Function at 0x444c70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5551a6
mov eax, dword fs:[0]
push eax
sub esp, 0x144
mov eax, dword [0x6397d4]
xor eax, esp
mov dword [esp + 0x140], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6397d4]
xor eax, esp
push eax
lea eax, [esp + 0x158]
mov dword fs:[0], eax
mov eax, dword [0x648a5c]
mov eax, dword [eax + 0x135]
mov esi, dword [esp + 0x168]
mov edi, ecx
push eax
mov ecx, 0x648a58
call fcn.0048b300
xor ebp, ebp
cmp eax, ebp
je 0x446e69
cmp dword [0x62addc], ebp
je 0x444cf3
mov eax, dword [0x62ae10]
cmp eax, ebp
je 0x444cf3
movzx eax, word [eax + 0xc]
cmp ax, 0x83
je 0x446e69
cmp dword [edi + 0x14], ebp
jne 0x446e69
cmp dword [esi + 0x26c], ebp
jne 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x14
je 0x446e69
mov ecx, dword [0x648a5c]
cmp byte [ecx + 0x155], 0
je 0x444d4c
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00443e50
test eax, eax
je 0x444d4c
push 0x531
jmp 0x446d24
mov ecx, esi
call fcn.004928c0
push ebp
push 0x2000
mov ecx, 0x66d530
mov ebx, eax
call fcn.005276d0
test eax, eax
je 0x444dc5
cmp ebx, 0x200
je 0x444d83
test ebx, 0x90f
jne 0x444d83
push 0x312
jmp 0x446d24
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0x1f40
jb 0x444dc5
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0x1f4d
ja 0x444dc5
cmp word [0x64ed70], 2
jne 0x444dc5
mov ecx, 0x64ebd0
call fcn.004f22c0
test eax, eax
jne 0x444dc5
push 0x3a4
jmp 0x446d24
test ebx, 0x200
je 0x44504b
cmp dword [0x63b1bc], 5
je 0x446e69
cmp ebx, 0x201
jne 0x444dfc
cmp dword [0x64eb8c], ebp
jne 0x444fde
push 0x4ef
jmp 0x446d24
cmp ebx, 0x202
jne 0x444eb8
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x444e2a
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
push 6
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov edi, dword [0x63b0f0]
mov ecx, esi
call eax
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
movzx ecx, ax
mov dword [edi + 0x540], ecx
mov dword [edi + 0x544], ebx
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
xor edi, edi
call eax
cmp eax, 0x8ca1
jne 0x444e90
mov ecx, dword [0x63b0f0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
mov edi, 1
push edi
call eax
jmp 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0x8ca2
jne 0x444ea5
mov edi, 2
mov ecx, dword [0x63b0f0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push edi
call eax
jmp 0x446e69
cmp ebx, 0x203
jne 0x444f94
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x444ee6
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
push 6
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b0f4]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x544], eax
mov dword [edi + 0x548], ebx
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
xor edi, edi
call eax
cmp eax, 0x8ca3
jne 0x444f48
mov ecx, dword [0x63b0f4]
mov edi, 1
push edi
call fcn.004721d0
jmp 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0x8ca4
jne 0x444f6e
mov ecx, dword [0x63b0f4]
mov edi, 2
push edi
call fcn.004721d0
jmp 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0x8ca5
jne 0x444f83
mov edi, 3
mov ecx, dword [0x63b0f4]
push edi
call fcn.004721d0
jmp 0x446e69
cmp ebx, 0x22b
jne 0x444fde
mov eax, dword [0x648a5c]
cmp dword [eax + 0x434], ebp
jne 0x444fb3
push 0x677
jmp 0x446d24
lea ecx, [esp + 0x14]
push ecx
lea ecx, [eax + 0x694]
mov dword [esp + 0x18], ebp
call fcn.00513280
fcomp dword [0x5628d0]
fnstsw ax
test ah, 0x41
jne 0x444fde
push 0x38d
jmp 0x446d24
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0x29cc
jne 0x445007
mov ecx, dword [0x648a5c]
cmp byte [ecx + 0x156], 0
je 0x445007
push 0x551
jmp 0x446d24
mov edx, dword [0x648a50]
mov eax, dword [esi]
mov dword [esp + 0x20], edx
mov edx, dword [eax + 0x7c]
mov ecx, esi
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
mov word [esp + 0x1c], 0x1f6
call edx
mov word [esp + 0x24], ax
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
mov dword [esp + 0x26], eax
