Function at 0x433790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe4]
cmp eax, dword [ecx + 8]
jbe 0x435393
sub esp, 0x164
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov eax, dword [esp + 0x168]
test byte [eax], al
lea ecx, [eax + 0xc]
mov dword [esp + 0xec], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0xf0], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0x58], ecx
mov dword [esp + 0xf4], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x24], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 0x9c], ebx
mov ebp, dword [0x77c718]
mov esi, dword [0x77c71c]
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and ebp, edi
test esi, esi
xchg esi, ebx
seta bl
xchg esi, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x43532a
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], esi
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edi, dword [eax + 4]
mov dword [esp + 0xf8], edi
movzx edi, word [eax + 2]
mov dword [esp + 0xfc], edi
movzx edi, word [eax + 2]
mov dword [esp + 0x100], edi
mov edi, dword [esp + 0xfc]
mov dword [esp + 0x28], edi
mov esi, dword [esp + 0xf8]
mov dword [esp + 0xa8], esi
mov dword [esp + 0x64], eax
mov eax, 1
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x64]
movzx ebp, word [eax + 2]
mov ecx, dword [esp + 0x40]
cmp ecx, ebp
jge 0x43395c
call fcn.00449f70
mov eax, dword [esp]
mov ecx, dword [esp + 0x40]
cmp ecx, 0xffffffff
je 0x435323
lea edx, [ecx + 1]
mov ebx, edx
cmp ebx, 0xffffffff
je 0x43531c
cdq
idiv ebx
mov ebp, dword [esp + 0x28]
cmp edx, ebp
jae 0x435315
mov eax, dword [esp + 0xa8]
movzx esi, word [eax + edx*2]
cmp ecx, ebp
jae 0x435315
mov word [eax + ecx*2], si
mov word [eax + edx*2], cx
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x9c]
movzx ebp, word [eax + 2]
mov ecx, dword [esp + 0x40]
cmp ecx, ebp
jl 0x4338d6
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov ecx, dword [eax + 8]
mov dword [esp + 0x104], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0x108], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x10c], ecx
mov ebp, dword [esp + 0x108]
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x104]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x5c]
movzx eax, word [eax + 2]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jge 0x433abf
cmp ecx, edi
jae 0x43530e
movzx eax, word [esi + ecx*2]
cmp eax, edx
jae 0x43530e
imul eax, eax, 0x1c
mov eax, dword [ebx + eax + 4]
mov dword [esp + 0xc0], eax
test ecx, ecx
jle 0x433a6d
lea edi, [ecx - 1]
mov dword [esp + 0x50], edi
sar edi, 0x1f
mov esi, dword [esp + 0x50]
sub esi, edi
sar esi, 1
mov dword [esp + 0x50], esi
cmp esi, ebp
jae 0x435307
mov edi, dword [esp + 0xb0]
movzx esi, word [edi + esi*2]
mov word [esp + 0x1a], si
movzx esi, si
cmp esi, edx
jae 0x435307
imul esi, esi, 0x1c
mov esi, dword [ebx + esi + 4]
cmp esi, eax
jae 0x433a74
cmp ecx, ebp
jae 0x435300
movzx eax, word [esp + 0x1a]
mov word [edi + ecx*2], ax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x28]
test ecx, ecx
jg 0x4339fe
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0xa8]
movzx ebx, word [esi + eax*2]
cmp ecx, ebp
jae 0x4352f9
mov word [edi + ecx*2], bx
inc eax
mov ecx, dword [esp + 0x168]
mov ebx, dword [esp + 0x9c]
mov ecx, edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x168]
movzx eax, word [eax + 2]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jl 0x4339d8
dec eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x44], eax
test eax, eax
jl 0x433c07
cmp eax, ebp
jae 0x4352f2
movzx esi, word [ecx + eax*2]
mov word [esp + 0x18], si
movzx edi, si
cmp edi, edx
jae 0x4352eb
imul edi, edi, 0x1c
mov edi, dword [ebx + edi + 4]
mov dword [esp + 0xc4], edi
test ebp, ebp
