Function at 0x4486c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x5f7a94]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x68]
cmp eax, dword [ecx + 8]
jbe 0x4499c2
sub esp, 0xe8
mov ebp, dword [esp + 0xec]
test byte [ebp], al
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0xfc]
lea edx, [edi + esi]
cmp edx, 0x10000
ja 0x4499b7
mov eax, ebp
mov ebp, dword [esp + 0xf0]
test byte [ebp], al
mov ecx, edx
shl edx, 1
lea ebx, [edi + esi - 0x20000]
neg ebx
mov edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
lea edi, [ebp + edx]
cmp ebx, ecx
jb 0x4499b0
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], edx
mov dword [esp + 0xa0], edi
mov ebx, dword [0x5f7ab8]
mov esi, dword [0x5f7abc]
test esi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
seta dl
test ebx, ebx
seta bl
and esi, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x448779
xor edx, edx
xor ebx, ebx
jmp 0x4487a5
call fcn.0046e2d0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 0xf0]
mov edi, dword [esp + 0xa0]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ebx
xor esi, esi
xor esi, esi
mov dword [esp + 0x2c], esi
jmp 0x4487c4
inc esi
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x24]
cmp esi, ecx
jge 0x4488cf
lea edx, [eax + esi*8]
mov edx, dword [edx]
test edx, edx
je 0x4488a2
mov dword [esp + 0x40], esi
mov edx, dword [edx + 0x14]
test edx, edx
je 0x448809
mov dword [esp], edx
call fcn.00454190
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0xa0]
mov ebx, dword [esp + 0x2c]
lea edx, [ebx + 1]
mov dword [esp + 0x84], edx
mov edi, dword [0x5f7a94]
mov edi, dword fs:[edi]
mov edi, dword [edi]
mov edi, dword [edi + 0x18]
mov eax, dword [edi + 0x448]
mov dword [esp + 0x28], eax
mov esi, dword [edi + 0x44c]
shl eax, 0x11
mov ebx, dword [esp + 0x28]
xor eax, ebx
mov ebx, esi
xor esi, eax
shr eax, 7
xor eax, esi
mov esi, ebx
shr ebx, 0x10
xor ebx, eax
lea eax, [esi + ebx]
mul edx
mov dword [edi + 0x448], esi
mov dword [edi + 0x44c], ebx
cmp edx, ecx
jae 0x4499a9
movzx ebx, word [ebp + edx*2]
mov eax, dword [esp + 0x2c]
cmp eax, ecx
jae 0x4499a4
mov word [ebp + eax*2], bx
mov ebx, dword [esp + 0x40]
mov word [ebp + edx*2], bx
mov eax, dword [esp + 0xec]
mov esi, ebx
mov edi, dword [esp + 0xa0]
mov edx, dword [esp + 0x84]
jmp 0x4487b7
mov edx, dword [0x5f7bb0]
lea ebx, [eax + esi*8 + 4]
test edx, edx
je 0x4488c0
mov edx, dword [ebx]
call fcn.0046e460
mov dword [edi], edx
mov edi, dword [esp + 0xa0]
mov dword [ebx], 0
mov edx, dword [esp + 0x2c]
jmp 0x4487b7
mov esi, dword [esp + 0x2c]
cmp esi, ecx
ja 0x44999b
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
jmp 0x44890c
mov word [edi + edx*2], ax
lea eax, [ebx + 1]
mov edx, dword [esp + 0xec]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xec]
mov edx, dword [esp + 0x3c]
cmp edx, esi
jge 0x44894b
movzx ebx, word [ebp + edx*2]
cmp ebx, ecx
jae 0x449994
lea ebx, [eax + ebx*8]
mov ebx, dword [ebx]
mov dword [esp + 0xbc], ebx
jmp 0x44992f
mov ebp, dword [esp + 0xf0]
mov ebx, dword [esp + 0x3c]
movzx eax, word [ebp + ebx*2]
cmp edx, esi
jb 0x4488eb
jmp 0x449972
lea edx, [esi - 1]
jmp 0x448977
movzx esi, word [esp + 0x1c]
mov word [edi + ebx*2], si
dec edx
mov ebx, dword [esp + 0xf0]
mov esi, dword [esp + 0x88]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0xf0]