push 0x12
lea eax, [esp + 0x1c]
push eax
jmp 0x446e5f
test ebx, 0x8000
je 0x4450d1
cmp ebx, 0x8001
jne 0x445091
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
cmp eax, ebp
je 0x446e69
mov ecx, dword [0x648a5c]
mov dx, word [ecx + 0x480]
cmp dx, word [eax + 0xc0]
jb 0x446e69
mov eax, dword [0x648a50]
mov edx, dword [esi]
mov dword [esp + 0x20], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
mov word [esp + 0x1c], 0x260
call eax
mov edx, dword [esi]
mov word [esp + 0x24], ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [esp + 0x26], eax
lea ecx, [esp + 0x18]
jmp 0x446e5c
test ebx, 0x800
je 0x4451f8
mov edx, dword [0x648a5c]
push ebp
push edx
mov ecx, 0x62dbc8
call fcn.004b7380
test eax, eax
jne 0x44514e
lea ecx, [esp + 0x18]
call fcn.0051ecc0
mov dword [esp + 0x160], ebp
mov eax, dword [esi]
fldz
mov edx, dword [eax + 0x74]
push ebp
push ecx
mov ecx, esi
fstp dword [esp]
call edx
push eax
push 6
lea ecx, [esp + 0x28]
call fcn.0051ec40
mov ecx, dword [0x648a5c]
lea eax, [esp + 0x18]
push eax
add ecx, 0x998
call fcn.0051ece0
lea ecx, [esp + 0x18]
mov dword [esp + 0x160], 0xffffffff
call fcn.0051ec20
jmp 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
push eax
call fcn.00509790
add esp, 4
sub eax, ebp
je 0x44518a
sub eax, 1
jne 0x446e69
lea ecx, [esp + 0x14]
push ecx
mov ecx, edi
call fcn.00442fb0
test eax, eax
je 0x446e69
mov ebx, dword [esp + 0x14]
jmp 0x4457bd
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.0049b0d0
test eax, eax
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
cmp eax, ebp
je 0x446e69
movzx eax, word [eax + 0x7a]
cmp ax, 4
movzx ebx, ax
jne 0x4451f0
lea ecx, [ebx + 0x50]
push ecx
mov ecx, edi
call fcn.00443730
test eax, eax
je 0x4451f0
lea edx, [ebx + 0x51]
push edx
mov ecx, edi
call fcn.00443730
test eax, eax
jne 0x4451f0
add ebx, 1
add ebx, 0x50
jmp 0x4457bd
test ebx, 0x400
je 0x44536b
cmp ebx, 0x412
jne 0x445233
mov ecx, 0x6489e8
call fcn.00480a20
test eax, eax
jne 0x445233
push 0x567648
push 0x17
push 0x64aa48
call fcn.004be450
add esp, 0xc
jmp 0x446e69
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
cmp eax, 0x29fe
jne 0x445263
mov ecx, dword [0x63b114]
push esi
call fcn.00475370
mov ecx, dword [0x63b114]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
jmp 0x446e69
mov ecx, esi
call fcn.004928e0
movzx eax, word [eax + 0xae]
push eax
mov ecx, 0x6489e8
call fcn.00480760
test eax, eax
jne 0x446e69
mov ecx, esi
call fcn.004928e0
movzx ecx, word [eax + 0xae]
push ecx
call fcn.00402a90
mov ecx, eax
call fcn.005151f0
cmp eax, ebp
je 0x4452ba
movzx edx, word [eax + 4]
push edx
mov ecx, 0x6489e8
call fcn.00480760
test eax, eax
jne 0x446e69
cmp ebx, 0x411
jne 0x4452d9
mov eax, dword [0x648a5c]
cmp dword [eax + 0x434], ebp
jne 0x44530d
push 0x675
jmp 0x446d24
cmp ebx, 0x40e
jne 0x4452e5
push 1
jmp 0x44530e
cmp ebx, 0x40f
jne 0x445301
mov ecx, dword [0x648a5c]
push esi
push ecx
mov ecx, 0x66b6c8
call fcn.0051f290
jmp 0x445322
cmp ebx, 0x412
jne 0x44530d
push 3
jmp 0x44530e
push ebp
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.0049afc0
test eax, eax
je 0x446e69
mov ecx, dword [0x648a50]
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov dword [esp + 0x20], ecx
mov ecx, esi
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
mov word [esp + 0x1c], 0x1f6
call eax
mov edx, dword [esi]
mov dword [esp + 0x26], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
mov word [esp + 0x24], ax
lea ecx, [esp + 0x18]
jmp 0x446e5c
test ebx, 0x1000
je 0x44556d
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc54e
jne 0x445393
mov ecx, dword [0x63b104]
push esi
call fcn.00456fd0
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc54f
jne 0x4453af
mov ecx, dword [0x63b108]
push esi
call fcn.00458150
test ebx, 0x1002
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc738
je 0x4453eb
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc739
je 0x4453eb