jbe 0x4352e4
movzx esi, word [ecx]
mov word [ecx + eax*2], si
xor esi, esi
mov dword [esp + 0x34], esi
shl esi, 1
lea edi, [esi + 1]
mov dword [esp + 0x30], edi
cmp edi, eax
jge 0x4352dd
lea ebx, [esi + 2]
cmp ebx, eax
jge 0x4352d4
cmp edi, ebp
jae 0x4352cd
movzx eax, word [ecx + esi*2 + 2]
cmp eax, edx
jae 0x4352cd
imul eax, eax, 0x1c
mov edi, dword [esp + 0x9c]
mov eax, dword [edi + eax + 4]
cmp ebx, ebp
jae 0x4352cd
movzx esi, word [ecx + esi*2 + 4]
cmp esi, edx
jae 0x4352cd
imul esi, esi, 0x1c
mov esi, dword [edi + esi + 4]
cmp eax, esi
jae 0x4352c4
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0xc4]
mov esi, eax
cmp ebx, ebp
jae 0x4352bd
movzx eax, word [ecx + ebx*2]
movzx ebx, ax
cmp ebx, edx
jae 0x4352bd
imul ebx, ebx, 0x1c
mov ebx, dword [edi + ebx + 4]
cmp esi, ebx
jae 0x433bd4
mov ebx, dword [esp + 0x34]
cmp ebx, ebp
jae 0x433bcd
mov word [ecx + ebx*2], ax
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0xc4]
mov esi, dword [esp + 0x30]
mov ebx, edi
mov edi, dword [esp + 0xc4]
jmp 0x433b0e
call fcn.00424660
ud2
mov eax, dword [esp + 0x34]
cmp eax, ebp
jae 0x4352b6
movzx ebx, word [esp + 0x18]
mov word [ecx + eax*2], bx
mov eax, dword [esp + 0x44]
dec eax
mov ebx, edi
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x44], eax
test eax, eax
jge 0x433ad3
mov dword [esp], ebx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.00433530
mov dword [esp + 0x48], 0
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x168]
movzx ebx, word [edx + 2]
cmp eax, ebx
jge 0x434191
mov ebx, dword [esp + 0x28]
cmp eax, ebx
jae 0x43418a
mov ebp, dword [esp + 0xa8]
movzx esi, word [ebp + eax*2]
mov edi, dword [esp + 0x24]
cmp esi, edi
jae 0x43418a
imul esi, esi, 0x1c
mov dword [esp + 0x50], esi
mov edi, dword [esp + 0x9c]
lea ebp, [edi + esi]
mov dword [esp + 0xe0], ebp
mov ebx, dword [edi + esi + 4]
mov dword [esp + 0xc8], ebx
movzx esi, word [edi + esi + 0xc]
cmp si, 1
je 0x433f34
cmp si, 2
je 0x433cc3
cmp si, 3
jne 0x433cbf
inc eax
mov ecx, ebp
jmp 0x433c37
mov ebp, ecx
jmp 0x433cb7
mov esi, dword [ebx + 0x10]
test esi, esi
jne 0x433eba
lea esi, [ebx + 0x20]
mov dword [esp], esi
call fcn.00404d40
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x433e1b
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
cmp ecx, edx
jb 0x433d17
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x168]
mov edi, dword [esp + 0x9c]
mov ebp, dword [esp + 0xb8]
jmp 0x433cb7
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x9c]
mov ecx, dword [edx + ecx]
movzx ebx, word [eax + 0xc]
mov ebp, dword [eax + 0x18]
imul ebx, ebp
mov ebp, dword [eax + 8]
add ebx, ebp
mov ebp, dword [eax + 0x14]
mov dword [esp + 8], ecx
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040d690
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x18]
inc ecx
mov dword [eax + 0x18], ecx
mov edx, dword [eax + 4]
cmp ecx, edx
jne 0x433d63
mov dword [eax + 0x18], 0
mov ecx, dword [eax]
inc ecx
mov dword [eax], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.004335c0
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb8], eax
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
test ecx, ecx
seta bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebx, ebp
test edx, edx
xchg ebp, ebx
setg bl
xchg ebp, ebx
or ebx, ebp
test bl, bl
jne 0x433df2
mov ecx, dword [eax + 8]
movzx eax, word [eax + 0xe]
mov dword [esp + 0x16c], ecx
mov word [esp + 0x170], ax
add esp, 0x164
ret
mov ebx, dword [esp + 0x1c]
sub ecx, ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
sbb edx, ecx
mov dword [esp + 4], edx
mov dword [esp + 8], 2
call fcn.0041fb90
mov eax, dword [esp + 0xb8]
jmp 0x433dd5
lea edi, [esp + 0x110]
xor eax, eax
call fcn.0044a0c9
lea ecx, [0x447c50]