mov esi, dword [esp + 0x2c]
test edx, edx
jl 0x4489e3
cmp edx, esi
jae 0x449908
movzx ebx, word [edi + edx*2]
mov word [esp + 0x1c], bx
movzx ebx, bx
cmp ebx, ecx
jae 0x449901
mov dword [esp + 0x38], edx
lea ebx, [eax + ebx*8]
mov esi, dword [esp + 0x88]
movzx ebp, word [ebp + esi]
mov ebx, dword [ebx]
mov dword [esp + 0xb8], ebx
mov word [edi + edx*2], bp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x58]
jmp 0x44981f
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
cmp ebx, ebp
jb 0x448950
jmp 0x4498bf
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.004484f0
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
xor esi, esi
jmp 0x448a4d
mov edi, dword [esp + 0x88]
lea esi, [edi + 1]
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xec]
mov ebp, dword [esp + 0xf0]
cmp esi, edx
jge 0x448e31
movzx edi, word [ebp + esi*2]
cmp edi, ecx
jae 0x4497e8
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], edi
lea ebp, [ebx + edi*8]
mov ebp, dword [ebp]
mov dword [esp + 0xb0], ebp
cmp eax, edi
jle 0x448ab7
mov edi, dword [ebp + 0x10]
test edi, edi
jne 0x4497db
lea eax, [ebp + 0x24]
mov dword [esp], eax
call fcn.00405db0
mov eax, dword [esp + 4]
test eax, eax
jne 0x448b8e
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx]
cmp dword [edx + 4], ebx
jbe 0x448a23
jmp 0x448af2
test byte [ebp], al
lea eax, [ebp + 0x2c]
mov dword [esp], eax
call fcn.00405db0
mov eax, dword [esp + 4]
test eax, eax
jne 0x448d7f
mov edx, dword [esp + 0xb0]
mov ebx, dword [edx]
test ebx, ebx
ja 0x448cb8
mov ebx, dword [edx + 0x10]
test ebx, ebx
je 0x448a23
jmp 0x448c3d
mov eax, dword [edx + 0x18]
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0xec]
lea ebp, [ebx + ecx*8 + 4]
mov ebp, dword [ebp]
movzx esi, word [edx + 0xc]
imul esi, dword [edx + 0x1c]
add esi, dword [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00467020
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x1c]
inc ecx
mov dword [eax + 0x1c], ecx
cmp dword [eax + 4], ecx
jne 0x448b3f
mov dword [eax + 0x1c], 0
inc dword [eax]
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.00448580
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x84]
xor ebx, ebx
jmp 0x448eb8
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xec]
lea ebx, [edx + ecx*8 + 4]
lea edi, [esp + 0xcc]
mov ebp, eax
xor eax, eax
call fcn.0046e659
lea ecx, [0x4499d0]
mov dword [esp + 0xcc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe4], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xdc], ecx
mov ecx, dword [ebx]
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
lea ecx, [esp + 0xcc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00404f50
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x84]
xor ebx, ebx
jmp 0x448eb8
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00448580
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xec]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
test ecx, ecx
je 0x448ca7
mov eax, dword [esp + 0xb0]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040dbd0
mov eax, dword [esp + 0x84]
mov ecx, 0xffffffff
mov edx, 0xffffffff
xor ebx, ebx
jmp 0x448eb8
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xec]
lea ebx, [ecx + eax*8 + 4]
