Function at 0x445400
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x14c]
cmp eax, dword [ecx + 8]
jbe 0x446ab1
sub esp, 0x1cc
mov eax, dword [esp + 0x1e0]
test eax, eax
jle 0x446885
mov ecx, dword [esp + 0x1ec]
test ecx, ecx
jne 0x446a9a
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x1dc]
cmp edx, ebx
jne 0x445465
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x4c], edx
je 0x446a84
call fcn.00436c70
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x1d0]
cmp ecx, 0xffffffff
jne 0x44687c
mov edx, dword [esp + 0x1d4]
cmp edx, 0xffffffff
jne 0x446867
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x446859
mov ebx, dword [ecx + 0x3c]
xor ebp, ebp
mov dword [esp + 0x78], eax
lea edi, [esp + 0x1a0]
mov esi, eax
xor eax, eax
call fcn.00450575
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b4], edx
mov ecx, dword [esp + 0x1dc]
mov edi, esi
mov esi, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0xb8]
mov dword [esp + 0x190], ecx
mov ecx, dword [esp + 0x1e4]
test ecx, ecx
je 0x446836
xor eax, eax
mov byte [esp + 0x1f], al
xor eax, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x18c], ebp
test ebx, ebx
jne 0x445520
mov ebx, edx
mov edx, dword [edx]
mov dword [esp + 0x1a8], edx
lea edx, [ebx + 4]
mov dword [esp + 0x1b4], edx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call fcn.00441350
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x446786
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x9c]
xor eax, eax
call fcn.00450550
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [esp + 0x1e0]
mov esi, dword [esp + 0x190]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18c]
xor edi, edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1c], al
xchg edi, eax
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1d], al
xchg edi, eax
xor edi, edi
mov dword [esp + 0x2c], edi
jmp 0x445623
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1a4], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b0], 0
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1c8], 0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
sete bl
mov ebp, dword [esp + 0x1dc]
mov edi, eax
mov byte [esp + 0x1c], bl
mov eax, esi
mov esi, dword [esp + 0x19c]
mov ebp, dword [esp + 0x1e0]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x1dc]
xor edx, edx
cmp edi, ecx
jge 0x44677b
mov dword [esp + 0x38], edi
mov dword [esp + 0x1e0], ebp
mov ebp, dword [esp + 0x1a0]
mov edi, dword [esp + 0x1a4]
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x44676e
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x1b8]
test ebx, ebx
je 0x446618
mov dword [esp + 0x178], edi
mov ebx, dword [esp + 0x1dc]
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x446611
cmp dword [edi], ebx
xchg edi, ebx
sete bl
xchg edi, ebx
movzx ebx, byte [ebp + 0x20]
cmp bl, 2
jne 0x4465cc
mov ebx, 1
mov dword [esp + 0x5c], eax
mov dword [esp + 0x19c], esi
mov dword [esp + 0x180], ebp
test bl, bl
je 0x4463e3
mov dword [esp + 0x1b0], 0
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x174], ebx
mov dword [esp + 0x184], edi
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1bc], ebx
add ebx, 0xfffffffc
mov dword [esp + 0x1bc], ebx
mov ebx, dword [esp + 0x1ec]
test ebx, ebx
je 0x4463c6
mov edi, dword [esp + 0x1b8]
mov dword [esp + 0x1c0], edi
je 0x4463bf
cmp dword [ebp + 8], 0x80000000
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [ebp + 8]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c8], 0
xchg edi, eax
test al, al
xchg edi, eax
jne 0x44635a
mov esi, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], esi
movzx esi, byte [esp + 0x1c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x446351
mov edi, dword [esp + 0x1a0]
mov edx, esi
mov esi, dword [edi + 0xc]
test esi, esi
je 0x44633f
mov edi, dword [edi]
lea esi, [esi + edi + 1]
mov dword [esp + 0x1ac], esi
test ebx, ebx
jne 0x4462dd
mov esi, dword [esp + 0x1e4]
test esi, esi
je 0x4462c8
mov edi, dword [esp + 0x1a8]
mov dword [esp + 0x20], edi
mov ebx, dword [esp + 0x38]
test ebx, ebx
jle 0x4462a1
cmp dword [ebp], edi
jae 0x4457b1
test dl, dl
je 0x446292
cmp byte [ebp + 0x23], 4
ja 0x446271
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x74], edi
mov edi, dword [esp + 0x198]
test edi, edi
jne 0x4460fb
movzx edi, byte [esp + 0x1d]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x28], edi
movzx edi, byte [esp + 0x1d]
cmp byte [ebp + 0x20], 0x14
jne 0x445817
xchg edi, eax
cmp al, 0x12
xchg edi, eax
jne 0x4460df
mov edi, 1
xchg edi, eax
test al, al
xchg edi, eax
je 0x4460d3
mov edi, dword [esp + 0x1e0]
test edi, edi
jle 0x4460af
dec edi
movzx esi, byte [ebp + 0x20]
dec ebx
mov dword [esp + 0x1e0], edi
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x44609f
mov dword [esp + 0x70], ebx
mov edi, dword [esp + 0x1a8]
test ebx, ebx
jle 0x44607e
cmp dword [ebp], edi
jae 0x445862
test dl, dl
je 0x446078
cmp byte [ebp + 0x23], 4
ja 0x446060
xor edx, edx
test edx, edx
jne 0x445ddf
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x1f4]
test edi, 1
je 0x445d79
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4459bd
movzx esi, byte [ebp + 0x20]
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
inc ebx
cmp byte [ebp + 0x20], 0xe
jne 0x4459af
test eax, eax
jle 0x4459af
mov edi, dword [esp + 0x19c]
mov esi, dword [edi + eax*4 - 4]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x1e0]
test esi, esi
jne 0x4459a3
mov esi, dword [esp + 0x1ec]
test esi, esi
je 0x44594a
lea esi, [eax - 1]
movzx ebp, byte [ebp + 0x20]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
mov eax, ebx
mov ebx, dword [esp + 0x184]
test ebx, ebx
jne 0x44559f
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x445946
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x445938
cmp edx, ecx
jge 0x445938
mov eax, dword [esp + 0x1b4]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [ebx + 0x40]
cmp eax, ebp
jne 0x446891
mov dword [esp + 0x1f8], edx
add esp, 0x1cc
ret
mov edx, eax
jmp 0x445910
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
movzx edx, byte [esp + 0x1f]
mov byte [esp + 4], dl
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00446c40
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1ec]
mov edi, dword [esp + 0x19c]
jmp 0x4458ea
mov esi, dword [esp + 0x1ec]
jmp 0x4458ea
mov edi, dword [esp + 0x19c]
mov esi, eax
jmp 0x4458ed
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00441940
mov eax, dword [esp + 8]
mov dword [esp + 0x160], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
call fcn.00441bc0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x16c], edx
mov ebx, dword [esp + 0x30]
cmp ebx, 0xf
je 0x445d33
mov ebp, dword [esp + 0x160]
mov dword [esp + 0x160], ebp
mov dword [esp + 0x30], ebx
call fcn.0042b830
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0042c0d0
lea eax, [0x6b455a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042c0d0
call fcn.0042b8a0
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x198], eax
xor ecx, ecx
jmp 0x445abd
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x74], edx
call fcn.0042b830
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
call fcn.0042b8a0
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x198]
mov edx, dword [esp + 0x1c4]
shr edx, 2
cmp ecx, edx
jae 0x445b25
cmp ecx, 0xa
jae 0x445b05
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x445a88
call fcn.0042b830
lea eax, [0x6b45a4]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042c0d0
call fcn.0042b8a0
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x4c]
jmp 0x445a88
call fcn.0042b830
lea eax, [0x6b53ae]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042c0d0
call fcn.0042b8a0
call fcn.0042b830
lea eax, [0x6b45a0]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042c0d0
call fcn.0042b8a0
call fcn.0042b830
lea eax, [0x6b457c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042c0d0
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0042c0d0
lea eax, [0x6b4566]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042c0d0
mov eax, dword [esp + 0x44]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042bf10
call fcn.0042b8a0
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x180]
mov edx, dword [ecx]
cmp eax, edx
ja 0x445ce5
mov eax, dword [esp + 0x1dc]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x445cdc
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x445cd3
cmp dword [edx + 0x4c], eax
jne 0x445cc4
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 0x64], edx
call fcn.0042b830
lea eax, [0x6b4c2b]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042c0d0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
lea eax, [0x6b4c47]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042c0d0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
lea eax, [0x6b4c3f]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042c0d0
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
call fcn.0042b8a0
call fcn.0042b830
call fcn.0042ba50
call fcn.0042b8a0
mov eax, dword [esp + 0x2c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x4458a4