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x118], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x120], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0x50]
mov ecx, dword [ecx + edx]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 0xc], ecx
call fcn.00403d70
mov eax, dword [esp + 0xe0]
jmp 0x433da9
mov dword [esp], edi
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.004335c0
lea eax, [0x65105e]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], 0x16
lea eax, [0x618e80]
mov dword [esp], eax
lea eax, [esp + 0xe4]
mov dword [esp + 4], eax
call fcn.0040a860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004254c0
ud2
test byte [ebx], al
lea esi, [ebx + 0x28]
mov dword [esp], esi
call fcn.00404d40
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x4340d5
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
test ecx, ecx
ja 0x434005
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x433f8a
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x168]
mov edi, dword [esp + 0x9c]
mov ebp, dword [esp + 0xb8]
jmp 0x433cb7
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x14], edx
call fcn.004335c0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x9c]
mov edx, dword [ecx + eax + 0x10]
test edx, edx
je 0x433fda
mov byte [edx], 0
mov eax, dword [ecx + eax]
test eax, eax
jne 0x433fed
mov eax, dword [esp + 0xe0]
jmp 0x433da9
mov ecx, dword [esp + 0xc8]
mov ecx, dword [ecx + 0x14]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0040dae0
jmp 0x433fe1
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + ecx + 0x10]
test ebx, ebx
je 0x43401b
mov byte [ebx], 1
mov ebx, dword [eax + 0x1c]
movzx ebp, word [eax + 0xc]
imul ebx, ebp
mov ebp, dword [eax + 8]
add ebx, ebp
mov dword [esp + 0x6c], ebx
mov ecx, dword [edx + ecx]
test ecx, ecx
jne 0x4340ab
mov ecx, dword [eax + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.0040dae0
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x1c]
inc ecx
mov dword [eax + 0x1c], ecx
mov edx, dword [eax + 4]
cmp ecx, edx
jne 0x434060
mov dword [eax + 0x1c], 0
mov ecx, dword [eax]
dec ecx
mov dword [eax], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.004335c0
mov eax, dword [esp + 0xe0]
jmp 0x433da9
mov ebp, dword [eax + 0x14]
mov dword [esp + 4], ecx
mov dword [esp], ebp
mov dword [esp + 8], ebx
call fcn.0040d690
mov eax, dword [esp + 0xc8]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x6c]
jmp 0x434035
lea edi, [esp + 0x12c]
xor eax, eax
call fcn.0044a0c9
lea ecx, [0x447c00]
mov dword [esp + 0x12c], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x130], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x134], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x138], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x13c], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x140], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x144], edx
mov edx, dword [esp + 0x50]
mov ebx, dword [ecx + edx]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x12c]
mov dword [esp + 0xc], ebx
call fcn.00404a80
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x9c]
mov ecx, dword [edx + ecx + 0x10]
test ecx, ecx
je 0x43417e
mov byte [ecx], 1
mov eax, dword [esp + 0xe0]
jmp 0x433da9
call fcn.00424660
ud2
test ecx, ecx
jne 0x435270
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0xb4], eax
mov dword [esp + 0x48], 0
mov ecx, dword [eax + 0xc8]
test ecx, ecx
jne 0x435258
lea ecx, [eax + 0xc8]
mov dword [esp + 0xac], ecx
mov ebx, ecx
xor ebp, ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 0x50], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0xd8], ecx
mov edi, dword [esp + 0x2c]
cmp ebp, edi
jge 0x4347ca
movzx edx, word [esi]
