Function at 0x426980
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4aeb3b
mov eax, dword fs:[0]
push eax
sub esp, 0x268
push ebx
push esi
push edi
mov eax, dword [0x4cbddc]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
call fcn.0044c5cc
test eax, eax
je 0x426a37
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x7c]
call eax
mov esi, eax
mov dword [esp + 0x98], esi
test esi, esi
je 0x426a37
mov eax, dword [esi + 0x4ec]
test eax, eax
je 0x426a37
mov ebx, dword [eax + 0x54]
mov dword [esp + 0x60], ebx
test ebx, ebx
je 0x426a37
push 0x4b7474
mov ecx, esi
call fcn.004112a0
lea ecx, [esp + 0xac]
call fcn.0044bc20
lea ecx, [esp + 0xac]
mov dword [esp + 0x280], 0
call fcn.00449480
test al, al
jne 0x426a4f
mov ecx, esi
call fcn.004112d0
lea ecx, [esp + 0xac]
mov dword [esp + 0x280], 0xffffffff
call fcn.0044bec0
xor al, al
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x3c]
call dword [0x4b32a8]
push 0x4b7464
lea ecx, [esp + 0x48]
mov byte [esp + 0x284], 1
call dword [0x4b2fa0]
push 1
push 0x4b33fe
push str._n_n_n_n
push 0x4b744c
push 0
lea ecx, [esp + 0xc0]
mov byte [esp + 0x294], 2
call fcn.0044b870
push 1
push 0x4b33fe
push 0x4b740c
push 0x4b73fc
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
lea ecx, [esp + 0x5c]
push ecx
call fcn.0042c190
mov edx, dword [eax]
mov esi, dword [0x4b32a0]
push edx
lea eax, [esp + 0x44]
push 0x4b73f0
push eax
mov byte [esp + 0x290], 3
call esi
add esp, 0x10
lea ecx, [esp + 0x5c]
mov byte [esp + 0x280], 2
call dword [0x4b3340]
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
push 0x4b73e0
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 0
call dword [0x4b2644]
mov dword [esp + 0x94], edx
lea edx, [esp + 0x90]
mov dword [esp + 0x90], eax
push edx
lea eax, [esp + 0x228]
push eax
call dword [0x4b265c]
add esp, 0xc
neg eax
sbb eax, eax
not eax
and eax, dword [esp + 0x22c]
lea ecx, [esp + 0x8c]
push eax
call fcn.00424d70
push eax
lea ecx, [esp + 0x94]
call fcn.00424d40
push eax
lea ecx, [esp + 0x48]
push 0x4b73cc
push ecx
call esi
add esp, 0x14
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
push 0x4b73bc
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 1
push 1
push 1
lea ecx, [esp + 0xb8]
call fcn.0044ad30
fld dword [0x4b73b8]
sub esp, 0x10
fst dword [esp + 0xc]
lea ecx, [esp + 0xbc]
fstp dword [esp + 8]
fldz
fst dword [esp + 4]
fstp dword [esp]
call fcn.0044ac50
push 1
push 0x4b33fe
push 0x4b73b4
push 0x4b73a4
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 1
push 0x4b33fe
push 0x4b7394
push 0x4b7384
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 0x4b7374
lea ecx, [esp + 0x4c]
call dword [0x4b2fa0]
push 0x4b7364
lea ecx, [esp + 0x48]
mov byte [esp + 0x284], 4
call dword [0x4b3348]
push 1
lea eax, [esp + 0x40]
push 0x4b7354
push eax
call esi
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b7308
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
lea edx, [esp + 0x64]
lea esi, [ebx + 0x58]
push edx
mov ecx, esi
call fcn.00426240
lea eax, [esp + 0x84]
push eax
mov ecx, esi
call fcn.00426210
mov esi, dword [eax]
mov edi, dword [eax + 4]
test esi, esi
je 0x426cba
cmp esi, dword [esp + 0x64]
je 0x426cc0
call dword [0x4b2640]
cmp edi, dword [esp + 0x68]
je 0x426dea
test esi, esi
jne 0x426dc3
call dword [0x4b2640]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x426ce5
call dword [0x4b2640]
test esi, esi
jne 0x426dca
call dword [0x4b2640]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x426d00
call dword [0x4b2640]
test esi, esi