mov edx, dword [esp + 0x78]
cmp edx, 2
jge 0x445be3
jmp 0x445c8c
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x445ccb
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x445ccb
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], edx
call fcn.0042b830
lea eax, [0x6b458a]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042c0d0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x68]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
call fcn.0042b8a0
mov ecx, dword [esp + 0x180]
jmp 0x445bbd
mov eax, dword [esp + 0x160]
mov dword [esp], eax
lea ecx, [0x6bc813]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00402320
movzx eax, byte [esp + 0xc]
test al, al
je 0x445d69
lea ebp, [0x6b5bba]
mov ebx, 5
jmp 0x445a34
mov ebp, dword [esp + 0x160]
mov ebx, dword [esp + 0x30]
jmp 0x445a34
movzx eax, byte [ebp + 0x20]
mov dword [esp], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1dc]
mov dword [esp + 8], ebx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0xc], al
xchg edi, eax
mov byte [esp + 0xd], al
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.004479d0
movzx esi, byte [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x44589a
mov dword [esp + 0x198], edx
jmp 0x445e16
mov ebx, dword [esp + 0x1a0]
lea eax, [eax + eax*4]
mov ebp, eax
shl eax, 2
mov edx, dword [esp + 0x198]
movzx eax, byte [edx + eax + 2]
mov edi, dword [edx + ebp*4 + 0x10]
add edi, dword [ebx]
mov ebp, dword [esp + 0x180]
mov esi, eax
mov dword [esp + 0x2c], ecx
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
call fcn.00441d70
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x446038
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x1f4]
test edx, 1
je 0x445fc1
mov ecx, 1
test cl, cl
jne 0x445e87
mov ecx, dword [esp + 0x2c]
cmp eax, 0x100000
jb 0x445de8
jmp 0x446a1a
cmp eax, 0x100000
jae 0x446a24
lea ecx, [eax + eax*4]
mov edx, dword [esp + 0x198]
mov ecx, dword [edx + ecx*4 + 0xc]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.004419c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x15c], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.00441bc0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
call fcn.0042b830
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0042c0d0
lea eax, [0x6b5f37]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0042c0d0
call fcn.0042b8a0
call fcn.0042b830
lea eax, [0x6b457c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042c0d0
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0042c0d0
lea eax, [0x6b4566]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042c0d0
mov eax, dword [esp + 0x40]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042bf10
call fcn.0042ba50
call fcn.0042b8a0
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x445e77
cmp eax, 0x100000
jae 0x446a2e
lea ecx, [eax + eax*4]
shl ecx, 2
mov edx, dword [esp + 0x198]
movzx ecx, byte [edx + ecx + 2]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1dc]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov byte [esp + 0xd], cl
movzx ecx, byte [esp + 0x1d]
mov byte [esp + 0xe], cl
call fcn.004479d0
movzx ecx, byte [esp + 0x10]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x445e6f
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
jmp 0x44587a
lea edx, [ebp + 0x23]
mov ecx, dword [ebp + 0x1c]
lea ecx, [edx + ecx*4 + 0x11]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x1e8]
jmp 0x44586e
dec edi
jmp 0x445862
mov ebx, dword [esp + 0x1f4]
test ebx, 2
jne 0x446096
mov ebx, dword [esp + 0x70]
jmp 0x445855
mov ebx, dword [esp + 0x70]
jmp 0x445862
mov edi, dword [esp + 0x1f4]
mov edx, dword [esp + 0x2c]
jmp 0x4458a8
cmp ebx, ecx
jge 0x4460c7
cmp ebx, 0x100000
jae 0x446a38
mov ebp, dword [esp + 0x28]
mov dword [esi + ebx*4], ebp
inc ebx
mov ebp, dword [esp + 0x180]
jmp 0x445827
mov edi, dword [esp + 0x1e0]
jmp 0x445827
xchg edi, eax
cmp al, 9
xchg edi, eax
je 0x445808
xchg edi, eax
cmp al, 0x13
xchg edi, eax
xchg edi, ebx
sete bl
xchg edi, ebx
jmp 0x44580d
mov dword [esp + 0x8c], eax
movzx eax, byte [esp + 0x1d]
mov byte [esp + 0x1e], al
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov byte [esp + 0x7c], dl
mov edx, dword [esp + 0x74]
mov dword [esp + 0x20], edx
jmp 0x446159
mov esi, dword [esp + 0x1a0]
movzx edx, byte [ebp + edx + 2]
mov edi, dword [ebp + ebx*4 + 0x10]
add edi, dword [esi]
lea esi, [edi + 1]
mov ebp, dword [esp + 0x180]
mov dword [esp + 0x20], edi
mov byte [esp + 0x1e], dl
mov ebx, ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x70], ebx
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0x10], ecx
call fcn.00441d70
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x446245
cmp eax, 0x100000
jae 0x446a4e
lea edx, [eax + eax*4]
mov ebx, edx
shl edx, 2
mov ebp, dword [esp + 0x198]
movzx esi, byte [ebp + edx + 2]
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x4461d2
movzx esi, byte [esp + 0x1e]
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x446234
mov eax, 1
test al, al
je 0x446224
mov esi, dword [esp + 0x1e0]
test esi, esi
jle 0x4461e9
lea eax, [esi - 1]
mov ecx, dword [esp + 0x70]
jmp 0x446128
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x1e8]
cmp eax, edi
jge 0x44621b
cmp eax, 0x100000
jae 0x446a44
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x1e4]
mov dword [edi + eax*4], ecx
inc eax
mov ecx, eax
mov eax, esi
jmp 0x446128
mov edi, dword [esp + 0x1e4]
jmp 0x446212
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1e0]
jmp 0x446128
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x4461c9
xchg esi, eax
cmp al, 0x13
xchg esi, eax
sete al
jmp 0x4461ce
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1e4]
movzx edi, byte [esp + 0x1e]
mov ebx, dword [esp + 0x70]
jmp 0x4457f7
lea edx, [ebp + 0x23]
mov eax, dword [ebp + 0x1c]
lea eax, [edx + eax*4 + 0x11]
mov eax, dword [eax]
movzx edx, byte [esp + 0x1c]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x5c]
jmp 0x4457d2
lea edx, [edi - 1]
mov edi, edx
movzx edx, byte [esp + 0x1c]
jmp 0x4457b1
mov esi, dword [esp + 0x1f4]
test esi, 2
jne 0x4462bc
mov esi, dword [esp + 0x1e4]
jmp 0x4457a4
mov esi, dword [esp + 0x1e4]
jmp 0x4457b1
mov ebx, dword [esp + 0x38]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x1e0]
jmp 0x44582c
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1f0]
mov dword [esp + 4], ecx
mov ebp, dword [ebx]
mov edx, ebx
call ebp
movzx eax, byte [esp + 8]
test al, al
je 0x44632d
mov esi, dword [esp + 0x1e4]
test esi, esi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x445787
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1f8], eax
add esp, 0x1cc
ret
mov dword [esp + 0x1ac], 0
test ebx, ebx
jmp 0x445778
test ebx, ebx
mov edx, esi
jmp 0x445778
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 8], ecx
test ebx, ebx
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov dword [esp + 0x10], edx
call fcn.00446ac0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x445738
xor edi, edi
jmp 0x445719
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x445738
test ebx, ebx
mov edi, dword [esp + 0x184]
jmp 0x4456f7
mov ebx, dword [esp + 0x1b0]
test ebx, ebx
jne 0x4465c5
mov ebx, dword [esp + 0x1b8]
add ebx, 0xfffffffc
mov edi, ebx
mov ebx, dword [ebx]
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
call fcn.00441350
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x44644f
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x19c]
mov ebx, eax
mov edi, ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
jmp 0x4456c2
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x4465b5
mov ebp, dword [esp + 0x1dc]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x88]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4465ac
mov esi, dword [esp + 0x180]
cmp byte [esi + 0x20], 9
jne 0x4465a5
xor edx, edx
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ecx
mov edi, dword [esp + 0x1ec]
test edi, edi
jne 0x4464b4
test dl, dl
jne 0x4464b4
test edi, edi
je 0x446426
jmp 0x446a58
mov dword [esp], esi
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00441940
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x194], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 0x74], edx
call fcn.0042b830
lea eax, [0x6c51ce]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0042c0d0
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.0042c0d0
lea eax, [0x6bb08f]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.0042c0d0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
call fcn.0042ba50
call fcn.0042b8a0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1a0]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
call fcn.00448190
mov edi, dword [esp + 0x1ec]
test edi, edi
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx ebx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x4464a9
mov edx, ebx
jmp 0x44648a
mov esi, dword [esp + 0x180]
jmp 0x4465a5
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x4465a5
xor edi, edi
jmp 0x446407
cmp bl, 6
je 0x445694
cmp bl, 4
je 0x445694
cmp bl, 5
je 0x445694
cmp bl, 7
je 0x445694
cmp bl, 0x10
je 0x445694
xchg edi, eax
test al, al
xchg edi, eax
je 0x44660a
cmp bl, 8
sete bl
jmp 0x445699
xor ebx, ebx
jmp 0x445699
xor edi, edi
jmp 0x445687
mov ebx, dword [esp + 0x1f4]
test ebx, 4
je 0x446765
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x18]
cmp dword [edx], ecx
jne 0x44675c
mov edx, dword [edx + 0x4c]
test edx, edx
je 0x44675c
movzx ebx, byte [ebp + 0x20]
cmp bl, 5
je 0x446706
cmp bl, 0xd
jne 0x4466fd
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x17c], edi
mov dword [esp + 0x188], ebp
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0xc], ecx
call fcn.00441c20
mov eax, dword [esp + 0x1b4]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1b8], eax
add eax, 4
mov dword [esp + 0x1b8], eax
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov edi, dword [esp + 0x17c]
mov ebp, dword [esp + 0x188]
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x19c]
jmp 0x445665
mov edx, eax
mov eax, esi
jmp 0x44667a
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp], eax
call fcn.00441350
mov ebp, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esp + 0x1a0], ebp
mov dword [esp + 0x1a4], edi
mov ecx, dword [esp + 0x1dc]
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
jmp 0x44667a
mov edx, eax
mov eax, esi
jmp 0x44667a
mov ecx, dword [esp + 0x1dc]
jmp 0x44675c
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
jmp 0x445907
mov edx, dword [esp + 0x2c]
mov eax, edi
jmp 0x445907
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x446825
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x74], eax
call fcn.0042b830
lea eax, [0x6bf3ef]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042c0d0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
call fcn.0042ba50
call fcn.0042b8a0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x1a0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00448190
mov eax, dword [esp + 0x1ec]
test eax, eax
jne 0x446a6e
mov dword [esp + 0x1f8], 0
add esp, 0x1cc
ret
movzx ecx, byte [esp + 0x1f]
test cl, cl
jne 0x446795
test eax, eax
jmp 0x44680d
mov edi, dword [esp + 0x1ec]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x78]
mov byte [esp + 0x1f], cl
mov ecx, dword [esp + 0x1e4]
jmp 0x4454fc
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
jmp 0x4454a7
mov ecx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x1d0]
xor ebp, ebp
jmp 0x4454a7
mov edx, dword [esp + 0x1d4]
jmp 0x446867
mov ecx, dword [esp + 0x1ec]
jmp 0x445441
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x38], edx
mov eax, dword [ebx + 0x54]
mov dword [esp + 0x60], eax
mov ecx, dword [ebx + 0x50]
mov dword [esp + 0x78], ecx
call fcn.0042b830
lea eax, [0x6b9bd6]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042c0d0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0042bf10
lea eax, [0x6b9e19]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0042c0d0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
lea eax, [0x6b534f]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042c0d0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
call fcn.0042ba50
call fcn.0042b8a0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax]
mov dword [esp + 0x74], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x68], eax
call fcn.0042b830
lea eax, [0x6b8263]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.0042c0d0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
lea eax, [0x6b455f]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042c0d0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042bfa0
lea eax, [0x6b4e9b]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042c0d0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042bf10
lea eax, [0x6b533b]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042c0d0
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042bf10
call fcn.0042ba50
call fcn.0042b8a0
lea eax, [0x6c5896]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0042aa00
mov ecx, 0x100000
call fcn.00450370
mov ecx, 0x100000
call fcn.00450370
mov ecx, 0x100000
call fcn.00450370
mov eax, ebx
mov ecx, 0x100000
call fcn.00450370
mov ecx, 0x100000
call fcn.00450370
mov ecx, 0x100000
call fcn.00450370
lea eax, [0x6bdb75]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0042aa00
lea eax, [0x6b9c8a]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042aa00
lea eax, [0x6cb48c]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.0042aa00
lea eax, [0x6caf8f]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.0042aa00
nop
call fcn.0044eab0
jmp fcn.00445400