mov ebx, dword [esp + 0x24]
cmp edx, ebx
jae 0x4347c3
imul edx, edx, 0x1c
mov dword [esp + 0x4c], edx
mov ebx, dword [esp + 0x9c]
mov edi, dword [ebx + edx + 4]
mov dword [esp + 0xbc], edi
call fcn.00427590
mov eax, dword [esp]
mov dword [esp + 0x88], eax
test byte [eax], al
mov ecx, dword [0x77c810]
test ecx, ecx
jne 0x43479d
mov ecx, dword [esp + 0xb4]
mov dword [eax], ecx
mov edx, dword [0x77c810]
lea ebx, [eax + 4]
test edx, edx
jne 0x434776
lea edx, [esp + 0x48]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [ebp + ebx]
mov edi, dword [0x77c810]
lea edx, [eax + 0x10]
test edi, edi
jne 0x43474c
mov dword [eax + 0x10], esi
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov edx, dword [esp + 0x1c]
test edx, edx
xchg esi, ebx
setne bl
xchg esi, ebx
mov edi, dword [esp + 0x20]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x4342c2
mov dword [eax + 0x1c], 0xffffffff
mov dword [eax + 0x20], 0xffffffff
mov esi, dword [0x77c810]
lea edi, [eax + 0x2c]
test esi, esi
jne 0x434710
mov esi, dword [esp + 0xbc]
mov dword [eax + 0x2c], esi
mov edi, dword [esp + 0xd8]
test byte [edi], al
mov edx, dword [0x77c810]
test edx, edx
jne 0x4346df
mov dword [edi], eax
movzx edx, word [ebp + ebx + 0xc]
cmp dx, 1
jne 0x434506
test byte [esi], al
mov edx, dword [0x77c810]
lea ebx, [eax + 8]
test edx, edx
jne 0x4344d5
mov dword [eax + 8], 0
lea edx, [esi + 0x20]
test byte [edx], al
mov edx, dword [esi + 0x24]
mov dword [esp + 0x84], edx
test edx, edx
je 0x43441b
mov ebx, dword [0x77c810]
lea edi, [eax + 0xc]
test ebx, ebx
jne 0x4343e7
mov dword [eax + 0xc], edx
mov ebx, dword [0x77c810]
lea edi, [edx + 8]
test ebx, ebx
jne 0x4343ba
mov dword [edx + 8], eax
mov edx, dword [0x77c810]
lea ebx, [esi + 0x24]
test edx, edx
jne 0x434397
mov dword [esi + 0x24], eax
mov edi, dword [esp + 0xdc]
lea esi, [edi + 2]
mov edi, dword [esp + 0x50]
inc edi
mov edx, edi
lea edi, [eax + 0x28]
mov eax, ecx
mov ebx, dword [esp + 0xac]
mov ebp, edx
mov ecx, edi
mov edx, dword [esp + 0x168]
jmp 0x4341db
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x43436a
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43435a
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43434a
mov edx, dword [0x77c810]
lea ebx, [eax + 0xc]
test edx, edx
jne 0x4344a4
mov dword [eax + 0xc], 0
mov edx, dword [0x77c810]
lea ebx, [esi + 0x20]
test edx, edx
jne 0x43447a
mov dword [esi + 0x20], eax
mov edx, dword [0x77c810]
lea ebx, [esi + 0x24]
test edx, edx
jne 0x434454
mov dword [esi + 0x24], eax
jmp 0x43436a
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x43436a
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43443f
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43442f
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43431f
cmp dx, 2
jne 0x43436a
test byte [esi], al
mov edx, dword [0x77c810]
lea ebx, [eax + 8]
test edx, edx
jne 0x4346ae
mov dword [eax + 8], 0
lea edx, [esi + 0x28]
test byte [edx], al
mov edx, dword [esi + 0x2c]
mov dword [esp + 0x78], edx
test edx, edx
je 0x4345f4
mov ebx, dword [0x77c810]
lea edi, [eax + 0xc]
test ebx, ebx
jne 0x4345c3
mov dword [eax + 0xc], edx
mov ebx, dword [0x77c810]
lea edi, [edx + 8]
test ebx, ebx
jne 0x434599
mov dword [edx + 8], eax
mov edx, dword [0x77c810]
lea ebx, [esi + 0x2c]
test edx, edx
jne 0x434573
mov dword [esi + 0x2c], eax
jmp 0x43436a
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x43436a
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43455e
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43454e
mov edx, dword [0x77c810]
lea ebx, [eax + 0xc]
test edx, edx
jne 0x43467d
mov dword [eax + 0xc], 0
mov edx, dword [0x77c810]
lea ebx, [esi + 0x28]
test edx, edx
jne 0x434653
mov dword [esi + 0x28], eax