jne 0x426dd1
call dword [0x4b2640]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x426d1b
call dword [0x4b2640]
test esi, esi
jne 0x426dd8
call dword [0x4b2640]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x426d36
call dword [0x4b2640]
test esi, esi
jne 0x426ddf
call dword [0x4b2640]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x426d51
call dword [0x4b2640]
mov eax, dword [edi]
fld qword [eax + 0x30]
sub esp, 0x20
fstp qword [esp + 0x18]
lea ecx, [esp + 0x5c]
fld qword [eax + 0x28]
fstp qword [esp + 0x10]
fld qword [eax + 0x20]
fstp qword [esp + 8]
fld qword [eax + 0x18]
fstp qword [esp]
push eax
push str._sc_gc_gc_gc_g
push ecx
call dword [0x4b32a0]
add esp, 0x2c
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
test esi, esi
jne 0x426de6
call dword [0x4b2640]
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x426dbb
call dword [0x4b2640]
add edi, 4
jmp 0x426cb0
mov eax, dword [esi]
jmp 0x426cda
mov eax, dword [esi]
jmp 0x426cf5
mov eax, dword [esi]
jmp 0x426d10
mov eax, dword [esi]
jmp 0x426d2b
mov eax, dword [esi]
jmp 0x426d46
mov eax, dword [esi]
jmp 0x426db0
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov esi, dword [0x4b32a0]
push 2
lea eax, [esp + 0x40]
push 0x4b72e0
push eax
call esi
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b72a8
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
fld qword [ebx + 0xa0]
sub esp, 0x20
fstp qword [esp + 0x18]
lea edx, [esp + 0x5c]
fld qword [ebx + 0x98]
fstp qword [esp + 0x10]
fld qword [ebx + 0x90]
fstp qword [esp + 8]
fld qword [ebx + 0x88]
fstp qword [esp]
push str._gc_gc_gc_g
push edx
call esi
add esp, 0x28
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 3
lea ecx, [esp + 0x40]
push 0x4b7284
push ecx
call esi
add esp, 0xc
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax*4 + 0x4cb268]
push ecx
lea edx, [esp + 0x40]
push 0x4b7274
push edx
call esi
add esp, 0xc
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov ecx, dword [ebx + 0xb4]
push ecx
lea edx, [esp + 0x40]
push 0x4b7260
push edx
call esi
add esp, 0xc
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 4
lea ecx, [esp + 0x40]
push 0x4b7234
push ecx
call esi
add esp, 0xc
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov esi, dword [ebx + 0x100]
sub esi, dword [ebx + 0xfc]
xor edi, edi
sar esi, 2
mov dword [esp + 0x7c], esi
test esi, esi
jle 0x427830
jmp 0x427010
mov eax, dword [ebx + 0x100]
sub eax, dword [ebx + 0xfc]
sar eax, 2
cmp edi, eax
jb 0x427029
call dword [0x4b2640]
mov ecx, dword [ebx + 0xfc]
mov esi, dword [ecx + edi*4]
inc edi
push edi
lea edx, [esp + 0x40]
push 0x4b7220
push edx
mov dword [esp + 0x60], edi
call dword [0x4b32a0]
add esp, 0xc
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b71b8
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
cmp dword [esi + 0xe0], 1
mov eax, 0x4b513c
je 0x4270a8
mov eax, 0x4b5134
fld qword [esi + 0xd8]
mov edi, dword [0x4b32a0]
push eax
sub esp, 0x30
fstp qword [esp + 0x28]
lea ecx, [esi + 0x80]
fld qword [esi + 0xc8]
lea edx, [esp + 0x70]
fstp qword [esp + 0x20]
fld qword [esi + 0xc0]
fstp qword [esp + 0x18]
fld qword [esi + 0xb0]
fstp qword [esp + 0x10]
fld qword [esi + 0xa8]
fstp qword [esp + 8]
fld qword [esi + 0xa0]
fstp qword [esp]
push ecx
push str._sc_gc_gc_gc_gc_gc_gc_s
push edx
call edi
add esp, 0x40
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 2
push 0x4b734c
push 0x4b7140
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov eax, dword [esi + 0x68]
test eax, eax
