword [esp + 0x30]
mov edx, dword [ebp + 0x28]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x54e597
push 0x679be0
lea esi, [ebp + 0x7908]
push esi
call fcn.006226ae
add esp, 8
test eax, eax
jne 0x54e5cc
xor ecx, ecx
cmp cx, word [ebp + 0x1c]
jne 0x54e5cc
mov edx, 0x6db
mov word [ebp + 0x1c], dx
jmp 0x54e612
push str.rtmp
push esi
call fcn.006226ae
add esp, 8
test eax, eax
jne 0x54e5ef
cmp ax, word [ebp + 0x1c]
jne 0x54e5ef
mov ecx, 0x78f
mov word [ebp + 0x1c], cx
jmp 0x54e612
push str.rtmpt
push esi
call fcn.006226ae
add esp, 8
test eax, eax
jne 0x54e612
xor edx, edx
cmp dx, word [ebp + 0x1c]
jne 0x54e612
mov eax, 0x50
mov word [ebp + 0x1c], ax
mov byte [esp + 0x2864], 0
lea ecx, [esp + 0x30]
call fcn.00402560
mov dword [esp + 0x2864], 0xffffffff
lea ecx, [esp + 0x38]
call fcn.00402560
mov eax, 1
mov ecx, dword [esp + 0x285c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2844]
xor ecx, esp
call fcn.00620b8d
add esp, 0x2854
ret 8