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc73a
jne 0x44544b
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov edi, dword [0x63aff8]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
mov ebx, eax
cmp ebx, ebp
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
movzx ecx, word [ebx + 0x76]
push ecx
mov ecx, edi
call fcn.00447e00
push esi
mov ecx, edi
call fcn.00447e80
cmp dword [edi + 0x10], ebp
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
je 0x445447
push ebp
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push ebp
mov ecx, esi
jmp 0x445449
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc73b
jne 0x4454ad
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov edi, dword [0x63affc]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
test eax, eax
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
push esi
mov ecx, edi
call fcn.00448540
cmp dword [edi + 0x10], ebp
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
je 0x4454a9
push ebp
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push ebp
mov ecx, esi
jmp 0x4454ab
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc92c
jne 0x445506
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov edi, dword [0x63b008]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
push esi
mov ecx, edi
mov ebx, eax
call fcn.004fd1a0
cmp ebx, ebp
je 0x446e69
cmp dword [edi + 0x10], ebp
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
je 0x445502
push ebp
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push ebp
mov ecx, esi
jmp 0x445504
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc92d
jne 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov edi, dword [0x63b00c]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
push esi
mov ecx, edi
mov ebx, eax
call fcn.004fd1a0
cmp ebx, ebp
je 0x446e69
cmp dword [edi + 0x10], ebp
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
je 0x445564
push ebp
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push ebp
mov ecx, esi
call eax
jmp 0x446e69
push 1
call eax
jmp 0x446e69
test ebx, 0x2000
jne 0x446e69
test ebx, 0x4000
je 0x4457d4
cmp ebx, 0x4001
jne 0x445608
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
cmp eax, ebp
je 0x446e69
movzx ecx, word [eax + 0xc0]
push ecx
mov ecx, 0x64e340
call fcn.004d9d20
test eax, eax
mov ecx, 0x64aa48
jne 0x4455d8
push 0x28b
call fcn.004bcff0
push eax
push 1
push 0xfca
jmp 0x4455ea
push 0x28a
call fcn.004bcff0
push eax
push 2
push 0xfc9
push 0x62adb0
call fcn.00439540
mov dword [edi + 0x54c], eax
add esp, 0x10
mov dword [edi + 0x550], esi
jmp 0x446e69
cmp ebx, 0x4010
jne 0x445729
mov eax, dword [0x648a5c]
cmp byte [eax + 0x152], 2
jne 0x44562c
push 0x4ff
jmp 0x446d24
cmp byte [eax + 0x155], 0
jne 0x444d42
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
mov edi, eax
cmp edi, ebp
je 0x446e69
mov ecx, 0x64eb18
call fcn.004f0720
test eax, eax
jne 0x4456a0
mov ecx, 0x64eb18
call fcn.004f0750
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
push edx
push 0x4e6
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x17
push 0x64aa48
call fcn.004be450
add esp, 0x10
jmp 0x446e69
cmp dword [0x64eb8c], ebp
je 0x4456ca
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push eax
mov ecx, 0x64eb18
call fcn.004f0760
test eax, eax
jne 0x4456ca
push 0x4e7
jmp 0x446d24
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push eax
mov ecx, 0x64eb18
call fcn.004f0eb0
test eax, eax
jne 0x4456ec
push 0x4e1
jmp 0x446d24
mov cx, word [edi + 0x6c]
mov edx, dword [0x648a5c]
cmp cx, word [edx + 0x6fe]
jbe 0x445709
push 0x4da
jmp 0x446d24
mov ecx, 0x62d0e4
call fcn.004aa970
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov ecx, esi
call edx
movzx eax, ax
mov dword [0x58d024], eax
jmp 0x44532a
cmp ebx, 0x4002
jne 0x446e69
mov edx, dword [0x648a5c]
push ebp
push edx
mov ecx, 0x62dbc8
call fcn.004b7380
test eax, eax
jne 0x445764
lea ecx, [esp + 0x18]
call fcn.0051ecc0