je 0x427172
fld qword [esi + 0x78]
jmp 0x427174
fldz
test eax, eax
je 0x42717d
fld qword [esi + 0x70]
jmp 0x42717f
fldz
test eax, eax
mov eax, 0x4b713c
jne 0x42718d
mov eax, 0x4b7138
sub esp, 0x10
fxch st(1)
fstp qword [esp + 8]
lea ecx, [esp + 0x4c]
fstp qword [esp]
push eax
fld qword [esi + 0x60]
sub esp, 0x18
fstp qword [esp + 0x10]
fld qword [esi + 0x58]
fstp qword [esp + 8]
fld qword [esi + 0x50]
fstp qword [esp]
push str._gc_gc_gc_sc_gc_g
push ecx
call edi
add esp, 0x34
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov ebx, dword [esp + 0x54]
push ebx
lea eax, [esp + 0x40]
push 0x4b710c
push eax
call edi
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b70ec
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
lea ecx, [esp + 0x40]
call dword [0x4b32a8]
mov eax, dword [esi + 0x12c]
inc eax
mov byte [esp + 0x280], 5
cmp eax, 9
ja case.default.0x42725b
jmp dword [eax*4 + 0x428568]
push 0x4b70e4
jmp 0x4272ad
push 0x4b51b0
jmp 0x4272ad
push 0x4b51a8
jmp 0x4272ad
push 0x4b70d8
jmp 0x4272ad
push 0x4b5190
jmp 0x4272ad
push 0x4b5184
jmp 0x4272ad
push 0x4b516c
jmp 0x4272ad
push 0x4b70cc
jmp 0x4272ad
push 0x4b5178
jmp 0x4272ad
push 0x4b5160
jmp 0x4272ad
push 0x4b33fe
lea ecx, [esp + 0x44]
call dword [0x4b3348]
mov eax, dword [esi + 0x128]
cmp eax, 1
jne 0x4272c6
fldz
jmp 0x4272d2
fld qword [esi + 0x130]
fmul qword [0x4b5288]
mov edx, dword [esp + 0x40]
push edx
sub esp, 8
fstp qword [esp]
push eax
lea eax, [esp + 0x4c]
push str._dc_gc_s
push eax
call edi
add esp, 0x18
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push ebx
lea edx, [esp + 0x40]
push 0x4b70a8
push edx
call edi
add esp, 0xc
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b7008
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov eax, dword [esi + 0x14]
mov dword [esp + 0x6c], eax
cmp dword [esi + 0x10], eax
jbe 0x427397
call dword [0x4b2640]
mov ebx, dword [esi + 0x10]
mov ecx, dword [esi + 4]
mov dword [esp + 0x64], ecx
cmp ebx, dword [esi + 0x14]
jbe 0x4273ac
call dword [0x4b2640]
mov edi, dword [esi + 4]
nop
test edi, edi
je 0x4273ba
cmp edi, dword [esp + 0x64]
je 0x4273c0
call dword [0x4b2640]
cmp ebx, dword [esp + 0x6c]
je 0x4276f0
test edi, edi
jne 0x427683
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4273e5
call dword [0x4b2640]
mov edx, dword [ebx]
cmp dword [edx + 0x128], 1
mov dword [esp + 0x5c], 0x4b5208
je 0x427400
mov dword [esp + 0x5c], 0x4b5200
test edi, edi
jne 0x42768a
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42741b
call dword [0x4b2640]
mov ecx, dword [ebx]
lea eax, [esp + 0x4c]
push eax
call fcn.00414000
mov dword [esp + 0x58], eax
mov byte [esp + 0x280], 6
test edi, edi
jne 0x427691
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42744e
call dword [0x4b2640]
test edi, edi
jne 0x427698
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x427469
call dword [0x4b2640]
test edi, edi
jne 0x42769f
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x427484
call dword [0x4b2640]
test edi, edi
jne 0x4276a6
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42749f
call dword [0x4b2640]
test edi, edi
jne 0x4276ad
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4274ba
call dword [0x4b2640]
test edi, edi
jne 0x4276b4
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4274d5
call dword [0x4b2640]
test edi, edi
jne 0x4276bb
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4274f0
call dword [0x4b2640]
test edi, edi
jne 0x4276c2
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42750b