mov ebx, dword [ebx]
movzx ebp, word [edx + 0xc]
imul ebp, dword [edx + 0x20]
nop
add ebp, dword [edx + 8]
test ebx, ebx
je 0x448d04
mov dword [esp + 0x98], ebp
mov eax, dword [edx + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00467020
mov edx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x98]
mov eax, dword [edx + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040dbd0
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x20]
inc ecx
mov dword [eax + 0x20], ecx
cmp dword [eax + 4], ecx
jne 0x448d2d
mov dword [eax + 0x20], 0
dec dword [eax]
mov eax, dword [esp + 0xec]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.00448580
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x84]
mov ebx, 1
jmp 0x448eb8
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xec]
lea ebx, [edx + ecx*8 + 4]
lea edi, [esp + 0xcc]
mov ebp, eax
xor eax, eax
call fcn.0046e659
lea ecx, [0x449a20]
mov dword [esp + 0xcc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xd0], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe4], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xdc], ecx
mov ecx, dword [ebx]
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
lea ecx, [esp + 0xcc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00405b10
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x84]
mov ebx, 1
jmp 0x448eb8
movzx ebp, byte [esp + 0x100]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x448e84
mov ebp, dword [0x5f7a94]
mov ebp, dword fs:[ebp]
mov ebp, dword [ebp]
mov esi, dword [ebp + 0xc0]
test esi, esi
jne 0x4497c5
mov dword [esp + 0xa8], ebp
lea esi, [ebp + 0xc0]
mov edi, dword [esp + 0xa0]
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x70]
jmp 0x448f5e
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.00448580
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, 0xffffffff
xor ebx, ebx
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
test edx, edx
xchg edi, ebx
seta bl
xchg edi, ebx
and ebp, edi
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x448f0c
mov byte [esp + 0x1a], bl
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
sub edx, eax
mov dword [esp], edx
mov eax, dword [esp + 0x24]
sbb ecx, eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.00467690
mov eax, dword [esp + 0x44]
movzx ebx, byte [esp + 0x1a]
mov dword [esp + 0x104], eax
mov byte [esp + 0x108], bl
add esp, 0xe8
ret
mov ecx, dword [esp + 0x88]
inc ecx
add eax, 0x2c
mov edi, dword [esp + 0xa0]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x2c]
mov edx, ebp
mov ebp, dword [esp + 0xa8]
mov dword [esp + 0x88], ecx
mov esi, eax
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x9c], esi
mov esi, dword [esp + 0x88]
cmp esi, edx
jge 0x4491db
movzx edi, word [edi + esi*2]
cmp edi, ecx
jae 0x4497be
mov dword [esp + 0x84], edi
lea eax, [ebx + edi*8]
mov eax, dword [eax]
mov dword [esp + 0xb4], eax
call fcn.00437e40
mov eax, dword [esp]
test byte [eax], al
mov ecx, dword [0x5f7bb0]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0xec]
lea ebp, [ebx + edx*8 + 4]
mov esi, dword [esp + 0x20]
test esi, esi
xchg edi, ebx
setne bl
xchg edi, ebx
mov esi, dword [esp + 0x24]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edi
test ecx, ecx
je 0x448fef
call fcn.0046e470