mov dword [esp + 0x160], 1
jmp 0x445103
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
push eax
call fcn.00509790
add esp, 4
sub eax, ebp
jne 0x445164
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.0049b0d0
test eax, eax
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
cmp eax, ebp
je 0x446e69
movzx eax, word [eax + 0x7a]
lea ebx, [eax + 0x50]
push ebx
mov ecx, edi
call fcn.00442e80
push eax
push esi
push ebx
mov ecx, edi
call fcn.00444650
jmp 0x446e69
test ebx, 0x100
je 0x446c9a
test byte [esi + 0x2e8], 1
je 0x4457f3
push 0x2ef
jmp 0x446d24
cmp dword [0x63b1bc], 5
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
mov ebp, eax
cmp word [ebp + 0x2a], 0x10e
jne 0x445868
mov ecx, dword [0x648a5c]
mov eax, dword [ebp]
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
mov word [esp + 0x1c], 0x318
mov edx, dword [ecx + 0x135]
mov dword [esp + 0x20], edx
mov edx, dword [esi]
mov dword [esp + 0x28], eax
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
mov ecx, dword [ebp + 0x30]
push 0x18
lea edx, [esp + 0x1c]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], ecx
push edx
jmp 0x446e5f
mov edx, dword [0x648a5c]
fld dword [ebp + 0xbc]
movzx eax, word [edx + 0x480]
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
fcompp
fnstsw ax
test ah, 5
jp 0x4458e5
push 0xff
lea ecx, [esp + 0x59]
push 0
push ecx
mov byte [esp + 0x60], 0
call sub.MSVCR80.dll_memset
fld dword [ebp + 0xbc]
add esp, 0xc
call fcn.00551860
push eax
push 0xee
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x5c]
push edx
call dword [sym.imp.MSVCR80.dll_sprintf]
lea eax, [esp + 0x60]
push eax
push 0x17
push 0x64aa48
call fcn.004be450
add esp, 0x18
jmp 0x446e69
cmp ebx, 0x108
jne 0x445979
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
push eax
call fcn.00509790
add esp, 4
sub eax, 1
je 0x445940
sub eax, 3
jne 0x445973
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.0049b0d0
test eax, eax
je 0x445973
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
test eax, eax
jmp 0x4451bc
mov ecx, dword [edi + 0x504]
lea eax, [esp + 0x14]
push eax
call fcn.00447910
test eax, eax
je 0x445973
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, edi
call fcn.00442e80
mov edx, dword [esp + 0x14]
push eax
push esi
push edx
mov ecx, edi
call fcn.00444650
jmp 0x446e69
mov edx, dword [0x648a5c]
mov eax, dword [ebp]
cmp eax, 0xd931
jne 0x445ac9
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x4459a9
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
push 0xd845
mov ecx, 0x649790
mov edi, 0xa
call fcn.00497a80
test eax, eax
jne 0x4459fa
push 0xd84b
mov ecx, 0x649790
call fcn.00497a80
test eax, eax
jne 0x4459fa
push 0xd85e
mov ecx, 0x649790
call fcn.00497a80
test eax, eax
jne 0x4459fa
push 0xe29a
mov ecx, 0x649790
call fcn.00497a80
test eax, eax
je 0x4459ff
mov edi, 0x14
mov eax, dword [0x63b058]
cmp dword [eax + 0x270], edi
jb 0x445a16
push 0x2f6
jmp 0x446d24
push 0
push 0x1a00
mov ecx, 0x66d530
call fcn.005276d0
test eax, eax
jne 0x446e69
push eax
push 0x81
mov ecx, 0x66d530
call fcn.00527730
test eax, eax
jne 0x446e69
push eax
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b05c]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x270], eax
mov dword [edi + 0x26c], ebx
mov ecx, dword [0x63b05c]
mov dword [ecx + 0x268], 1
mov ecx, dword [0x63b05c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446a10
cmp eax, 0xd805
je 0x446be1
cmp eax, 0xd806
je 0x446be1
movzx ebx, word [ebp + 0x2a]
cmp bx, 0x104
jne 0x445be6
cmp word [ebp + 0x6c], 0
je 0x445be6
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x445b1b
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, 0x648a58
call fcn.0048b540
mov ebp, eax
test ebp, ebp
je 0x445bdc
cmp ebp, dword [0x648a5c]
je 0x445bdc
cmp byte [ebp + 0x134], 1
jne 0x445bdc
push 0
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0x7f
lea edx, [esp + 0x59]
push 0
push edx