call dword [0x4b2640]
test edi, edi
jne 0x4276c9
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x427526
call dword [0x4b2640]
test edi, edi
jne 0x4276d0
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x427541
call dword [0x4b2640]
test edi, edi
jne 0x4276d7
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42755c
call dword [0x4b2640]
test edi, edi
jne 0x4276de
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x427577
call dword [0x4b2640]
test edi, edi
jne 0x4276e5
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x427592
call dword [0x4b2640]
mov eax, dword [ebx]
fld qword [eax + 0x240]
mov ecx, dword [esp + 0x5c]
sub esp, 0x28
fstp qword [esp + 0x20]
lea edx, [eax + 0x28]
fld qword [eax + 0x248]
fstp qword [esp + 0x18]
fld qword [eax + 0x148]
fstp qword [esp + 0x10]
fld qword [eax + 0x138]
fstp qword [esp + 8]
fld qword [eax + 0x130]
fstp qword [esp]
push ecx
fld qword [eax + 0x20]
sub esp, 8
fstp qword [esp]
push edx
fld qword [eax + 0x238]
sub esp, 0x30
fstp qword [esp + 0x28]
lea edx, [esp + 0xa4]
fld qword [eax + 0x230]
fstp qword [esp + 0x20]
fld qword [eax + 0x228]
fstp qword [esp + 0x18]
fld qword [eax + 0x18]
fstp qword [esp + 0x10]
fld qword [eax + 0x10]
fstp qword [esp + 8]
fld qword [eax + 8]
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax]
fstp qword [esp]
push ecx
push str._sc_gc_gc_gc_g__g__gc_sc_gc_sc_gc_gc_gc_gc_g
push edx
call dword [0x4b32a0]
add esp, 0x74
lea ecx, [esp + 0x4c]
mov byte [esp + 0x280], 5
call dword [0x4b3340]
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
test edi, edi
jne 0x4276ec
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42767b
call dword [0x4b2640]
add ebx, 4
jmp 0x4273b0
mov eax, dword [edi]
jmp 0x4273da
mov eax, dword [edi]
jmp 0x427410
mov eax, dword [edi]
jmp 0x427443
mov eax, dword [edi]
jmp 0x42745e
mov eax, dword [edi]
jmp 0x427479
mov eax, dword [edi]
jmp 0x427494
mov eax, dword [edi]
jmp 0x4274af
mov eax, dword [edi]
jmp 0x4274ca
mov eax, dword [edi]
jmp 0x4274e5
mov eax, dword [edi]
jmp 0x427500
mov eax, dword [edi]
jmp 0x42751b
mov eax, dword [edi]
jmp 0x427536
mov eax, dword [edi]
jmp 0x427551
mov eax, dword [edi]
jmp 0x42756c
mov eax, dword [edi]
jmp 0x427587
mov eax, dword [edi]
jmp 0x427670
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov ecx, dword [esp + 0x54]
push ecx
lea edx, [esp + 0x40]
push 0x4b6fb0
push edx
call dword [0x4b32a0]
add esp, 0xc
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov ecx, dword [esi + 0x44]
sub ecx, dword [esi + 0x40]
test ecx, 0xfffffffc
jne 0x428240
push 1
push 0x4b33fe
push 0x4b6fac
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov edx, dword [esp + 0x54]
push edx
lea eax, [esp + 0x40]
push 0x4b6f98
push eax
call dword [0x4b32a0]
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov edx, dword [esi + 0x2c]
sub edx, dword [esi + 0x28]
test edx, 0xfffffffc
jne 0x428352
push 1
push 0x4b33fe
push 0x4b6fac
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
lea ecx, [esp + 0x40]
mov byte [esp + 0x280], 4
call dword [0x4b3340]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x7c]
cmp edi, esi
mov ebx, dword [esp + 0x60]
jl 0x427010
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov edi, dword [0x4b32a0]
push 5
lea eax, [esp + 0x40]
push 0x4b6f88
push eax
call edi
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
fld qword [ebx + 0xd0]
sub esp, 8
fstp qword [esp]
lea edx, [esp + 0x44]
push 0x4b6f78
push edx
call edi
add esp, 0x10