mov ebx, dword [esp + 0xa8]
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov ebx, dword [esp + 0xec]
mov edi, dword [esp + 0xa8]
mov dword [eax], edi
mov byte [eax + 0x24], 1
mov ecx, dword [0x5f7bb0]
mov ebp, dword [ebp]
test ecx, ecx
je 0x44901d
call fcn.0046e470
mov dword [edi], ebp
mov ecx, dword [eax + 0xc]
mov dword [edi + 4], ecx
mov edi, dword [esp + 0xa8]
mov dword [eax + 0xc], ebp
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
xchg esi, eax
test al, al
xchg esi, eax
je 0x449042
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x1c], 0xffffffff
mov ebp, dword [0x5f7bb0]
test ebp, ebp
jne 0x44905c
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0x9c]
jmp 0x44907f
call fcn.0046e490
mov ebp, dword [esp + 0xb4]
mov dword [edi], ebp
mov esi, dword [eax + 0x34]
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov esi, dword [esp + 0x9c]
mov ecx, dword [esi]
mov dword [edi + 0xc], ecx
mov dword [eax + 0x34], ebp
mov dword [esi], eax
mov esi, dword [esp + 0xf8]
cmp esi, edx
jle 0x449121
test byte [ebp], al
mov edx, dword [0x5f7bb0]
test edx, edx
je 0x4490aa
mov edx, dword [eax + 4]
call fcn.0046e460
mov dword [edi], edx
mov dword [eax + 4], 0
mov edx, dword [ebp + 0x30]
test edx, edx
je 0x4490ec
mov edi, dword [0x5f7bb0]
test edi, edi
je 0x4490de
call fcn.0046e4a0
mov dword [edi], edx
mov ecx, dword [eax + 8]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov ecx, dword [edx + 4]
mov dword [edi + 0xc], ecx
mov ecx, dword [ebp + 0x30]
mov dword [edi + 0x10], ecx
mov dword [eax + 8], edx
mov dword [edx + 4], eax
mov dword [ebp + 0x30], eax
jmp 0x4491a7
mov edx, dword [0x5f7bb0]
test edx, edx
je 0x44910f
mov edx, dword [eax + 8]
call fcn.0046e490
mov dword [edi], edx
mov dword [edi + 4], eax
mov edx, dword [ebp + 0x2c]
mov dword [edi + 8], edx
mov edx, dword [ebp + 0x30]
mov dword [edi + 0xc], edx
mov dword [eax + 8], 0
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x30], eax
jmp 0x4491a7
test byte [ebp], al
mov edx, dword [0x5f7bb0]
test edx, edx
je 0x449138
mov edx, dword [eax + 4]
call fcn.0046e460
mov dword [edi], edx
mov dword [eax + 4], 0
mov edx, dword [ebp + 0x28]
test edx, edx
je 0x449177
mov edi, dword [0x5f7bb0]
test edi, edi
je 0x44916c
call fcn.0046e4a0
mov dword [edi], edx
mov ecx, dword [eax + 8]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov ecx, dword [edx + 4]
mov dword [edi + 0xc], ecx
mov ecx, dword [ebp + 0x28]
mov dword [edi + 0x10], ecx
mov dword [eax + 8], edx
mov dword [edx + 4], eax
mov dword [ebp + 0x28], eax
jmp 0x4491a7
mov edx, dword [0x5f7bb0]
test edx, edx
je 0x44919a
mov edx, dword [eax + 8]
call fcn.0046e490
mov dword [edi], edx
mov dword [edi + 4], eax
mov edx, dword [ebp + 0x24]
mov dword [edi + 8], edx
mov edx, dword [ebp + 0x28]
mov dword [edi + 0xc], edx
mov dword [eax + 8], 0
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x28], eax
mov edx, dword [ebp + 0x14]
test edx, edx
je 0x448f21
mov dword [esp + 0x94], eax
mov dword [esp], ebp
call fcn.004542b0
mov eax, dword [esp + 0x94]
mov ebx, dword [esp + 0xec]
mov esi, dword [esp + 0xf8]
jmp 0x448f21
test byte [ebp], al
mov esi, dword [0x5f7bb0]
test esi, esi
je 0x4491f2
mov esi, dword [ebp + 0x48]
call fcn.0046e460
mov dword [edi], esi
mov dword [ebp + 0x48], 0
