Function at 0x442570
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x148]
cmp eax, dword [ecx + 8]
jbe 0x443d22
sub esp, 0x1c8
mov eax, dword [esp + 0x1dc]
test eax, eax
jle 0x443ae4
mov ecx, dword [esp + 0x1e8]
test ecx, ecx
jne 0x443d0a
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov dword [esp + 0x15c], edx
mov ebx, dword [esp + 0x1d8]
cmp edx, ebx
jne 0x4425de
mov ebp, dword [edx + 0x18]
mov ebp, dword [ebp + 0x4c]
cmp edx, ebp
je 0x443cf2
call fcn.004339f0
mov eax, dword [esp]
mov ecx, dword [esp + 0x1cc]
cmp ecx, 0xffffffff
jne 0x443aca
mov edx, dword [esp + 0x1d0]
cmp edx, 0xffffffff
jne 0x443ab7
mov ecx, dword [esp + 0x1d8]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x443aac
mov ebx, dword [ecx + 0x3c]
mov dword [esp + 0x48], eax
lea edi, [esp + 0x19c]
mov ebp, eax
xor eax, eax
call fcn.0044c955
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1b0], edx
mov ecx, dword [esp + 0x1d8]
mov esi, dword [ecx + 0xb8]
mov edi, ebp
mov ebp, dword [ecx + 0xbc]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0x1e0]
test ebp, ebp
je 0x443a83
xor eax, eax
mov byte [esp + 0x1e], al
xor eax, eax
mov edi, dword [ecx + 0x14]
jmp 0x44267c
mov edi, dword [edi + 0x18]
mov ebp, dword [esp + 0x1e0]
test edi, edi
je 0x442688
mov ebp, dword [edi + 8]
cmp ebp, 0xffffffff
je 0x442672
mov dword [esp + 0x178], edi
mov dword [esp + 0x174], esi
test ebx, ebx
jne 0x4426af
mov ebx, edx
mov edx, dword [edx]
mov dword [esp + 0x1a4], edx
lea edx, [ebx + 4]
mov dword [esp + 0x1b0], edx
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
call fcn.0043e270
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4439d3
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x1a0], eax
lea edi, [esp + 0x90]
xor eax, eax
call fcn.0044c930
mov ecx, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x1e4]
mov ebp, dword [esp + 0x178]
mov esi, dword [esp + 0x1dc]
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x174]
xor edi, edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1c], al
xchg edi, eax
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1d], al
xchg edi, eax
xor edi, edi
mov dword [esp + 0x2c], edi
jmp 0x44286a
mov ebp, dword [ebp + 0x18]
mov esi, dword [esp + 0x190]
test ebp, ebp
je 0x44359a
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 0x1b0]
cmp eax, ebx
jne 0x442759
mov esi, dword [esp + 0x1b4]
cmp esi, ebx
jne 0x44272e
cmp eax, 0xffffffff
je 0x44272e
test ecx, ecx
mov dword [esp + 0x178], ebp
jne 0x44353d
mov eax, dword [esp + 0x1e0]
test eax, eax
je 0x443531
mov ebx, dword [esp + 0x1dc]
test ebx, ebx
jne 0x44337e
mov esi, dword [esp + 0x1a4]
cmp edi, 0x100000
jae 0x443cbb
mov dword [eax + edi*4], esi
movzx esi, byte [esp + 0x1e]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x442c17
inc edi
mov esi, dword [esp + 0x190]
mov eax, dword [esi + 0xc]
cmp eax, 0xe
jne 0x442c0e
mov eax, dword [esp + 0x54]
test eax, eax
jle 0x4427dd
mov ebp, dword [edx + eax*4 - 4]
test ebx, ebx
jne 0x4427dc
test ecx, ecx
je 0x442bb9
dec eax
mov ebp, dword [esi + 0xc]
mov esi, dword [esp + 0x170]
test esi, esi
je 0x4429c0
mov dword [esp + 0x19c], esi
mov esi, dword [esp + 0x16c]
mov dword [esp + 0x1a0], esi
mov esi, dword [esp + 0x1ac]
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1ac], 0
mov esi, dword [esp + 0x1b4]
mov dword [esp + 0x1b0], esi
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x1c4], 0
cmp ebp, 9