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov ecx, dword [ebx + 0xdc]
push ecx
lea edx, [esp + 0x40]
push 0x4b6f54
push edx
call edi
add esp, 0xc
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
fld qword [ebx + 0xe0]
sub esp, 8
fstp qword [esp]
lea ecx, [esp + 0x44]
push 0x4b6f3c
push ecx
call edi
add esp, 0x10
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
lea ecx, [esp + 0x74]
call dword [0x4b32a8]
lea ecx, [esp + 0x78]
call dword [0x4b32a8]
lea ecx, [esp + 0x80]
call dword [0x4b32a8]
lea ecx, [esp + 0x70]
call dword [0x4b32a8]
cmp dword [ebx + 0x228], 0
mov eax, dword [ebx + 0x1fc]
mov ecx, dword [ebx + 0x1e4]
mov byte [esp + 0x280], 0xa
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], ecx
je 0x4281bc
cmp dword [ebx + 0x200], 0
je 0x4281bc
lea ecx, [esp + 0x64]
call fcn.00426080
push 1
push 0x4b33fe
push 0x4b73b4
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 1
push 0x4b33fe
push 0x4b6f2c
push 0x4b7384
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
push 0x4b7374
lea ecx, [esp + 0x4c]
call dword [0x4b3348]
push 0x4b7364
lea ecx, [esp + 0x48]
call dword [0x4b3348]
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x428495
call dword [0x4b2640]
xor eax, eax
mov edi, dword [esp + 0x68]
cmp edi, dword [eax + 0x18]
jne 0x427a2f
call dword [0x4b2640]
mov edx, dword [edi + 0x18]
mov dword [esp + 0x7c], edx
test esi, esi
jle 0x4281bc
mov dword [esp + 0x54], 1
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], esi
mov edi, dword [esp + 0x54]
mov ebx, dword [0x4b32a0]
push edi
lea eax, [esp + 0x40]
push 0x4b6f14
push eax
call ebx
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b6e70
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov esi, dword [esp + 0x7c]
mov edx, dword [esi + 0x44]
sub edx, dword [esi + 0x40]
dec edi
sar edx, 2
cmp edi, edx
jb 0x427ace
call dword [0x4b2640]
mov eax, dword [esi + 0x40]
mov ecx, dword [esp + 0x5c]
mov edi, dword [ecx + eax]
mov edx, dword [edi]
dec edx
xor esi, esi
test edx, edx
jle 0x427b90
mov eax, dword [edi + 0x5c]
sub eax, dword [edi + 0x58]
sar eax, 2
cmp esi, eax
jb 0x427af8
call dword [0x4b2640]
mov ecx, dword [edi + 0x58]
mov eax, dword [ecx + esi*4]
fld qword [eax + 0x50]
sub esp, 0x58
fstp qword [esp + 0x50]
inc esi
fld qword [eax + 0x48]
lea edx, [esp + 0x94]
fstp qword [esp + 0x48]
fld qword [eax + 0x40]
fstp qword [esp + 0x40]
fld qword [eax + 0x38]
fstp qword [esp + 0x38]
fld qword [eax + 0x30]
fstp qword [esp + 0x30]
fld qword [eax + 0x28]
fstp qword [esp + 0x28]
fld qword [eax + 0x20]
fstp qword [esp + 0x20]
fld qword [eax + 0x18]
fstp qword [esp + 0x18]
fld qword [eax + 0x10]
fstp qword [esp + 0x10]
fld qword [eax + 8]
fstp qword [esp + 8]
fld qword [eax]
fstp qword [esp]
push esi
push 0x4b6e3c
push edx
call ebx
add esp, 0x64
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov ecx, dword [edi]
dec ecx
cmp esi, ecx
jl 0x427ae5
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov edx, dword [esp + 0x54]
push edx
lea eax, [esp + 0x40]
push 0x4b6e20
push eax
call ebx
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b6dd0
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov edx, dword [edi]
dec edx
xor esi, esi
test edx, edx
jle 0x427c90
mov eax, dword [edi + 0x14]
sub eax, dword [edi + 0x10]
sar eax, 2
cmp esi, eax
jb 0x427c29
call dword [0x4b2640]
mov ecx, dword [edi + 0x10]
mov eax, dword [ecx + esi*4]
fld qword [eax + 0x20]
sub esp, 0x28
fstp qword [esp + 0x20]
inc esi
fld qword [eax + 0x18]
lea edx, [esp + 0x64]
fstp qword [esp + 0x18]