lea eax, [ebp + 0xe0]
mov dword [esp + 0xc8], eax
lea ecx, [ebp + 0x71]
nop
nop
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.00472f30
lea eax, [0x501e04]
mov dword [esp], eax
mov dword [esp + 4], 0
mov word [esp + 8], 0x309
mov dword [esp + 0xc], 1
call fcn.00468830
mov eax, dword [esp + 0xa8]
mov byte [eax + 0x70], 0
mov ecx, dword [esp + 0xec]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.004484f0
nop
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00472e90
mov eax, dword [0x5f7bb0]
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0x48]
test eax, eax
je 0x4492b3
mov ebx, dword [ecx + 0x48]
call fcn.0046e460
mov dword [edi], ebx
mov dword [ecx + 0x48], 0
mov ebx, dword [ecx + 0xc0]
mov eax, ebx
jmp 0x4492d5
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x34], 0
mov ebx, dword [ebx + 0x2c]
test ebx, ebx
je 0x4492f9
mov byte [ebx + 0x24], 0
mov ebp, dword [0x5f7bb0]
test ebp, ebp
je 0x4492c4
mov ebp, dword [ebx + 0xc]
call fcn.0046e470
mov dword [edi], ebp
mov ebp, dword [ebx + 0x34]
mov dword [edi + 4], ebp
jmp 0x4492c4
mov ebx, dword [0x5f7bb0]
test ebx, ebx
je 0x449310
mov ebx, dword [ecx + 0xc0]
call fcn.0046e460
mov dword [edi], ebx
mov dword [esp + 0xc4], edx
mov dword [ecx + 0xc0], 0
mov ebp, dword [esp + 0xf8]
mov ecx, dword [esp + 0x8c]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0x2c]
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x60], eax
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, 0xffffffff
mov dword [esp + 0x44], eax
xor eax, eax
mov byte [esp + 0x1b], al
mov eax, 0xffffffff
mov dword [esp + 0x4c], eax
mov eax, 0xffffffff
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x68]
jmp 0x4493ef
mov dword [eax + 0x2c], 0
mov dword [esp], eax
call fcn.00438120
mov eax, dword [esp + 0x88]
inc eax
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xec]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0xa0]
mov ecx, ebx
mov edx, dword [esp + 0xc4]
mov ebx, edi
mov ebp, dword [esp + 0xf8]
mov esi, dword [esp + 0xec]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x90]
mov ebp, dword [esp + 0x88]
cmp ebp, edi
jge 0x449707
movzx ebx, word [ebx + ebp*2]
cmp ebx, ecx
jae 0x4497b7
mov dword [esp + 0x84], ebx
lea ecx, [esi + ebx*8]
mov edi, dword [ecx]
mov ebp, dword [edi + 0x14]
lea esi, [esi + ebx*8]
test ebp, ebp
je 0x449460
mov dword [esp + 0xa4], esi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x90], eax
mov dword [esp], edi
call fcn.004543c0
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0xa4]
cmp eax, edx
jne 0x44949b
mov ecx, dword [eax + 0x18]
mov ebp, dword [eax + 0x1c]
test ebp, ebp
xchg edi, ebx
setg bl
xchg edi, ebx
sete dl
test ecx, ecx
seta bl
and ebx, edx
or ebx, edi
test bl, bl
jne 0x44948b
mov ebp, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
movzx edx, byte [eax + 0x25]
mov ebx, dword [esp + 0x84]
jmp 0x4496bb
mov ecx, dword [ecx]
mov ebp, dword [esp + 0xf8]
cmp ebp, ebx
jle 0x4495b1
test byte [ecx], al
mov ebx, dword [eax + 8]
mov esi, dword [eax + 4]
test ebx, ebx
je 0x44953e
test esi, esi
je 0x449505
mov ecx, dword [0x5f7bb0]
test ecx, ecx
je 0x4494ec
call fcn.0046e4b0
mov dword [edi], esi
mov ecx, dword [ebx + 4]
mov dword [edi + 4], ecx
mov dword [edi + 8], ebx
mov ecx, dword [esi + 8]