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x1d8]
mov ecx, esi
xchg ebp, eax
mov byte [esp + 0x1c], al
xchg ebp, eax
mov esi, ebx
mov ebp, dword [esp + 0x178]
mov ebx, dword [esp + 0x1e4]
cmp edi, ebx
jge 0x4439c1
mov dword [esp + 0x1dc], esi
mov esi, dword [esp + 0x19c]
mov ebx, dword [esp + 0x1a0]
mov dword [esp + 0x198], ebx
mov ebx, dword [esi + 0x10]
test ebx, ebx
je 0x4439af
mov dword [esp + 0x3c], edi
mov dword [esp + 0x194], ebp
mov dword [esp + 0x190], esi
mov ebx, dword [esp + 0x1b4]
test ebx, ebx
je 0x443893
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x44388c
mov ebx, dword [ebx]
cmp ebx, ecx
sete bl
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0xc]
cmp eax, 2
jne 0x44382b
mov eax, 1
mov dword [esp + 0x18c], edx
test al, al
je 0x44363d
mov dword [esp + 0x1ac], 0
xor eax, eax
xor ebx, ebx
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], ebx
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x1b8], ecx
add ecx, 0xfffffffc
mov dword [esp + 0x1b8], ecx
mov ecx, dword [esp + 0x1e8]
test ecx, ecx
je 0x443622
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x1bc], eax
mov eax, dword [esi + 8]
je 0x44361b
cmp eax, 0x80000000
sete bl
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], 0
test bl, bl
jne 0x4435b1
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x1a8], eax
movzx eax, byte [esp + 0x1c]
test al, al
je 0x442738
test ebp, ebp
je 0x4435a1
mov ebx, dword [ebp + 8]
mov eax, dword [esp + 0x1b0]
cmp ebx, eax
jne 0x4435a1
mov ebx, dword [esp + 0x1b4]
cmp ebx, eax
je 0x4435a1
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x1a8], eax
jmp 0x442738
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x178]
movzx ebx, byte [esp + 0x1e]
test bl, bl
je 0x442bb2
test ecx, ecx
je 0x442ba9
mov ebx, dword [esp + 0x1e4]
cmp eax, ebx
jge 0x442ba5
test edx, edx
je 0x442b76
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 0x54]
mov dword [esp + 0x84], ecx
mov ebx, dword [eax + 0x50]
mov dword [esp + 0x80], ebx
mov ebp, dword [edx + 8]
mov dword [esp + 0x7c], ebp
mov edx, dword [edx + 0xc]
mov dword [esp + 0x78], edx
call fcn.00428440
lea eax, [0x89bac3]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00428cc0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.00428b10
lea eax, [0x8a108a]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x896eef]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x1d8]
mov eax, dword [eax + 0x14]
jmp 0x442b69
mov dword [esp + 0x178], eax
mov ecx, dword [eax + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x78], edx
call fcn.00428440
lea eax, [0x89950b]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00428cc0
mov eax, dword [esp + 0x178]
mov dword [esp], eax
call fcn.00428c80
lea eax, [0x896ef7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x896eef]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x178]
mov eax, dword [eax + 0x18]
test eax, eax
jne 0x442ac2
jmp 0x443c87
test ecx, ecx
je 0x442b97
cmp eax, ebx
jge 0x442b97
mov ecx, dword [esp + 0x1b0]
mov edx, dword [esp + 0x1d8]
mov ebp, dword [edx + 0x40]
cmp ecx, ebp
jne 0x443af0
mov dword [esp + 0x1f4], eax
add esp, 0x1c8
ret
test ecx, ecx
jmp 0x442b78
mov ebx, dword [esp + 0x1e4]
jmp 0x442b78
mov eax, edi
jmp 0x4429d8
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x1e0]
mov dword [esp], eax
movzx ecx, byte [esp + 0x1e]
mov byte [esp + 4], cl
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x10], edx