fld qword [eax + 0x10]
fstp qword [esp + 0x10]
fld qword [eax + 8]
fstp qword [esp + 8]
fld qword [eax]
fstp qword [esp]
push esi
push 0x4b6db4
push edx
call ebx
add esp, 0x34
push 1
push 0x4b33fe
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
mov ecx, dword [edi]
dec ecx
cmp esi, ecx
jl 0x427c16
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov edx, dword [esp + 0x54]
push edx
lea eax, [esp + 0x40]
push 0x4b6da0
push eax
call ebx
add esp, 0xc
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b33fe
push 0x4b6d58
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
xor ebx, ebx
cmp dword [edi], ebx
jle 0x427ff6
mov edx, dword [edi + 0x2c]
sub edx, dword [edi + 0x28]
sar edx, 2
cmp ebx, edx
jb 0x427d2a
call dword [0x4b2640]
mov eax, dword [edi + 0x28]
fnstcw word [esp + 0x40]
mov esi, dword [eax + ebx*4]
fld qword [esi + 0x28]
movzx eax, word [esp + 0x40]
fmul qword [0x4b6d50]
or eax, 0xc00
mov dword [esp + 0x4c], eax
lea edx, [esp + 0xa4]
fldcw word [esp + 0x4c]
fistp qword [esp + 0x4c]
mov ecx, dword [esp + 0x4c]
push ecx
push edx
fldcw word [esp + 0x48]
call fcn.00413d70
mov dword [esp + 0x60], eax
lea ecx, [esp + 0xb0]
mov byte [esp + 0x288], 0xb
fld qword [esi + 0x18]
fmul qword [0x4b6d50]
fnstcw word [esp + 0x48]
movzx eax, word [esp + 0x48]
or eax, 0xc00
mov dword [esp + 0x54], eax
fldcw word [esp + 0x54]
fistp qword [esp + 0x54]
mov eax, dword [esp + 0x54]
push eax
push ecx
fldcw word [esp + 0x50]
call fcn.00413d70
mov dword [esp + 0x7c], eax
mov byte [esp + 0x290], 0xc
fld qword [esi + 8]
fmul qword [0x4b6d50]
fnstcw word [esp + 0x50]
movzx eax, word [esp + 0x50]
or eax, 0xc00
mov dword [esp + 0x5c], eax
lea eax, [esp + 0xa4]
fldcw word [esp + 0x5c]
fistp qword [esp + 0x5c]
mov edx, dword [esp + 0x5c]
push edx
push eax
fldcw word [esp + 0x58]
call fcn.00413d70
add esp, 0x18
mov ecx, dword [esp + 0x58]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x6c]
fld qword [esi + 0x20]
mov eax, dword [eax]
push edx
mov edx, dword [ecx]
sub esp, 8
fstp qword [esp]
push edx
fld qword [esi + 0x10]
sub esp, 8
fstp qword [esp]
push eax
fld qword [esi]
sub esp, 8
fstp qword [esp]
inc ebx
push ebx
lea ecx, [esp + 0x64]
push 0x4b6d20
push ecx
mov byte [esp + 0x2b0], 0xd
call dword [0x4b32a0]
add esp, 0x30
lea ecx, [esp + 0x94]
call dword [0x4b3340]
lea ecx, [esp + 0xa8]
call dword [0x4b3340]
lea ecx, [esp + 0xa4]
mov byte [esp + 0x280], 0xa
call dword [0x4b3340]
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
fld qword [esi + 0x58]
fmul qword [0x4b6d50]
lea ecx, [esp + 0x64]
fnstcw word [esp + 0x40]
movzx eax, word [esp + 0x40]
or eax, 0xc00
mov dword [esp + 0x4c], eax
fldcw word [esp + 0x4c]
fistp qword [esp + 0x4c]
mov eax, dword [esp + 0x4c]
push eax
push ecx
fldcw word [esp + 0x48]
call fcn.00413d70
mov dword [esp + 0x60], eax
mov byte [esp + 0x288], 0xe
fld qword [esi + 0x48]
fmul qword [0x4b6d50]
fnstcw word [esp + 0x48]
movzx eax, word [esp + 0x48]
or eax, 0xc00
mov dword [esp + 0x54], eax
lea eax, [esp + 0x8c]
fldcw word [esp + 0x54]
fistp qword [esp + 0x54]
mov edx, dword [esp + 0x54]
push edx
push eax
fldcw word [esp + 0x50]
call fcn.00413d70
mov dword [esp + 0x7c], eax
lea edx, [esp + 0xac]
mov byte [esp + 0x290], 0xf
fld qword [esi + 0x38]
fmul qword [0x4b6d50]
fnstcw word [esp + 0x50]
movzx eax, word [esp + 0x50]
or eax, 0xc00
mov dword [esp + 0x5c], eax
fldcw word [esp + 0x5c]
fistp qword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
push ecx
push edx
fldcw word [esp + 0x58]
call fcn.00413d70