mov edx, dword [0x77c810]
lea ebx, [esi + 0x2c]
test edx, edx
jne 0x43462d
mov dword [esi + 0x2c], eax
jmp 0x43436a
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x43436a
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x434618
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x434608
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43452a
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4342f6
mov dword [esp], edi
mov esi, dword [esp + 0xbc]
mov dword [esp + 4], esi
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4342dd
mov dword [esp], edx
mov dword [esp + 4], esi
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
jmp 0x434284
mov dword [esp], ebx
lea edx, [esp + 0x48]
mov dword [esp + 4], edx
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
lea edx, [esp + 0x48]
jmp 0x434261
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
call fcn.0040d580
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
jmp 0x434249
call fcn.00424660
ud2
mov ecx, dword [0x77c810]
lea ebp, [eax + 0x58]
mov dword [esp + 0xd4], ebp
test ecx, ecx
jne 0x435223
mov dword [eax + 0x58], 0
lea ecx, [0x65c690]
mov dword [esp], ecx
mov dword [esp + 4], 0
lea esi, [0x64b867]
mov dword [esp + 8], esi
mov dword [esp + 0xc], 6
mov byte [esp + 0x10], 0x18
mov dword [esp + 0x14], 2
call fcn.00427360
lea edi, [esp + 0x148]
xor eax, eax
call fcn.0044a0c9
lea ecx, [0x447bb0]
mov dword [esp + 0x148], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x14c], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x150], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x154], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 0x158], esi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x15c], edi
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x160], ecx
lea eax, [esp + 0x148]
mov dword [esp], eax
call fcn.00448300
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xd0], ecx
mov edx, dword [0x77c810]
test edx, edx
jne 0x4351f9
mov dword [eax + 0x58], 0
mov edx, dword [eax + 0xc8]
mov dword [esp + 0x94], edx
mov ebx, edx
mov dword [esp + 0xcc], edx
test edx, edx
je 0x434926
mov ebp, dword [0x77c810]
lea esi, [edx + 4]
test ebp, ebp
jne 0x4351c8
mov dword [edx + 4], 0
mov ebp, dword [0x77c810]
lea esi, [edx + 0x10]
test ebp, ebp
jne 0x435197
mov dword [edx + 0x10], 0
mov ebp, dword [0x77c810]
lea esi, [edx + 0x2c]
test ebp, ebp
jne 0x435166
mov dword [edx + 0x2c], 0
mov edx, dword [edx + 0x28]
mov dword [esp + 0xcc], edx
test edx, edx
jne 0x4348d0
mov edx, dword [0x77c810]
test edx, edx
jne 0x43513c
mov dword [eax + 0xc8], 0
xor eax, eax
mov edx, dword [esp + 0xb0]
xor ebp, ebp
mov dword [esp + 0x50], eax
mov dword [esp + 0xdc], edx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0xb8], ebp
mov esi, dword [esp + 0x2c]
cmp eax, esi
jge 0x4350dd
movzx edi, word [edx]
mov esi, dword [esp + 0x24]
cmp edi, esi
jae 0x4350d6
imul edi, edi, 0x1c
mov esi, dword [esp + 0x9c]
lea eax, [esi + edi]
mov dword [esp + 0xe0], eax
mov edx, dword [ebx + 0x1c]
mov ebp, dword [ebx + 0x20]
test edx, edx
seta al
test ebp, ebp
sete cl
and eax, ecx
test ebp, ebp
setg cl
or eax, ecx
test al, al
je 0x4349b6
mov dword [esi + edi + 0x14], edx
mov dword [esi + edi + 0x18], ebp
mov eax, dword [esp + 0xd0]
cmp eax, ebx
jne 0x434a57
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xb8], ecx
mov edx, dword [ebx + 0x28]
mov dword [esp + 0x90], edx
mov ebp, dword [0x77c810]
lea edi, [ebx + 0x28]
test ebp, ebp
jne 0x434a22
mov dword [ebx + 0x28], 0
mov dword [esp], ebx
call fcn.00427920
mov eax, dword [esp + 0xdc]
lea edx, [eax + 2]
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xb8]
jmp 0x434949
mov dword [esp], edi