mov dword [edi + 0xc], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 0x10], ecx
mov ecx, dword [eax + 8]
mov dword [edi + 0x14], ecx
mov dword [ebx + 4], esi
mov dword [esi + 8], ebx
mov dword [eax + 4], 0
mov dword [eax + 8], 0
jmp 0x4496a3
mov esi, dword [0x5f7bb0]
test esi, esi
je 0x449528
mov esi, dword [ebx + 4]
call fcn.0046e490
mov dword [edi], esi
mov dword [edi + 4], ebx
mov esi, dword [ecx + 0x30]
mov dword [edi + 8], esi
mov esi, dword [eax + 8]
mov dword [edi + 0xc], esi
mov dword [ebx + 4], 0
mov dword [ecx + 0x30], ebx
mov dword [eax + 8], 0
jmp 0x4496a3
test esi, esi
je 0x44957b
mov ebx, dword [0x5f7bb0]
test ebx, ebx
je 0x449565
mov ebx, dword [esi + 8]
call fcn.0046e490
mov dword [edi], ebx
mov dword [edi + 4], esi
mov ebx, dword [ecx + 0x2c]
mov dword [edi + 8], ebx
mov ebx, dword [eax + 4]
mov dword [edi + 0xc], ebx
mov dword [esi + 8], 0
mov dword [ecx + 0x2c], esi
mov dword [eax + 4], 0
jmp 0x4496a3
cmp dword [ecx + 0x2c], eax
jne 0x4496a3
mov ebx, dword [0x5f7bb0]
test ebx, ebx
je 0x44959e
mov ebx, dword [ecx + 0x2c]
call fcn.0046e470
mov dword [edi], ebx
mov ebx, dword [ecx + 0x30]
mov dword [edi + 4], ebx
mov dword [ecx + 0x2c], 0
mov dword [ecx + 0x30], 0
jmp 0x4496a3
test byte [ecx], al
mov ebx, dword [eax + 8]
mov esi, dword [eax + 4]
test ebx, ebx
je 0x44963c
test esi, esi
je 0x449606
mov ecx, dword [0x5f7bb0]
test ecx, ecx
je 0x4495ed
call fcn.0046e4b0
mov dword [edi], esi
mov ecx, dword [ebx + 4]
mov dword [edi + 4], ecx
mov dword [edi + 8], ebx
mov ecx, dword [esi + 8]
mov dword [edi + 0xc], ecx
mov ecx, dword [eax + 4]
mov dword [edi + 0x10], ecx
mov ecx, dword [eax + 8]
mov dword [edi + 0x14], ecx
mov dword [ebx + 4], esi
mov dword [esi + 8], ebx
mov dword [eax + 4], 0
mov dword [eax + 8], 0
jmp 0x4496a3
mov esi, dword [0x5f7bb0]
test esi, esi
je 0x449629
mov esi, dword [ebx + 4]
call fcn.0046e490
mov dword [edi], esi
mov dword [edi + 4], ebx
mov esi, dword [ecx + 0x28]
mov dword [edi + 8], esi
mov esi, dword [eax + 8]
mov dword [edi + 0xc], esi
mov dword [ebx + 4], 0
mov dword [ecx + 0x28], ebx
mov dword [eax + 8], 0
jmp 0x4496a3
test esi, esi
je 0x449676
mov ebx, dword [0x5f7bb0]
test ebx, ebx
je 0x449663
mov ebx, dword [esi + 8]
call fcn.0046e490
mov dword [edi], ebx
mov dword [edi + 4], esi
mov ebx, dword [ecx + 0x24]
mov dword [edi + 8], ebx
mov ebx, dword [eax + 4]
mov dword [edi + 0xc], ebx
mov dword [esi + 8], 0
mov dword [ecx + 0x24], esi
mov dword [eax + 4], 0
jmp 0x4496a3
cmp dword [ecx + 0x24], eax
jne 0x4496a3
mov ebx, dword [0x5f7bb0]
test ebx, ebx
je 0x449695
mov ebx, dword [ecx + 0x24]
call fcn.0046e470
mov dword [edi], ebx
mov ebx, dword [ecx + 0x28]
mov dword [edi + 4], ebx
mov dword [ecx + 0x24], 0
mov dword [ecx + 0x28], 0
mov esi, dword [esp + 0xac]
mov ebx, dword [esp + 0x44]
movzx edx, byte [esp + 0x1b]
mov ebp, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ecx
mov byte [esp + 0x1b], dl
mov dword [esp + 0x44], ebx
mov dword [esp + 0xac], esi
mov edi, dword [0x5f7bb0]
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x90], ecx
test edi, edi
je 0x449386
mov edi, dword [eax + 0x2c]
mov dword [esp + 0x80], edi
call fcn.0046e460
mov ecx, dword [esp + 0x80]
mov dword [edi], ecx
jmp 0x449386
mov eax, dword [esp + 0xac]
test eax, eax
je 0x4497a1
mov eax, dword [esp + 0xf8]
mov edx, dword [esp + 0x44]
cmp eax, edx
jle 0x449732
movzx eax, byte [esp + 0x1b]
test al, al
je 0x44976d
xor eax, eax
jmp 0x449737
movzx eax, byte [esp + 0x1b]
mov byte [esp + 0x1a], al
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
call fcn.00448580
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
movzx ebx, byte [esp + 0x1a]
jmp 0x448eb8
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
call fcn.00448580
lea eax, [0x4e0ca0]
mov dword [esp], eax
lea eax, [0x520578]
mov dword [esp + 4], eax
call fcn.00468460
lea eax, [0x4f99bc]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.004687f0
mov eax, ebx
call fcn.0046e4e0
mov eax, edi
call fcn.0046e4e0
lea eax, [0x4f87e6]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.004687f0
mov esi, ebx
mov edi, edx
mov ebx, dword [esp + 0xa0]
jmp 0x44976d
mov eax, edi
call fcn.0046e4e0
mov word [edi + edx*2], si
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0xb8]
mov esi, dword [esp + 0x84]
mov esi, dword [esp + 0x88]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x34]
shl esi, 1
lea ebx, [esi + 1]
cmp edx, ebx
jle 0x4489d2
add esi, 2
cmp edx, esi
jle 0x449887
cmp ebp, ebx
jbe 0x4498f8
mov dword [esp + 0x30], ebx
mov edx, dword [esp + 0x34]
lea ebx, [edi + edx*4 + 2]
movzx ebx, word [ebx]
cmp ebx, ecx
jae 0x4498f1
lea ebx, [eax + ebx*8]
cmp ebp, esi
jbe 0x4498e8
lea edx, [edi + edx*4 + 4]
movzx edx, word [edx]
cmp edx, ecx
jae 0x4498e1
mov ebx, dword [ebx]
lea edx, [eax + edx*8]
mov edx, dword [edx]
cmp edx, ebx
jbe 0x44987f
mov edx, dword [esp + 0x38]
mov ebx, esi
jmp 0x449887
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x30]
cmp ebx, ebp
jae 0x4498d8
movzx esi, word [edi + ebx*2]
movzx edx, si
cmp edx, ecx
jae 0x4498d1
mov dword [esp + 0x84], ebx
lea edx, [eax + edx*8]
mov edx, dword [edx]
mov ebx, dword [esp + 0xb8]
cmp edx, ebx
jbe 0x4489ce
mov edx, dword [esp + 0x34]
cmp edx, ebp
jb 0x4497ef
jmp 0x4498c8
mov eax, ebx
mov ecx, ebp
call fcn.0046e4e0
mov eax, edx
mov ecx, ebp
call fcn.0046e4e0
mov eax, edx
call fcn.0046e4e0
mov eax, ebx
mov ecx, ebp
call fcn.0046e4e0
mov eax, edx
call fcn.0046e4e0
mov eax, esi
mov ecx, ebp
call fcn.0046e4e0
mov eax, ebx
call fcn.0046e4e0
mov eax, ebx
mov ecx, ebp
call fcn.0046e4e0
mov eax, ebx
call fcn.0046e4e0
mov eax, edx
mov ecx, esi
call fcn.0046e4e0
movzx ebx, word [esp + 0x1e]
mov word [edi + edx*2], bx
mov ebx, dword [esp + 0xbc]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0xf0]
test edx, edx
jle 0x448939
lea ebp, [edx - 1]
shr ebp, 0x1f
lea ebp, [edx + ebp - 1]
sar ebp, 1
cmp esi, ebp
jbe 0x44998b
mov dword [esp + 0x84], ebp
movzx ebp, word [edi + ebp*2]
mov word [esp + 0x1e], bp
movzx ebp, bp
cmp ebp, ecx
jae 0x449984
lea ebp, [eax + ebp*8]
mov ebp, dword [ebp]
cmp ebx, ebp
jbe 0x448932
cmp edx, esi
jb 0x449911
jmp 0x44997b
mov eax, edx
mov ecx, esi
call fcn.0046e4e0
mov eax, edx
mov ecx, esi
call fcn.0046e4e0
mov eax, ebp
call fcn.0046e4e0
mov eax, ebp
mov ecx, esi
call fcn.0046e4e0
mov eax, ebx
call fcn.0046e4e0
mov edx, ecx
mov ecx, esi
call fcn.0046e520
call fcn.0046e4e0
mov eax, edx
call fcn.0046e4f0
mov edx, ecx
call fcn.0046e570
mov ebx, 0x10000
call fcn.0046e560
nop
call fcn.0046d060
jmp fcn.004486c0