add esp, 0x18
mov ecx, dword [esp + 0x58]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x6c]
fld qword [esi + 0x50]
mov eax, dword [eax]
push edx
mov edx, dword [ecx]
sub esp, 8
fstp qword [esp]
push edx
fld qword [esi + 0x40]
sub esp, 8
fstp qword [esp]
push eax
fld qword [esi + 0x30]
sub esp, 8
fstp qword [esp]
mov byte [esp + 0x2a4], 0x10
push ebx
lea ecx, [esp + 0x64]
push 0x4b6cf0
push ecx
call dword [0x4b32a0]
add esp, 0x30
lea ecx, [esp + 0x9c]
call dword [0x4b3340]
lea ecx, [esp + 0x84]
call dword [0x4b3340]
lea ecx, [esp + 0x64]
mov byte [esp + 0x280], 0xa
call dword [0x4b3340]
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
cmp ebx, dword [edi]
jl 0x427d17
push 1
push 0x4b33fe
push 0x4b6188
push 0x4b33fe
push 0
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov eax, dword [esp + 0x54]
push eax
lea ecx, [esp + 0x40]
push 0x4b6cd4
push ecx
call dword [0x4b32a0]
add esp, 0xc
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x54]
call dword [0x4b334c]
push eax
push 0
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
push 2
push 0x4b734c
push 0x4b6c78
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
xor esi, esi
cmp dword [edi], esi
jle 0x4281a4
push 0x4b6c70
lea ecx, [esp + 0x78]
call dword [0x4b3348]
push 0x4b6c70
lea ecx, [esp + 0x7c]
call dword [0x4b3348]
push 0x4b33fe
lea ecx, [esp + 0x74]
call dword [0x4b3348]
mov eax, dword [edi + 0x44]
sub eax, dword [edi + 0x40]
sar eax, 2
cmp esi, eax
jb 0x4280c1
call dword [0x4b2640]
mov edx, dword [edi]
mov ecx, dword [edi + 0x40]
mov ebx, dword [ecx + esi*4]
dec edx
cmp esi, edx
jge 0x428119
lea eax, [esi + 1]
push eax
lea ecx, [esp + 0x74]
push 0x4b4518
push ecx
call dword [0x4b32a0]
fld qword [ebx]
add esp, 4
fstp qword [esp]
lea edx, [esp + 0x7c]
push 0x4b5284
push edx
call dword [0x4b32a0]
fld qword [ebx + 8]
add esp, 8
fstp qword [esp]
lea eax, [esp + 0x80]
push 0x4b5284
push eax
call dword [0x4b32a0]
add esp, 0x10
fld qword [ebx + 0x20]
sub esp, 0x18
fstp qword [esp + 0x10]
lea ecx, [esp + 0x98]
fld qword [ebx + 0x18]
fstp qword [esp + 8]
fld qword [ebx + 0x10]
fstp qword [esp]
push str.__g__g__g_
push ecx
call dword [0x4b32a0]
mov edx, dword [esp + 0xa0]
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
push edx
mov edx, dword [esp + 0x94]
push eax
push ecx
push edx
lea eax, [esp + 0x6c]
push str._sc_sc_sc_s
push eax
call dword [0x4b32a0]
add esp, 0x38
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
inc esi
cmp esi, dword [edi]
jl 0x428081
add dword [esp + 0x5c], 4
mov eax, 1
add dword [esp + 0x54], eax
sub dword [esp + 0x60], eax
jne 0x427a52
mov ecx, dword [esp + 0x98]
call fcn.004112d0
mov esi, dword [ebp + 8]
push 0
mov ecx, esi
call dword [0x4b334c]
push eax
call dword [0x4b260c]
add esp, 8
test eax, eax
jne 0x42821c
mov ecx, esi
call dword [0x4b334c]
push eax
call dword [0x4b240c]
and eax, 0xfffffffe
push eax
mov ecx, esi
call dword [0x4b334c]
push eax
call dword [0x4b2410]
mov ecx, esi
call dword [0x4b334c]
push eax
call dword [0x4b23f4]
test eax, eax
je 0x42849c
mov ecx, esi
call dword [0x4b334c]
push eax
lea ecx, [esp + 0xb0]
call fcn.00449a60
test al, al
je 0x42849c
mov bl, 1
jmp 0x42849e
push 2
push 0x4b734c
push 0x4b6c40
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov eax, dword [esi + 0x44]
mov dword [esp + 0x58], eax
cmp dword [esi + 0x40], eax
jbe 0x428277
call dword [0x4b2640]
mov ebx, dword [esi + 0x40]
mov edx, dword [esi + 0x34]
mov dword [esp + 0x84], edx
cmp ebx, dword [esi + 0x44]