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x4349f1
mov ecx, dword [esi + edi + 4]
mov dword [esp + 0xbc], ecx
movzx edx, word [esi + edi + 0xc]
cmp dx, 2
jne 0x434da1
test byte [ecx], al
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x7c], edx
mov ebp, dword [ebx + 8]
mov dword [esp + 0x74], ebp
lea edi, [ecx + 0x28]
mov dword [esp + 0xa0], edi
test edx, edx
je 0x434c50
test ebp, ebp
je 0x434b99
mov ecx, dword [0x77c810]
lea edi, [edx + 8]
test ecx, ecx
jne 0x434b6b
mov dword [edx + 8], ebp
mov ecx, dword [0x77c810]
lea edi, [ebp + 0xc]
test ecx, ecx
jne 0x434b45
mov dword [ebp + 0xc], edx
mov ecx, dword [0x77c810]
lea edx, [ebx + 8]
test ecx, ecx
jne 0x434b1e
mov dword [ebx + 8], 0
mov ecx, dword [0x77c810]
lea edx, [ebx + 0xc]
test ecx, ecx
jne 0x434af7
mov dword [ebx + 0xc], 0
mov ecx, dword [esp + 0xb8]
jmp 0x4349cc
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434aeb
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434ad7
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434ac3
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x9c]
jmp 0x434aaf
mov ebp, dword [0x77c810]
lea eax, [edx + 8]
test ebp, ebp
jne 0x434c1b
mov dword [edx + 8], 0
test byte [edi], al
mov eax, dword [0x77c810]
lea ebp, [ecx + 0x2c]
test eax, eax
jne 0x434bff
mov dword [ecx + 0x2c], edx
mov eax, dword [0x77c810]
lea ecx, [ebx + 0xc]
test eax, eax
jne 0x434bdf
mov dword [ebx + 0xc], 0
mov eax, dword [esp + 0xd0]
jmp 0x434aeb
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434bd3
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434bbf
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d580
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
jmp 0x434bad
test ebp, ebp
je 0x434d0f
mov edx, dword [0x77c810]
lea eax, [ebp + 0xc]
test edx, edx
jne 0x434cda
mov dword [ebp + 0xc], 0
test byte [edi], al
mov eax, dword [0x77c810]
lea edx, [ecx + 0x28]
test eax, eax
jne 0x434cbe
mov dword [ecx + 0x28], ebp
mov eax, dword [0x77c810]
lea ecx, [ebx + 8]
test eax, eax
jne 0x434c9e
mov dword [ebx + 8], 0
mov eax, dword [esp + 0xd0]
jmp 0x434aeb
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434c92
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434c7e
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d580
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
jmp 0x434c6c
test byte [edi], al
mov edx, dword [ecx + 0x28]
cmp edx, ebx
jne 0x434aeb
mov edx, dword [0x77c810]
lea ebp, [ecx + 0x28]
test edx, edx
jne 0x434d73
mov dword [ecx + 0x28], 0
mov edx, dword [0x77c810]
lea ebp, [ecx + 0x2c]
test edx, edx
jne 0x434d49
mov dword [ecx + 0x2c], 0
jmp 0x434aeb
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434aeb
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434d30
test byte [ecx], al
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x80], edx
mov ebp, dword [ebx + 8]
mov dword [esp + 0x70], ebp
lea edi, [ecx + 0x20]
mov dword [esp + 0xa4], edi
test edx, edx
je 0x434f85
test ebp, ebp
je 0x434ecb
mov ecx, dword [0x77c810]
lea edi, [edx + 8]
test ecx, ecx
jne 0x434e9a
mov dword [edx + 8], ebp
mov ecx, dword [0x77c810]
lea edi, [ebp + 0xc]
test ecx, ecx
jne 0x434e74
mov dword [ebp + 0xc], edx
mov ecx, dword [0x77c810]
lea edx, [ebx + 8]
test ecx, ecx
jne 0x434e4d
mov dword [ebx + 8], 0
mov ecx, dword [0x77c810]
lea edx, [ebx + 0xc]
test ecx, ecx
jne 0x434e23
mov dword [ebx + 0xc], 0
jmp 0x434aeb
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434aeb
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434e0a
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434df6
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
jmp 0x434de2
mov ebp, dword [0x77c810]
lea eax, [edx + 8]
test ebp, ebp
jne 0x434f4d
mov dword [edx + 8], 0
test byte [edi], al
mov eax, dword [0x77c810]
lea ebp, [ecx + 0x24]
test eax, eax
jne 0x434f31
mov dword [ecx + 0x24], edx
mov eax, dword [0x77c810]
lea ecx, [ebx + 0xc]
test eax, eax
jne 0x434f11
mov dword [ebx + 0xc], 0
mov eax, dword [esp + 0xd0]
jmp 0x434aeb
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434f05
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434ef1
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d580
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa4]
jmp 0x434edf
test ebp, ebp
je 0x435044
mov edx, dword [0x77c810]
lea eax, [ebp + 0xc]
test edx, edx
jne 0x43500f
mov dword [ebp + 0xc], 0
test byte [edi], al
mov eax, dword [0x77c810]
lea edx, [ecx + 0x20]
test eax, eax
jne 0x434ff3
mov dword [ecx + 0x20], ebp
mov eax, dword [0x77c810]
lea ecx, [ebx + 8]
test eax, eax
jne 0x434fd3
mov dword [ebx + 8], 0
mov eax, dword [esp + 0xd0]
jmp 0x434aeb
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434fc7
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.0040d580
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434fb3
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d580
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa4]
jmp 0x434fa1
test byte [edi], al
mov edx, dword [ecx + 0x20]
cmp edx, ebx
jne 0x434aeb
mov edx, dword [0x77c810]
lea ebp, [ecx + 0x20]
test edx, edx
jne 0x4350a8
mov dword [ecx + 0x20], 0
mov edx, dword [0x77c810]
lea ebp, [ecx + 0x24]
test edx, edx
jne 0x43507e
mov dword [ecx + 0x24], 0
jmp 0x434aeb
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434aeb
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x435065
call fcn.00424660
ud2
test ebp, ebp
jne 0x4350e6
jmp 0x433c33
movzx eax, word [ebp + 0xc]
cmp ax, 1
jne 0x4350fa
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4350fa
mov byte [eax], 1
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.004335c0
mov eax, dword [esp + 0xb8]
jmp 0x433da9
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d580
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x94]
jmp 0x43493e
mov dword [esp], esi
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
jmp 0x434918
mov dword [esp], esi
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
jmp 0x434900
mov dword [esp], esi
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
jmp 0x4348e8
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
jmp 0x4348b6
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d580
mov eax, dword [esp + 0xb4]
mov edx, dword [esp + 0x168]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xd4]
mov edi, dword [esp + 0x2c]
jmp 0x4347e9
lea eax, [0x64ed50]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00425c70
ud2
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.004335c0
mov eax, dword [esp + 0xb8]
jmp 0x433da9
call fcn.00424660
ud2
call fcn.00424660
ud2
mov ebx, dword [esp + 0x30]
jmp 0x433b75
call fcn.00424660
ud2
mov edi, dword [esp + 0x9c]
jmp 0x4352c4
mov edi, ebx
jmp 0x433bd4
call fcn.00424660
ud2
call fcn.00424660
ud2
call fcn.00424660
ud2
call fcn.00424660
ud2
call fcn.00424660
ud2
call fcn.00424660
ud2
call fcn.00424660
ud2
call fcn.00424660
ud2
xor edx, edx
jmp 0x4338fc
call fcn.00424720
ud2
call fcn.004498a0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x168]
mov ebp, dword [esp + 0x9c]
xor esi, esi
movzx edi, word [ebx + 2]
cmp esi, edi
jge 0x435376
cmp esi, edx
jae 0x43538c
mov edi, esi
imul esi, esi, 0x1c
mov dword [ebp + esi + 0x14], 0xffffffff
mov dword [ebp + esi + 0x18], 0xffffffff
lea esi, [edi + 1]
movzx edi, word [ebx + 2]
cmp esi, edi
jl 0x435352
mov ebx, ebp
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x58]
jmp 0x433853
call fcn.00424660
ud2
call fcn.00448420
jmp fcn.00433790