call fcn.00443ec0
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov ebx, dword [esp + 0x74]
mov esi, dword [esp + 0x190]
jmp 0x4427dc
mov eax, dword [esp + 0x54]
jmp 0x4427dd
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], edi
mov eax, dword [esp + 0x190]
mov dword [esp], eax
mov ecx, dword [esp + 0x198]
mov dword [esp + 4], ecx
call fcn.0043e800
mov eax, dword [esp + 8]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x34], ecx
cmp ecx, 0xf
je 0x443353
xor edx, edx
test dl, dl
je 0x44331c
mov edx, 1
test dl, dl
je 0x4432e5
mov edx, 1
mov byte [esp + 0x1f], dl
mov ebx, dword [esp + 0x1f0]
test ebx, 1
je 0x44326f
mov ebp, dword [esp + 0x1a4]
mov esi, dword [esp + 0x6c]
test esi, esi
jle 0x443257
mov edi, dword [esp + 0x190]
mov ebx, dword [edi]
cmp ebp, ebx
jbe 0x442cb5
movzx ebx, byte [esp + 0x1c]
test bl, bl
je 0x443251
mov dword [esp + 0x24], ebp
mov dword [esp], edi
mov eax, dword [esp + 0x198]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.0043eaa0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x190]
mov ebp, dword [ebx + 0x20]
cmp ebp, 2
jg 0x443240
xor ebp, ebp
test ebp, ebp
jne 0x443073
mov ebp, dword [esp + 0x34]
cmp ebp, 0xf
mov dword [esp + 0x168], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x44], eax
je 0x44302d
mov esi, dword [esp + 0x150]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x158], esi
call fcn.00428440
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00428cc0
lea eax, [0x8969ca]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
call fcn.004284b0
mov eax, dword [esp + 0x1bc]
mov dword [esp + 0x188], eax
xor ecx, ecx
jmp 0x442da5
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x7c], edx
call fcn.00428440
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.004284b0
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x188]
mov edx, dword [esp + 0x1c0]
shr edx, 2
cmp ecx, edx
jae 0x442e0d
cmp ecx, 0xa
jae 0x442ded
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x442d70
call fcn.00428440
lea eax, [0x896a31]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00428cc0
call fcn.004284b0
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x4c]
jmp 0x442d70
call fcn.00428440
lea eax, [0x8976db]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00428cc0
call fcn.004284b0
call fcn.00428440
lea eax, [0x896a29]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00428cc0
call fcn.004284b0
call fcn.00428440
lea eax, [0x8969f2]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.00428cc0
lea eax, [0x8969d7]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
mov eax, dword [esp + 0x44]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00428b10
call fcn.004284b0
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x190]
mov edx, dword [ecx]
cmp eax, edx
ja 0x442fdf
mov eax, dword [esp + 0x15c]
mov edx, dword [eax + 0x18]
mov ebx, dword [edx + 0x68]
test ebx, ebx
jle 0x442fd6
mov edx, dword [edx + 0x4c]
mov ebx, dword [esp + 0x1d8]
cmp edx, ebx
jne 0x442fc7
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 0x68], edx
call fcn.00428440
lea eax, [0x896ed7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x896ef7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x896eef]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.004284b0
call fcn.00428440
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x2c]
inc eax
movzx ecx, byte [esp + 0x1f]
xor ecx, 1
mov edx, dword [esp + 0x18c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x178]
movzx esi, byte [esp + 0x1e]
mov edi, dword [esp + 0x6c]
mov byte [esp + 0x1d], cl
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1e8]
jmp 0x4427b0
mov edx, dword [esp + 0x48]
cmp edx, 2
jge 0x442ecc
jmp 0x442f75
mov ebx, dword [esp + 0x1d8]
jmp 0x442fc7
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], edx
call fcn.00428440
lea eax, [0x896a07]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.004284b0
mov ecx, dword [esp + 0x190]
jmp 0x442ea5
mov eax, dword [esp + 0x150]
mov dword [esp], eax
lea ecx, [0x89e424]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.004021f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x443063
mov ebp, 5
lea esi, [0x897e9c]
jmp 0x442d1c
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x150]
jmp 0x442d1c
mov dword [esp + 0x84], eax
mov dword [esp + 0x188], ebp
mov dword [esp + 0x184], ecx
mov dword [esp + 0x64], edx
mov dword [esp], ebx
mov eax, dword [esp + 0x198]
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
call fcn.0043ec50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x188]
mov edx, dword [esp + 0x198]
mov ebx, dword [esp + 0x190]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x184]
mov edi, dword [esp + 0x64]
jmp 0x443215
mov dword [esp + 0x60], edi
mov dword [esp + 0x180], esi
mov dword [esp + 0x5c], ebp
shl eax, 4
mov dword [esp + 0x58], eax
mov ebp, dword [ecx + eax + 0xc]
mov dword [esp + 8], ebp
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0043e870
mov eax, dword [esp + 0xc]
mov dword [esp + 0x154], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ecx
call fcn.00428440
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00428cc0
lea eax, [0x8981df]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00428cc0
call fcn.004284b0
call fcn.00428440
lea eax, [0x8969f2]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
mov eax, dword [esp + 0x180]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.00428cc0
lea eax, [0x8969d7]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00428b10
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx + eax + 4]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x190]
mov dword [esp], edx
mov ebx, dword [esp + 0x198]
mov dword [esp + 4], ebx
call fcn.0043e8e0
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x188]
mov ebp, dword [ecx + eax + 8]
mov eax, dword [eax + ecx]
mov edx, dword [esp + 0x198]
mov ebx, dword [esp + 0x190]
cmp eax, 0xffffffff
je 0x44322a
cmp eax, 0x100000
jb 0x4430e7
jmp 0x443c9f
mov eax, esi
mov esi, dword [esp + 0x34]
cmp esi, 0xf
mov ecx, eax
mov edx, edi
mov eax, ebp
mov ebp, esi
jmp 0x442d00
lea esi, [ebx + 0x20]
mov edi, dword [ebx + 0x1c]
lea esi, [esi + edi*4 + 0xc]
mov ebp, dword [esi]
jmp 0x442cf1
dec ebp
jmp 0x442cb5
test ebx, 2
je 0x442c9b
mov edi, dword [esp + 0x190]
jmp 0x442cb5
mov ebp, dword [esp + 0x190]
mov dword [esp], ebp
mov esi, dword [esp + 0x198]
mov dword [esp + 4], esi
mov edi, dword [esp + 0x1d8]
mov dword [esp + 8], edi
mov eax, dword [esp + 0x2c]
test eax, eax
sete cl
mov byte [esp + 0xc], cl
movzx ecx, byte [esp + 0x1d]
test cl, cl
je 0x4432e1
test eax, eax
setne cl
mov byte [esp + 0xd], cl
call fcn.00444e30
movzx eax, byte [esp + 0x10]
test al, al
jne 0x4432c5
mov eax, dword [esp + 0x2c]
jmp 0x442f89
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x34]
movzx edx, byte [esp + 0x1f]
mov ebx, dword [esp + 0x1f0]
jmp 0x442c88
xor ecx, ecx
jmp 0x4432aa
cmp ecx, 0x11
je 0x4432f1
xor edx, edx
jmp 0x442c71
mov dword [esp], eax
lea edx, [0x89f782]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004021f0
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x34]
jmp 0x442c71
cmp ecx, 0x10
je 0x443328
xor edx, edx
jmp 0x442c64
mov dword [esp], eax
lea edx, [0x89ee8f]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004021f0
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x34]
jmp 0x442c64
mov dword [esp], eax
lea edx, [0x89e424]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004021f0
movzx edx, byte [esp + 0xc]
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x34]
jmp 0x442c57
mov esi, dword [esp + 0x1a4]
test edi, edi
jle 0x443506
mov eax, dword [esp + 0x190]
mov ebp, dword [eax]
cmp esi, ebp
jbe 0x4434fc
movzx ebp, byte [esp + 0x1c]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4434f6
mov ebp, dword [eax + 0x20]
cmp ebp, 2
jg 0x4434dc
xor ebp, ebp
test ebp, ebp
jne 0x4433d8
dec ebx
mov eax, dword [esp + 0x1e0]
mov ebp, dword [esp + 0x178]
movzx esi, byte [esp + 0x1e]
jmp 0x4427b1
mov dword [esp + 0x188], ebp
mov dword [esp], eax
mov ecx, dword [esp + 0x198]
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
lea edx, [esp + 0x90]
mov dword [esp + 0x10], edx
call fcn.0043ec50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x188]
mov edx, dword [esp + 0x1dc]
xor ebx, ebx
jmp 0x443427
dec edx
inc ebx
shl eax, 4
mov eax, dword [eax + ecx]
test eax, eax
jl 0x44343b
test edx, edx
jle 0x44343b
cmp eax, 0x100000
jb 0x44341f
jmp 0x443cb4
test edx, edx
jle 0x44346c
lea ebx, [edx - 1]
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x178]
movzx esi, byte [esp + 0x1e]
mov edi, dword [esp + 0x3c]
jmp 0x4427b1
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x3c]
cmp ecx, 0x100000
jae 0x443cad
mov ebp, dword [esp + 0x1e0]
mov dword [ebp + ecx*4], eax
lea eax, [ecx + 1]
mov esi, dword [esp + 0x1e4]
cmp eax, esi
jge 0x4434d8
mov edi, dword [0xc6eec0]
add ebx, edi
cmp eax, 0x100000
jae 0x443ca6
mov dword [ebp + ecx*4 + 4], ebx
mov ecx, dword [esp + 0x1e8]
mov ebp, dword [esp + 0x178]
mov edi, eax
mov ebx, edx
mov eax, dword [esp + 0x1e0]
mov edx, dword [esp + 0x18c]
jmp 0x4427a1
mov eax, ecx
jmp 0x4434b3
mov dword [esp + 0x20], esi
lea ebp, [eax + 0x20]
mov esi, dword [eax + 0x1c]
lea ebp, [ebp + esi*4 + 0xc]
mov ebp, dword [ebp]
mov esi, dword [esp + 0x20]
jmp 0x4433bb
dec esi
jmp 0x4433ad
movzx ebp, byte [esp + 0x1c]
jmp 0x4433ad
mov eax, dword [esp + 0x1f0]
test eax, 2
jne 0x443520
mov eax, dword [esp + 0x1e0]
jmp 0x44338d
mov eax, dword [esp + 0x190]
movzx ebp, byte [esp + 0x1c]
jmp 0x4433ad
mov ebx, dword [esp + 0x1dc]
jmp 0x4427a1
lea eax, [esp + 0x19c]
mov dword [esp], eax
mov ebx, dword [esp + 0x1ec]
mov dword [esp + 4], ebx
mov ebp, dword [ecx]
mov edx, ecx
call ebp
movzx eax, byte [esp + 8]
test al, al
je 0x443588
mov eax, dword [esp + 0x1e0]
test eax, eax
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x178]
mov edi, dword [esp + 0x3c]
jmp 0x442776
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1f4], eax
add esp, 0x1c8
ret
test ecx, ecx
jmp 0x442760
mov dword [esp + 0x1a8], 0
jmp 0x442738
lea eax, [esp + 0x19c]
mov dword [esp], eax
mov dword [esp + 4], esi
mov edx, dword [esp + 0x198]
mov dword [esp + 8], edx
test ecx, ecx
setne bl
mov byte [esp + 0xc], bl
mov dword [esp + 0x10], 0
call fcn.00443d30
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x190]
mov edi, dword [esp + 0x3c]
jmp 0x44296d
xor ebx, ebx
jmp 0x442953
movzx eax, byte [esp + 0x1e]
test al, al
je 0x44296d
test ecx, ecx
mov eax, dword [esp + 0x16c]
jmp 0x442934
mov eax, dword [esp + 0x1ac]
test eax, eax
jne 0x443824
mov eax, dword [esp + 0x1b4]
add eax, 0xfffffffc
mov ebx, eax
mov eax, dword [eax]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 0x1ac]
mov dword [esp], eax
call fcn.0043e270
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4436a7
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x190]
mov edi, dword [esp + 0x3c]
mov ebx, ecx
mov ecx, dword [esp + 0x1d8]
jmp 0x4428ff
movzx ebx, byte [esp + 0x1e]
test bl, bl
je 0x44380f
mov ebp, dword [esp + 0x1d8]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x89]
xchg esi, eax
test al, al
xchg esi, eax
je 0x443806
mov esi, dword [esp + 0x190]
mov edi, dword [esi + 0xc]
cmp edi, 9
jne 0x4437ff
xor edx, edx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov edi, dword [esp + 0x1e8]
test edi, edi
jne 0x44370e
test dl, dl
jne 0x44370e
test edi, edi
je 0x443680
jmp 0x443cc2
mov dword [esp], esi
mov eax, dword [esp + 0x198]
mov dword [esp + 4], eax
call fcn.0043e800
mov eax, dword [esp + 8]
mov dword [esp + 0x17c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 0x7c], edx
call fcn.00428440
lea eax, [0x8aab69]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00428cc0
mov eax, dword [esp + 0x17c]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.00428cc0
lea eax, [0x89cc1b]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x19c]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0xc], edx
call fcn.00445590
mov edi, dword [esp + 0x1e8]
test edi, edi
mov eax, dword [esp + 0x160]
mov ecx, dword [esp + 0x164]
movzx ebx, byte [esp + 0x1e]
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x190]
jmp 0x443703
mov edx, ebx
jmp 0x4436e4
mov esi, dword [esp + 0x190]
jmp 0x4437ff
mov ebp, dword [esp + 0x1d8]
mov esi, dword [esp + 0x190]
xor edx, edx
jmp 0x4436e4
xor ebx, ebx
jmp 0x443661
cmp eax, 6
jne 0x44383a
mov eax, 1
jmp 0x4428e1
cmp eax, 4
jne 0x443849
mov eax, 1
jmp 0x4428e1
cmp eax, 5
jne 0x443858
mov eax, 1
jmp 0x4428e1
cmp eax, 7
jne 0x443867
mov eax, 1
jmp 0x4428e1
cmp eax, 0x10
jne 0x443876
mov eax, 1
jmp 0x4428e1
test bl, bl
je 0x443885
cmp eax, 8
sete al
jmp 0x4428e1
xor eax, eax
jmp 0x4428e1
xor ebx, ebx
jmp 0x4428cc
mov ebx, dword [esp + 0x1b0]
mov edi, dword [esp + 0x1f0]
test edi, 4
je 0x443998
mov edi, dword [esi + 0xc]
cmp edi, 0xd
jne 0x44398b
mov edi, dword [esp + 0x15c]
mov edi, dword [edi + 0x18]
mov edi, dword [edi]
cmp edi, ecx
jne 0x44397e
mov edi, dword [ecx + 0x18]
mov edi, dword [edi + 0x4c]
test edi, edi
je 0x443971
mov eax, dword [edi + 0x1c]
mov dword [esp + 0x1b0], eax
mov edx, dword [ecx + 0x18]
mov edx, dword [edx + 0x4c]
mov ebx, dword [edx + 0xb8]
mov edx, dword [edx + 0xbc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x54], edx
mov dword [esp], esi
mov ecx, dword [esp + 0x198]
mov dword [esp + 4], ecx
mov ebp, dword [esp + 0x1a4]
mov dword [esp + 8], ebp
lea ebp, [esp + 0x90]
mov dword [esp + 0xc], ebp
call fcn.0043eb00
mov eax, dword [esp + 0x28]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1b4], eax
add eax, 4
mov dword [esp + 0x1b4], eax
mov ecx, dword [esp + 0x1d8]
mov ebp, dword [esp + 0x194]
mov esi, dword [esp + 0x190]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x18c]
mov eax, dword [esp + 0x54]
jmp 0x4428ba
mov edi, eax
mov eax, ebx
mov ebx, edx
mov edx, edi
jmp 0x4438f7
mov edi, eax
mov eax, ebx
mov ebx, edx
mov edx, edi
jmp 0x4438f7
mov edi, eax
mov eax, ebx
mov ebx, edx
mov edx, edi
jmp 0x4438f7
mov dword [esp + 0x88], eax
mov eax, ebx
mov ebx, edx
mov edx, dword [esp + 0x88]
jmp 0x4438f7
mov ecx, dword [esp + 0x1e8]
mov eax, dword [esp + 0x2c]
mov edx, ebp
jmp 0x4429cb
mov ecx, dword [esp + 0x1e8]
mov eax, dword [esp + 0x2c]
mov edx, ebp
jmp 0x4429cb
mov eax, dword [esp + 0x1e8]
test eax, eax
je 0x443a72
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x7c], eax
call fcn.00428440
lea eax, [0x8a195e]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x19c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00445590
mov eax, dword [esp + 0x1e8]
test eax, eax
jne 0x443cda
mov dword [esp + 0x1f4], 0
add esp, 0x1c8
ret
movzx ecx, byte [esp + 0x1e]
test cl, cl
jne 0x4439e2
test eax, eax
jmp 0x443a5a
mov edi, dword [esp + 0x1e8]
test edi, edi
xchg ebp, ebx
setne bl
xchg ebp, ebx
xor ebp, 1
mov edi, dword [esp + 0x48]
xchg ebp, eax
mov byte [esp + 0x1e], al
xchg ebp, eax
mov ebp, dword [esp + 0x1e0]
jmp 0x44266d
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
jmp 0x44261b
mov ecx, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x1cc]
jmp 0x44261b
mov ecx, dword [esp + 0x1d8]
mov ebx, dword [esp + 0x1cc]
mov edx, dword [esp + 0x1d0]
jmp 0x44261b
mov ecx, dword [esp + 0x1e8]
jmp 0x4425b1
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], ebp
mov dword [esp + 0x3c], eax
mov eax, dword [edx + 0x54]
mov dword [esp + 0x84], eax
mov ecx, dword [edx + 0x50]
mov dword [esp + 0x80], ecx
call fcn.00428440
lea eax, [0x89bac3]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00428cc0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.00428b10
lea eax, [0x89bcb9]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x89764f]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00428cc0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
call fcn.00428650
call fcn.004284b0
mov eax, dword [esp + 0x1d8]
mov ecx, dword [eax]
mov dword [esp + 0x7c], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x78], eax
call fcn.00428440
lea eax, [0x89a408]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00428cc0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x8969cf]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00428ba0
lea eax, [0x8971cf]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00428cc0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00428b10
lea eax, [0x89763b]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00428cc0
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00428b10
call fcn.00428650
call fcn.004284b0
lea eax, [0x8ab43a]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00427b80
ud2
lea eax, [0x8a7894]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00427b80
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
lea eax, [0x89f8a3]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00427b80
ud2
lea eax, [0x89bb6d]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00427b80
ud2
lea eax, [0x8b508e]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00427b80
ud2
lea eax, [0x8b4a3d]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.00427b80
ud2
call fcn.0044b100
jmp fcn.00442570