jbe 0x42828f
call dword [0x4b2640]
mov edi, dword [esi + 0x34]
test edi, edi
je 0x42829f
cmp edi, dword [esp + 0x84]
je 0x4282a5
call dword [0x4b2640]
cmp ebx, dword [esp + 0x58]
je 0x42777d
test edi, edi
jne 0x428343
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4282ca
call dword [0x4b2640]
test edi, edi
jne 0x42834a
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4282e1
call dword [0x4b2640]
mov eax, dword [ebx]
fld qword [eax + 8]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [eax]
lea eax, [esp + 0x4c]
fstp qword [esp]
push str._gc_g
push eax
call dword [0x4b32a0]
add esp, 0x18
push 1
push 0x4b33fe
lea ecx, [esp + 0x44]
push ecx
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
test edi, edi
jne 0x42834e
call dword [0x4b2640]
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42833b
call dword [0x4b2640]
add ebx, 4
jmp 0x428292
mov eax, dword [edi]
jmp 0x4282bf
mov eax, dword [edi]
jmp 0x4282d6
mov eax, dword [edi]
jmp 0x428330
push 2
push 0x4b734c
push 0x4b6c00
lea ecx, [esp + 0x50]
call dword [0x4b334c]
push eax
push 1
lea ecx, [esp + 0xc0]
call fcn.0044b870
mov eax, dword [esi + 0x2c]
mov edi, dword [0x4b2640]
mov dword [esp + 0x58], eax
cmp dword [esi + 0x28], eax
jbe 0x42838b
call edi
mov ebx, dword [esi + 0x28]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x9c], eax
cmp ebx, dword [esi + 0x2c]
jbe 0x42839f
call edi
mov esi, dword [esi + 0x1c]
test esi, esi
je 0x4283af
cmp esi, dword [esp + 0x9c]
je 0x4283b1
call edi
cmp ebx, dword [esp + 0x58]
je 0x42780a
test esi, esi
jne 0x428475
call edi
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4283ce
call edi
test esi, esi
jne 0x42847c
call edi
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4283e1
call edi
test esi, esi
jne 0x428483
call edi
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x4283f4
call edi
test esi, esi
jne 0x42848a
call edi
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x428407
call edi
mov eax, dword [ebx]
fld qword [eax + 0x18]
sub esp, 0x20
fstp qword [esp + 0x18]
lea ecx, [esp + 0x5c]
fld qword [eax + 0x10]
fmul qword [0x4b3ee8]
fstp qword [esp + 0x10]
fld qword [eax + 8]
fstp qword [esp + 8]
fld qword [eax]
fstp qword [esp]
push str._gc_gc_gc_g
push ecx
call dword [0x4b32a0]
add esp, 0x28
push 1
push 0x4b33fe
lea edx, [esp + 0x44]
push edx
push 0x4b33fe
push 1
lea ecx, [esp + 0xc0]
call fcn.0044bbf0
test esi, esi
jne 0x428491
call edi
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x42846d
call edi
add ebx, 4
jmp 0x4283a2
mov eax, dword [esi]
jmp 0x4283c7
mov eax, dword [esi]
jmp 0x4283da
mov eax, dword [esi]
jmp 0x4283ed
mov eax, dword [esi]
jmp 0x428400
mov eax, dword [esi]
jmp 0x428466
mov eax, dword [eax]
jmp 0x427a20
xor bl, bl
call dword [0x4b286c]
push eax
call fcn.0044c6aa
test eax, eax
je 0x4284b1
mov eax, dword [eax + 0x20]
push 0x24
push 0x4b3a44
push 0x4b6be8
push eax
call dword [0x4b2870]
cmp eax, 6
jne 0x4284e3
lea ecx, [esp + 0xac]
call fcn.0044a6f0
push 1
lea ecx, [esp + 0xb0]
call fcn.00449460
lea ecx, [esp + 0xac]
call fcn.0044b7d0
lea ecx, [esp + 0x70]
call dword [0x4b3340]
lea ecx, [esp + 0x80]
call dword [0x4b3340]
lea ecx, [esp + 0x78]
call dword [0x4b3340]
lea ecx, [esp + 0x74]
call dword [0x4b3340]
lea ecx, [esp + 0x48]
call dword [0x4b3340]
lea ecx, [esp + 0x44]
call dword [0x4b3340]
lea ecx, [esp + 0x3c]
call dword [0x4b3340]
lea ecx, [esp + 0xac]
mov dword [esp + 0x280], 0xffffffff
call fcn.0044bec0
mov al, bl
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret