Function at 0x446f00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x14c]
cmp eax, dword [ecx + 8]
jbe 0x4485b1
sub esp, 0x1cc
mov eax, dword [esp + 0x1e0]
test eax, eax
jle 0x448385
mov ecx, dword [esp + 0x1ec]
test ecx, ecx
jne 0x44859a
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x1dc]
cmp edx, ebx
jne 0x446f65
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x4c], edx
je 0x448584
call fcn.00437da0
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x1d0]
cmp ecx, 0xffffffff
jne 0x44837c
mov edx, dword [esp + 0x1d4]
cmp edx, 0xffffffff
jne 0x448367
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x448359
mov ebx, dword [ecx + 0x3c]
xor ebp, ebp
mov dword [esp + 0x78], eax
lea edi, [esp + 0x1a0]
mov esi, eax
xor eax, eax
call fcn.00452295
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b4], edx
mov ecx, dword [esp + 0x1dc]
mov edi, esi
mov esi, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0xb8]
mov dword [esp + 0x190], ecx
mov ecx, dword [esp + 0x1e4]
test ecx, ecx
je 0x448336
xor eax, eax
mov byte [esp + 0x1f], al
xor eax, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x18c], ebp
test ebx, ebx
jne 0x447020
mov ebx, edx
mov edx, dword [edx]
mov dword [esp + 0x1a8], edx
lea edx, [ebx + 4]
mov dword [esp + 0x1b4], edx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call fcn.004428c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x448286
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x9c]
xor eax, eax
call fcn.00452270
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [esp + 0x1e0]
mov esi, dword [esp + 0x190]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18c]
xor edi, edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1c], al
xchg edi, eax
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1d], al
xchg edi, eax
xor edi, edi
mov dword [esp + 0x2c], edi
jmp 0x447123
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1a4], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b0], 0
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1c8], 0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
sete bl
mov ebp, dword [esp + 0x1dc]
mov edi, eax
mov byte [esp + 0x1c], bl
mov eax, esi
mov esi, dword [esp + 0x19c]
mov ebp, dword [esp + 0x1e0]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x1dc]
xor edx, edx
cmp edi, ecx
jge 0x44827b
mov dword [esp + 0x38], edi
mov dword [esp + 0x1e0], ebp
mov ebp, dword [esp + 0x1a0]
mov edi, dword [esp + 0x1a4]
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x44826e
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x1b8]
test ebx, ebx
je 0x448118
mov dword [esp + 0x178], edi
mov ebx, dword [esp + 0x1dc]
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x448111
cmp dword [edi], ebx
xchg edi, ebx
sete bl
xchg edi, ebx
movzx ebx, byte [ebp + 0x20]
cmp bl, 2
jne 0x4480cc
mov ebx, 1
mov dword [esp + 0x5c], eax
mov dword [esp + 0x19c], esi
mov dword [esp + 0x180], ebp
test bl, bl
je 0x447ee3
mov dword [esp + 0x1b0], 0
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x174], ebx
mov dword [esp + 0x184], edi
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1bc], ebx
add ebx, 0xfffffffc
mov dword [esp + 0x1bc], ebx
mov ebx, dword [esp + 0x1ec]
test ebx, ebx
je 0x447ec6
mov edi, dword [esp + 0x1b8]
mov dword [esp + 0x1c0], edi
je 0x447ebf
cmp dword [ebp + 8], 0x80000000
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [ebp + 8]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c8], 0
xchg edi, eax
test al, al
xchg edi, eax
jne 0x447e5a
mov esi, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], esi
movzx esi, byte [esp + 0x1c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x447e51
mov edi, dword [esp + 0x1a0]
mov edx, esi
mov esi, dword [edi + 0xc]
test esi, esi
je 0x447e3f
mov edi, dword [edi]
lea esi, [esi + edi + 1]
mov dword [esp + 0x1ac], esi
test ebx, ebx
jne 0x447ddd
mov esi, dword [esp + 0x1e4]
test esi, esi
je 0x447dc8
mov edi, dword [esp + 0x1a8]
mov dword [esp + 0x20], edi
mov ebx, dword [esp + 0x38]
test ebx, ebx
jle 0x447da1
cmp dword [ebp], edi
jae 0x4472b1
test dl, dl
je 0x447d92
cmp byte [ebp + 0x23], 4
ja 0x447d71
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x74], edi
mov edi, dword [esp + 0x198]
test edi, edi
jne 0x447bfb
movzx edi, byte [esp + 0x1d]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x28], edi
movzx edi, byte [esp + 0x1d]
cmp byte [ebp + 0x20], 0x14
jne 0x447317
xchg edi, eax
cmp al, 0x12
xchg edi, eax
jne 0x447bdf
mov edi, 1
xchg edi, eax
test al, al
xchg edi, eax
je 0x447bd3
mov edi, dword [esp + 0x1e0]
test edi, edi
jle 0x447baf
dec edi
movzx esi, byte [ebp + 0x20]
dec ebx
mov dword [esp + 0x1e0], edi
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x447b9f
mov dword [esp + 0x70], ebx
mov edi, dword [esp + 0x1a8]
test ebx, ebx
jle 0x447b7e
cmp dword [ebp], edi
jae 0x447362
test dl, dl
je 0x447b78
cmp byte [ebp + 0x23], 4
ja 0x447b60
xor edx, edx
test edx, edx
jne 0x4478df
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x1f4]
test edi, 1
je 0x447879
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4474bd
movzx esi, byte [ebp + 0x20]
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
inc ebx
cmp byte [ebp + 0x20], 0xe
jne 0x4474af
test eax, eax
jle 0x4474af
mov edi, dword [esp + 0x19c]
mov esi, dword [edi + eax*4 - 4]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x1e0]
test esi, esi
jne 0x4474a3
mov esi, dword [esp + 0x1ec]
test esi, esi
je 0x44744a
lea esi, [eax - 1]
movzx ebp, byte [ebp + 0x20]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
mov eax, ebx
mov ebx, dword [esp + 0x184]
test ebx, ebx
jne 0x44709f
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x447446
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x447438
cmp edx, ecx
jge 0x447438
mov eax, dword [esp + 0x1b4]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [ebx + 0x40]
cmp eax, ebp
jne 0x448391
mov dword [esp + 0x1f8], edx
add esp, 0x1cc
ret
mov edx, eax
jmp 0x447410
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
movzx edx, byte [esp + 0x1f]
mov byte [esp + 4], dl
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00448740
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1ec]
mov edi, dword [esp + 0x19c]
jmp 0x4473ea
mov esi, dword [esp + 0x1ec]
jmp 0x4473ea
mov edi, dword [esp + 0x19c]
mov esi, eax
jmp 0x4473ed
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00442eb0
mov eax, dword [esp + 8]
mov dword [esp + 0x160], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
call fcn.00443130
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x16c], edx
mov ebx, dword [esp + 0x30]
cmp ebx, 0xf
je 0x447833
mov ebp, dword [esp + 0x160]
mov dword [esp + 0x160], ebp
mov dword [esp + 0x30], ebx
call fcn.0042c8a0
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0042d270
lea eax, [0x8bfb0a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042d270
call fcn.0042c910
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x198], eax
xor ecx, ecx
jmp 0x4475bd
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x74], edx
call fcn.0042c8a0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
call fcn.0042c910
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x198]
mov edx, dword [esp + 0x1c4]
shr edx, 2
cmp ecx, edx
jae 0x447625
cmp ecx, 0xa
jae 0x447605
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x447588
call fcn.0042c8a0
lea eax, [0x8bfb6a]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042d270
call fcn.0042c910
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x4c]
jmp 0x447588
call fcn.0042c8a0
lea eax, [0x8c0239]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042d270
call fcn.0042c910
call fcn.0042c8a0
lea eax, [0x8bfb62]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042d270
call fcn.0042c910
call fcn.0042c8a0
lea eax, [0x8bfb32]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042d270
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0042d270
lea eax, [0x8bfb1b]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042d270
mov eax, dword [esp + 0x44]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d0b0
call fcn.0042c910
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x180]
mov edx, dword [ecx]
cmp eax, edx
ja 0x4477e5
mov eax, dword [esp + 0x1dc]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x4477dc
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x4477d3
cmp dword [edx + 0x4c], eax
jne 0x4477c4
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 0x64], edx
call fcn.0042c8a0
lea eax, [0x8bfec5]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
lea eax, [0x8bfee5]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042d270
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
lea eax, [0x8bfedd]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042d270
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
call fcn.0042c910
call fcn.0042c8a0
call fcn.0042cac0
call fcn.0042c910
mov eax, dword [esp + 0x2c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x4473a4
mov edx, dword [esp + 0x78]
cmp edx, 2
jge 0x4476e3
jmp 0x44778c
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x4477cb
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x4477cb
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], edx
call fcn.0042c8a0
lea eax, [0x8bfb42]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x68]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
call fcn.0042c910
mov ecx, dword [esp + 0x180]
jmp 0x4476bd
mov eax, dword [esp + 0x160]
mov dword [esp], eax
lea ecx, [0x8c44dd]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00402370
movzx eax, byte [esp + 0xc]
test al, al
je 0x447869
lea ebp, [0x8c03ce]
mov ebx, 5
jmp 0x447534
mov ebp, dword [esp + 0x160]
mov ebx, dword [esp + 0x30]
jmp 0x447534
movzx eax, byte [ebp + 0x20]
mov dword [esp], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1dc]
mov dword [esp + 8], ebx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0xc], al
xchg edi, eax
mov byte [esp + 0xd], al
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.004494d0
movzx esi, byte [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x44739a
mov dword [esp + 0x198], edx
jmp 0x447916
mov ebx, dword [esp + 0x1a0]
lea eax, [eax + eax*4]
mov ebp, eax
shl eax, 2
mov edx, dword [esp + 0x198]
movzx eax, byte [edx + eax + 2]
mov edi, dword [edx + ebp*4 + 0x10]
add edi, dword [ebx]
mov ebp, dword [esp + 0x180]
mov esi, eax
mov dword [esp + 0x2c], ecx
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
call fcn.004432e0
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x447b38
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x1f4]
test edx, 1
je 0x447ac1
mov ecx, 1
test cl, cl
jne 0x447987
mov ecx, dword [esp + 0x2c]
cmp eax, 0x100000
jb 0x4478e8
jmp 0x44851a
cmp eax, 0x100000
jae 0x448524
lea ecx, [eax + eax*4]
mov edx, dword [esp + 0x198]
mov ecx, dword [edx + ecx*4 + 0xc]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00442f30
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x15c], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.00443130
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
call fcn.0042c8a0
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0042d270
lea eax, str._...__n__not___val_______n390625:https__chan__a_._nAcceptAnswerArabicAugustBIGINTBINARYBasic_BrahmiCANCELCOMMITCarianChakmaClosedCommonCookieCopticDELETEDOUBLEExpectFormatFridayGOAWAYGOROOTGetACPGothicHangulHatranHebrewHyphenKaithiKhojkiLepchaLockedLycianLydianMondayOriginPADDEDPragmaRejangSCHED_STREETServerStringSundaySyriacTai_LeTangutTeluguThaanaTypeMXTypeNSUTC12UTC13UTC_02UTC_08UTC_09UTC_11__d__s__byteu_04Xufffd_n_____tacceptactivebinarychan__chiselclientclosedconfigcookiedbnamedefinedomainefenceempty_expectformatgmsdp_gopherhangupheaderipnetkilledlistenmethodminutenumberobjectpopcntprintfreadatremoverune1_schemescvg:_secondsecureselectsendtoserversocketsocks_socks5statusstringstructsweep_telnettls_cauint16uint32uint64unused_sCHMODWRITE__v_v___conn___scan___scan__MB_in__Value__dying_flags_len_d_locks_m__g0_nmsys_snil_n_using__03d__s_s__s___s:__s_n__goid__size__sys:_.0000000.0.0.019531252.5.4.32.5.4.52.5.4.62.5.4.72.5.4.82.5.4.99765625::1_128:method:scheme:statusAvestanBengaliBrailleCHISEL_CONNECTChanDirConvertCopySidCreatedCypriotDECIMALDefaultDeseretEd25519ElbasanExpiresFreeSidGODEBUGGive_upGranthaHEADERSHanunooIM_UsedIO_waitInstAltInstNopJanuaryKannadaMD2_RSAMD5_RSAMUI_DltMUI_StdMakasarMandaicMarchenMultaniMyanmarOctoberOpen__sOsmanyaRadicalReaddirRefererSM2_SM3SharadaShavianSiddhamSinhalaSleepExSogdianSoyomboSubjectSwapperTINYINTTagalogTibetanTirhutaTrailerTuesdayTypeALLTypeOPTTypePTRTypeSOATypeSRVTypeTXTTypeWKSUpgradeUsage:_nVARCHARWSARecvWSASend__d__d__socks__ttypes__tvalue_getwchabortedalt____any____arcfourbackendbdoUxXvbooleancharsetchunkedcommandcomplexconn_dconnectconsolederivedefgEFGvexpiresfields.float32float64gbk_bingctracehp8_binhttp:__integerinvalidkey_of_lookup_max_agenil_keynop____nosniffnumber_panic:_printlnrefererrefreshrefusedreverserunningserial:signal_ssh_dssssh_rsasshtypesyscalltcp:__stimeouttls_keytraileruintptrunknownupgradeversionwaitingwriteatwsarecvwsasendzerodevendCREATEREMOVERENAME_data_q_etypes__goal_incr_v_is_not__mcount_minutes_nalloc_newval_nfreed_ping_q_pointer_stack__status__t.key___Month__.10q..._s:_d:_d__idle:_0.0.0.0:012345672.5.4.102.5.4.112.5.4.173des_cbc48828125AcceptExAcceptedArmenianBalineseBopomofoBugineseCLICOLORCancelIoCherokeeClassANYConflictContinueCyrillicDATETIMEDNS_nameDOWNGRD
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0042d270
call fcn.0042c910
call fcn.0042c8a0
lea eax, [0x8bfb32]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042d270
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0042d270
lea eax, [0x8bfb1b]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042d270
mov eax, dword [esp + 0x40]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d0b0
call fcn.0042cac0
call fcn.0042c910
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x447977
cmp eax, 0x100000
jae 0x44852e
lea ecx, [eax + eax*4]
shl ecx, 2
mov edx, dword [esp + 0x198]
movzx ecx, byte [edx + ecx + 2]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1dc]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov byte [esp + 0xd], cl
movzx ecx, byte [esp + 0x1d]
mov byte [esp + 0xe], cl
call fcn.004494d0
movzx ecx, byte [esp + 0x10]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x44796f
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
jmp 0x44737a
lea edx, [ebp + 0x23]
mov ecx, dword [ebp + 0x1c]
lea ecx, [edx + ecx*4 + 0x11]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x1e8]
jmp 0x44736e
dec edi
jmp 0x447362
mov ebx, dword [esp + 0x1f4]
test ebx, 2
jne 0x447b96
mov ebx, dword [esp + 0x70]
jmp 0x447355
mov ebx, dword [esp + 0x70]
jmp 0x447362
mov edi, dword [esp + 0x1f4]
mov edx, dword [esp + 0x2c]
jmp 0x4473a8
cmp ebx, ecx
jge 0x447bc7
cmp ebx, 0x100000
jae 0x448538
mov ebp, dword [esp + 0x28]
mov dword [esi + ebx*4], ebp
inc ebx
mov ebp, dword [esp + 0x180]
jmp 0x447327
mov edi, dword [esp + 0x1e0]
jmp 0x447327
xchg edi, eax
cmp al, 9
xchg edi, eax
je 0x447308
xchg edi, eax
cmp al, 0x13
xchg edi, eax
xchg edi, ebx
sete bl
xchg edi, ebx
jmp 0x44730d
mov dword [esp + 0x8c], eax
movzx eax, byte [esp + 0x1d]
mov byte [esp + 0x1e], al
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov byte [esp + 0x7c], dl
mov edx, dword [esp + 0x74]
mov dword [esp + 0x20], edx
jmp 0x447c59
mov esi, dword [esp + 0x1a0]
movzx edx, byte [ebp + edx + 2]
mov edi, dword [ebp + ebx*4 + 0x10]
add edi, dword [esi]
lea esi, [edi + 1]
mov ebp, dword [esp + 0x180]
mov dword [esp + 0x20], edi
mov byte [esp + 0x1e], dl
mov ebx, ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x70], ebx
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0x10], ecx
call fcn.004432e0
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x447d45
cmp eax, 0x100000
jae 0x44854e
lea edx, [eax + eax*4]
mov ebx, edx
shl edx, 2
mov ebp, dword [esp + 0x198]
movzx esi, byte [ebp + edx + 2]
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x447cd2
movzx esi, byte [esp + 0x1e]
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x447d34
mov eax, 1
test al, al
je 0x447d24
mov esi, dword [esp + 0x1e0]
test esi, esi
jle 0x447ce9
lea eax, [esi - 1]
mov ecx, dword [esp + 0x70]
jmp 0x447c28
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x1e8]
cmp eax, edi
jge 0x447d1b
cmp eax, 0x100000
jae 0x448544
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x1e4]
mov dword [edi + eax*4], ecx
inc eax
mov ecx, eax
mov eax, esi
jmp 0x447c28
mov edi, dword [esp + 0x1e4]
jmp 0x447d12
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1e0]
jmp 0x447c28
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x447cc9
xchg esi, eax
cmp al, 0x13
xchg esi, eax
sete al
jmp 0x447cce
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1e4]
movzx edi, byte [esp + 0x1e]
mov ebx, dword [esp + 0x70]
jmp 0x4472f7
lea edx, [ebp + 0x23]
mov eax, dword [ebp + 0x1c]
lea eax, [edx + eax*4 + 0x11]
mov eax, dword [eax]
movzx edx, byte [esp + 0x1c]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x5c]
jmp 0x4472d2
lea edx, [edi - 1]
mov edi, edx
movzx edx, byte [esp + 0x1c]
jmp 0x4472b1
mov esi, dword [esp + 0x1f4]
test esi, 2
jne 0x447dbc
mov esi, dword [esp + 0x1e4]
jmp 0x4472a4
mov esi, dword [esp + 0x1e4]
jmp 0x4472b1
mov ebx, dword [esp + 0x38]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x1e0]
jmp 0x44732c
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1f0]
mov dword [esp + 4], ecx
mov ebp, dword [ebx]
mov edx, ebx
call ebp
movzx eax, byte [esp + 8]
test al, al
je 0x447e2d
mov esi, dword [esp + 0x1e4]
test esi, esi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x447287
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1f8], eax
add esp, 0x1cc
ret
mov dword [esp + 0x1ac], 0
test ebx, ebx
jmp 0x447278
test ebx, ebx
mov edx, esi
jmp 0x447278
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 8], ecx
test ebx, ebx
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov dword [esp + 0x10], edx
call fcn.004485c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x447238
xor edi, edi
jmp 0x447219
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x447238
test ebx, ebx
mov edi, dword [esp + 0x184]
jmp 0x4471f7
mov ebx, dword [esp + 0x1b0]
test ebx, ebx
jne 0x4480c5
mov ebx, dword [esp + 0x1b8]
add ebx, 0xfffffffc
mov edi, ebx
mov ebx, dword [ebx]
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
call fcn.004428c0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x447f4f
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x19c]
mov ebx, eax
mov edi, ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
jmp 0x4471c2
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x4480b5
mov ebp, dword [esp + 0x1dc]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x88]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4480ac
mov esi, dword [esp + 0x180]
cmp byte [esi + 0x20], 9
jne 0x4480a5
xor edx, edx
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ecx
mov edi, dword [esp + 0x1ec]
test edi, edi
jne 0x447fb4
test dl, dl
jne 0x447fb4
test edi, edi
je 0x447f26
jmp 0x448558
mov dword [esp], esi
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00442eb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x194], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 0x74], edx
call fcn.0042c8a0
lea eax, [0x8d1171]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0042d270
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.0042d270
lea eax, [0x8c2ec9]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
call fcn.0042cac0
call fcn.0042c910
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1a0]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
call fcn.00449c90
mov edi, dword [esp + 0x1ec]
test edi, edi
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx ebx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x447fa9
mov edx, ebx
jmp 0x447f8a
mov esi, dword [esp + 0x180]
jmp 0x4480a5
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x4480a5
xor edi, edi
jmp 0x447f07
cmp bl, 6
je 0x447194
cmp bl, 4
je 0x447194
cmp bl, 5
je 0x447194
cmp bl, 7
je 0x447194
cmp bl, 0x10
je 0x447194
xchg edi, eax
test al, al
xchg edi, eax
je 0x44810a
cmp bl, 8
sete bl
jmp 0x447199
xor ebx, ebx
jmp 0x447199
xor edi, edi
jmp 0x447187
mov ebx, dword [esp + 0x1f4]
test ebx, 4
je 0x448265
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x18]
cmp dword [edx], ecx
jne 0x44825c
mov edx, dword [edx + 0x4c]
test edx, edx
je 0x44825c
movzx ebx, byte [ebp + 0x20]
cmp bl, 5
je 0x448206
cmp bl, 0xd
jne 0x4481fd
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x17c], edi
mov dword [esp + 0x188], ebp
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0xc], ecx
call fcn.00443190
mov eax, dword [esp + 0x1b4]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1b8], eax
add eax, 4
mov dword [esp + 0x1b8], eax
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov edi, dword [esp + 0x17c]
mov ebp, dword [esp + 0x188]
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x19c]
jmp 0x447165
mov edx, eax
mov eax, esi
jmp 0x44817a
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp], eax
call fcn.004428c0
mov ebp, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esp + 0x1a0], ebp
mov dword [esp + 0x1a4], edi
mov ecx, dword [esp + 0x1dc]
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
jmp 0x44817a
mov edx, eax
mov eax, esi
jmp 0x44817a
mov ecx, dword [esp + 0x1dc]
jmp 0x44825c
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
jmp 0x447407
mov edx, dword [esp + 0x2c]
mov eax, edi
jmp 0x447407
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x448325
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x74], eax
call fcn.0042c8a0
lea eax, [0x8c7b83]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
call fcn.0042cac0
call fcn.0042c910
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x1a0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00449c90
mov eax, dword [esp + 0x1ec]
test eax, eax
jne 0x44856e
mov dword [esp + 0x1f8], 0
add esp, 0x1cc
ret
movzx ecx, byte [esp + 0x1f]
test cl, cl
jne 0x448295
test eax, eax
jmp 0x44830d
mov edi, dword [esp + 0x1ec]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x78]
mov byte [esp + 0x1f], cl
mov ecx, dword [esp + 0x1e4]
jmp 0x446ffc
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
jmp 0x446fa7
mov ecx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x1d0]
xor ebp, ebp
jmp 0x446fa7
mov edx, dword [esp + 0x1d4]
jmp 0x448367
mov ecx, dword [esp + 0x1ec]
jmp 0x446f41
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x38], edx
mov eax, dword [ebx + 0x54]
mov dword [esp + 0x60], eax
mov ecx, dword [ebx + 0x50]
mov dword [esp + 0x78], ecx
call fcn.0042c8a0
lea eax, [0x8c1eda]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042d270
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0042d0b0
lea eax, [0x8c2116]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
lea eax, [0x8c01d5]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042d270
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
call fcn.0042cac0
call fcn.0042c910
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax]
mov dword [esp + 0x74], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x68], eax
call fcn.0042c8a0
lea eax, [0x8c0fc8]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
lea eax, [0x8bfb0f]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042d270
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d140
lea eax, [0x8c0061]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042d270
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d0b0
lea eax, [0x8c01bc]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042d270
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d0b0
call fcn.0042cac0
call fcn.0042c910
lea eax, [0x8d1be0]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0042ba70
mov ecx, 0x100000
call fcn.00452070
mov ecx, 0x100000
call fcn.00452070
mov ecx, 0x100000
call fcn.00452070
mov eax, ebx
mov ecx, 0x100000
call fcn.00452070
mov ecx, 0x100000
call fcn.00452070
mov ecx, 0x100000
call fcn.00452070
lea eax, [0x8c5a23]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0042ba70
lea eax, [0x8c1f66]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042ba70
lea eax, [0x8daa98]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.0042ba70
lea eax, [0x8da106]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.0042ba70
nop
call fcn.004507b0
jmp fcn.00446f00