mov byte [esp + 0x60], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
add ebp, 0x13d
push ebp
push 0x2f9
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x60]
push ecx
push 2
push 0xfe6
push 0x62adb0
mov dword [edi + 0x26c], esi
call fcn.00439540
add esp, 0x1c
jmp 0x446e69
push 0x2fb
jmp 0x446d24
cmp eax, 0xd83a
je 0x446ae6
cmp eax, 0xd83b
je 0x446ae6
cmp eax, 0xd83c
jne 0x445c7b
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x445c25
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov edx, dword [0x648a5c]
push 6
push edx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edi, dword [0x63b0c8]
test edi, edi
je 0x446e69
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov ecx, esi
call edx
movzx ebx, ax
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
mov dword [edi + 0x538], eax
mov dword [edi + 0x53c], ebx
mov ecx, dword [0x63b0c8]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
jmp 0x446e69
cmp eax, 0xd844
jne 0x445cf9
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x445ca4
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov eax, dword [0x648a5c]
push 6
push eax
mov ecx, 0x62dbc8
call fcn.004b7410
mov edi, dword [0x63b0dc]
test edi, edi
je 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x538], eax
mov dword [edi + 0x53c], ebx
mov ecx, dword [0x63b0dc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446e69
cmp bx, 0x105
je 0x446a46
cmp bx, 0x106
je 0x446a46
cmp bx, 0x10c
je 0x446a46
cmp bx, 0x104
jne 0x445dc9
cmp dword [ebp + 0x44], 0
je 0x445dc9
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x445d65
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
je 0x445d65
mov eax, dword [0x63b07c]
xor ecx, ecx
mov dword [eax + 0x2a8], ecx
mov dword [eax + 0x2ac], ecx
jmp 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b07c]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x2a8], eax
mov dword [edi + 0x2ac], ebx
mov ecx, dword [ebp + 0x44]
push ecx
push 0x2e1
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
lea edx, [esp + 0x5c]
push edx
call dword [sym.imp.MSVCR80.dll_sprintf]
lea eax, [esp + 0x60]
push eax
push 2
push 0xfef
push 0x62adb0
call fcn.00439540
add esp, 0x1c
jmp 0x446e69
cmp eax, 0xd807
je 0x446929
cmp eax, 0xd808
je 0x446929
cmp eax, 0xe0a4
je 0x446929
cmp eax, 0xe0a5
je 0x446929
cmp eax, 0xe0a6
je 0x446929
cmp eax, 0xe0a7
je 0x446929
cmp eax, 0xd83d
je 0x446929
cmp eax, 0xd842
je 0x446929
cmp eax, 0xd845
je 0x446929
cmp eax, 0xd84b
je 0x446929
cmp eax, 0xd85e
je 0x446929
cmp eax, 0xe29a
je 0x446929
cmp eax, 0xd837
je 0x4468f4
cmp eax, 0xe0a2
je 0x4468f4
cmp eax, 0xe0a3
je 0x4468f4
cmp eax, 0xd958
je 0x446884
cmp eax, 0xd959
je 0x446884
cmp eax, 0xd95a
je 0x446884
cmp eax, 0xd95b
je 0x446884
cmp eax, 0xd856
jne 0x445f11
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x445ec3
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
push 6
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b0f4]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x544], eax
mov dword [edi + 0x548], ebx
mov ecx, dword [0x63b0f4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446e69
cmp eax, 0xd858
je 0x4467fd
cmp eax, 0xd859
je 0x4467fd
cmp bx, 0x107
jne 0x4460a3
cmp word [ebp + 0x3a], 0
je 0x446040
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xd951
jb 0x445fb7
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xd953
ja 0x445fb7
mov ecx, dword [0x63b028]
push 3
call fcn.0044b680
mov ecx, dword [0x63b028]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b028]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ecx, ax
mov eax, dword [edx + 0x78]
push ecx
mov ecx, esi
call eax
push eax
mov ecx, edi
call fcn.0044b4b0
mov ecx, dword [0x63b028]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xd954
jb 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xd956
ja 0x446e69
mov ecx, dword [0x63aed0]
push 1
push 3
call fcn.0044a0e0
mov ecx, dword [0x63aed0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63aed0]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ecx, ax
mov eax, dword [edx + 0x78]
push ecx
mov ecx, esi
call eax
push eax
mov ecx, edi
call fcn.00449b40
mov ecx, dword [0x63aed0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
jmp 0x446e69
cmp bx, 0x107
jne 0x4460a3
cmp word [ebp + 0x3e], 0
je 0x4460a3
mov eax, dword [0x63b1bc]
cmp eax, 2
je 0x446e69
cmp eax, 5
je 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x446087
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
cmp dword [0x6391ec], 0
jne 0x446e69
mov ecx, 0x64e2c8
call fcn.004ce320
jmp 0x446e69
cmp eax, 0xd840
jne 0x446170
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x4460d0
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
mov al, byte [ecx + 0x47f]
cmp al, 0x40
je 0x4460e8
cmp al, 0x80
jne 0x446e69
push 0
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
mov edx, dword [0x648a5c]
push 6
push edx
mov ecx, 0x62dbc8
call fcn.004b7410
mov ecx, dword [0x63b0d8]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x74]
mov edi, dword [0x63b0d8]
mov ecx, esi
call edx
mov ebx, eax
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov ecx, esi
call edx
movzx eax, ax
mov dword [edi + 0x260], eax
mov dword [edi + 0x264], ebx
jmp 0x446e69
cmp eax, 0xd838
je 0x446791
cmp eax, 0xe1c7
je 0x446791
cmp eax, 0xd94f
je 0x446752
cmp eax, 0xd950
je 0x446752
cmp eax, 0xe0f9
je 0x446752
cmp eax, 0xd94b
je 0x446713
cmp eax, 0xd94c
je 0x446713
cmp eax, 0xd94d
je 0x4466d4
cmp eax, 0xd94e
je 0x4466d4
cmp eax, 0xd85b
jne 0x446215
mov ecx, dword [0x63b114]
cmp dword [ecx + 0x10], 0
jne 0x446e69
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
mov ecx, dword [0x63b114]
push esi
call fcn.00475370
mov ecx, dword [0x63b114]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446e69
cmp bx, 0x136
jne 0x446278
cmp dword [0x64eb8c], 0
je 0x444df2
mov ecx, dword [0x63b0ec]
mov ecx, dword [ecx + 0x2a8]
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], 0
call fcn.00473500
test eax, eax
je 0x44626e
mov eax, dword [esp + 0x14]
mov ecx, dword [0x63b0ec]
push eax
call fcn.00471160
mov ecx, dword [esp + 0x14]
push eax
push esi
push ecx
mov ecx, edi
call fcn.00444650
jmp 0x446e69
push 0x507
jmp 0x446d24
cmp eax, 0xd85d
jne 0x4462a9
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b124]
mov ecx, esi
call eax
mov word [edi + 0x538], ax
mov ecx, dword [0x63b124]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446a10
cmp bx, 0x122
jne 0x446370
cmp dword [edx + 0x434], 0
jne 0x4462c7
push 0x68f
jmp 0x446d24
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
push eax
call fcn.00509790
add esp, 4
cmp eax, 4
je 0x446327
cmp eax, 8
jne 0x446e69
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [edi + 0x504]
mov dword [esp + 0x18], 0
call fcn.00447910
cmp eax, 1
jne 0x446e69
mov edx, dword [esp + 0x14]
push edx
mov ecx, edi
call fcn.00442e80
push eax
mov eax, dword [esp + 0x18]
push esi
push eax
mov ecx, edi
call fcn.00444650
jmp 0x446e69
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [0x63aef0]
mov dword [esp + 0x18], 0
call fcn.00546670
test eax, eax
je 0x446366
mov edx, dword [esp + 0x14]
mov ecx, dword [0x63aef0]
push edx
call fcn.00546600
push eax
mov eax, dword [esp + 0x18]
push esi
push eax
mov ecx, edi
call fcn.00444650
jmp 0x446e69
push 0x690
jmp 0x446d24
cmp bx, 0x109
jne 0x446395
mov ecx, dword [0x63b150]
cmp dword [ecx + 0x10], 0
jne 0x446e69
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446e69
cmp bx, 0x10a
jne 0x4463ba
mov ecx, dword [0x63b154]
cmp dword [ecx + 0x10], 0
jne 0x446e69
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446e69
cmp eax, 0xd860
jne 0x4463df
mov ecx, dword [0x648a5c]
movzx edx, word [ecx + 0x6e6]
mov ecx, dword [0x63b178]
push edx
call fcn.00479a50
jmp 0x446e69
cmp eax, 0xd862
jne 0x446486
cmp word [edx + 0x5ac], 0
jbe 0x4463fe
push 0x698
jmp 0x446d24
movzx eax, word [edx + 0x6fe]
movzx ecx, word [ebp + 0x78]
cmp eax, ecx
jl 0x44647c
movzx edx, word [ebp + 0x7a]
cmp eax, edx
jg 0x44647c
push 0
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0x693
mov ecx, 0x64aa48
mov dword [edi + 0x26c], esi
call fcn.004bcff0
push eax
push 2
push 0x100e
push 0x62adb0
call fcn.00439540
add esp, 0x10
jmp 0x446e69
push 0x43a
jmp 0x446d24
cmp eax, 0xd85f
jne 0x4464f1
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x4464b5
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
je 0x4464b5
push 0x2de
jmp 0x446d24
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov edi, dword [0x63b158]
mov ecx, esi
call edx
mov word [edi + 0x298], ax
mov ecx, dword [0x63b158]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
mov eax, dword [0x648a5c]
push 6
push eax
mov ecx, 0x62dbc8
call fcn.004b7410
jmp 0x446e69
cmp bx, 0x102
je 0x4464ff
cmp bx, 0x10d
jne 0x44651b
movzx eax, word [ebp + 0x7a]
test ax, ax
je 0x44651b
cmp word [edx + 0x6fe], ax
jae 0x446582
push 0x3a3
jmp 0x446d24
cmp bx, 0x104
jne 0x446582
cmp word [ebp + 0x68], 0
je 0x446582
movzx eax, word [ebp + 0x6a]
test ax, ax
jne 0x446540
cmp word [edx + 0x480], 0x32
ja 0x44647c
cmp ax, 1
jne 0x446561
movzx ecx, word [edx + 0x480]
cmp cx, 0x33
jb 0x44647c
cmp cx, 0x46
ja 0x44647c
cmp ax, 2
jne 0x446582
movzx eax, word [edx + 0x480]
cmp ax, 0x47
jb 0x44647c
cmp ax, 0x5a
ja 0x44647c
cmp bx, 0x12c
jne 0x44663c
cmp byte [edx + 0x152], 2
je 0x445622
cmp byte [edx + 0x155], 0
jne 0x444d42
mov ecx, 0x64eb18
call fcn.004f0720
test eax, eax
je 0x445665
cmp dword [0x64eb8c], 0
je 0x4465ee
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push eax
mov ecx, 0x64eb18
call fcn.004f0760
test eax, eax
jne 0x4465ee
push 4
mov ecx, 0x64eb18
call fcn.004f0d00
test eax, eax
je 0x4456c0
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push eax
mov ecx, 0x64eb18
call fcn.004f0eb0
test eax, eax
je 0x4456e2
mov cx, word [ebp + 0x7a]
mov edx, dword [0x648a5c]
cmp cx, word [edx + 0x6fe]
ja 0x446e69
mov ecx, 0x62d0e4
call fcn.004aa970
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov ecx, esi
call edx
movzx eax, ax
mov dword [0x58d024], eax
cmp word [ebp + 0x2a], 0x10d
jne 0x446676
mov ecx, dword [0x648a5c]
call fcn.00442ba0
test al, al
jne 0x44665d
push 0x903
jmp 0x446d24
mov ecx, dword [0x648a5c]
call fcn.00485bb0
test eax, eax
jne 0x446676
push 0x904
jmp 0x446d24
mov ecx, dword [0x648a50]
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov dword [esp + 0x20], ecx
mov ecx, esi
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
mov word [esp + 0x1c], 0x274
call eax
mov edx, dword [esi]
mov word [esp + 0x2a], ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov word [esp + 0x24], ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [esp + 0x26], eax
push 0x18
lea ecx, [esp + 0x1c]
jmp 0x446e5e
mov ecx, dword [0x63b088]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b088]
mov ecx, esi
call eax
mov ecx, dword [ebp]
movzx eax, ax
mov dword [edi + 0x260], ecx
mov dword [edi + 0x264], eax
mov dword [edi + 0x268], 2
jmp 0x446e69
mov ecx, dword [0x63b088]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b088]
mov ecx, esi
call eax
mov ecx, dword [ebp]
movzx eax, ax
mov dword [edi + 0x260], ecx
mov dword [edi + 0x264], eax
mov dword [edi + 0x268], 1
jmp 0x446e69
mov ecx, dword [0x63b088]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b088]
mov ecx, esi
call eax
mov ecx, dword [ebp]
movzx eax, ax
mov dword [edi + 0x260], ecx
mov dword [edi + 0x264], eax
mov dword [edi + 0x268], 0
jmp 0x446e69
cmp byte [edx + 0x495], 0
jne 0x446e69
cmp dword [0x6391ec], 0
jne 0x446e69
cmp dword [0x64e4d4], 0
jne 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x4467da
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x63b09c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
mov ecx, dword [0x63aec8]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 1
call eax
jmp 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x44681f
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
push 6
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov edi, dword [0x63b0f0]
mov ecx, esi
call eax
mov edx, dword [esi]
mov ebp, eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
movzx ecx, ax
mov dword [edi + 0x540], ecx
mov dword [edi + 0x544], ebp
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
xor edi, edi
call eax
cmp eax, 0xd858
je 0x444e78
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xd859
jmp 0x444e9e
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x4468a6
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
push 6
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b0e0]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x538], eax
mov dword [edi + 0x53c], ebx
mov ecx, dword [0x63b0e0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x446916
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
push 1
push 0
mov ecx, 0x62e090
call fcn.004c5620
jmp 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x44694b
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
push 0
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b058]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x2bc], eax
mov dword [edi + 0x2c0], ebx
mov dword [edi + 0x2b8], 1
mov ebp, dword [ebp]
cmp ebp, 0xd807
je 0x446a28
cmp ebp, 0xe0a4
je 0x446a28
cmp ebp, 0xe0a5
je 0x446a28
mov ecx, dword [0x63b058]
push 0
call fcn.00463010
mov ecx, dword [0x648a5c]
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
mov word [esp + 0x1c], 0x273
mov edx, dword [ecx + 0x135]
push 0xc
lea eax, [esp + 0x1c]
push eax
mov ecx, 0x636dc0
mov dword [esp + 0x28], edx
call fcn.00508f50
mov ecx, dword [0x648a5c]
push 6
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
jmp 0x446e69
mov ecx, dword [0x63b058]
push 1
call fcn.00463010
mov ecx, dword [0x63b058]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446a10
push eax
mov ecx, 0x66a4dc
call fcn.00425220
test eax, eax
je 0x446e69
mov al, byte [eax]
cmp al, 2
jae 0x446a77
mov edx, dword [0x648a5c]
cmp al, byte [edx + 0x454]
je 0x446a77
push 0x30a
jmp 0x446d24
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 2
jne 0x446a90
mov ecx, 0x62d0e4
call fcn.004aa970
mov ecx, dword [0x648a50]
mov edx, dword [esi]
xor eax, eax
cmp dword [esi + 0x31c], eax
mov dword [esp + 0x20], ecx
setne al
mov ecx, esi
mov byte [esp + 0x19], 0
mov word [esp + 0x1a], 0x204
lea eax, [eax*4 + 0x291]
mov word [esp + 0x1c], ax
mov eax, dword [edx + 0x78]
call eax
mov edx, dword [esi]
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
movzx ecx, ax
push 0x14
lea edx, [esp + 0x1c]
mov dword [esp + 0x2c], ecx
push edx
jmp 0x446e5f
mov ecx, 0x66d530
call fcn.00527660
test eax, eax
je 0x446afe
push 0x62c
jmp 0x446d24
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x446b20
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
mov ecx, dword [0x648a5c]
xor eax, eax
add ecx, 0x52e
mov edi, edi
cmp dword [ecx], 0
jne 0x446bd7
add eax, 1
add ecx, 4
cmp eax, 0xa
jl 0x446b30
push 0
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov edi, dword [0x63b0c4]
mov ecx, esi
call edx
movzx eax, ax
mov dword [edi + 0x298], eax
mov ecx, dword [0x648a5c]
add ecx, 0x444
push ecx
mov ecx, dword [0x63b0c4]
call fcn.0046fc70
mov eax, dword [0x63b0c4]
xor edx, edx
cmp dword [ebp], 0xd83a
push 1
setne dl
mov dword [eax + 0x29c], edx
mov ecx, dword [0x63b0c4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
jmp 0x446a10
push 0x4a0
jmp 0x446d24
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x446c03
mov ecx, dword [0x648a5c]
call fcn.00488c70
cmp al, 0x17
jne 0x446e69
push 0
push 1
mov ecx, 0x649790
call fcn.00493f90
push 2
push 1
mov ecx, 0x649790
call fcn.00493f90
push 0xa
push 1
mov ecx, 0x649790
call fcn.00493f90
push 3
push 1
mov ecx, 0x649790
call fcn.00493f90
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov edi, dword [0x63b058]
mov ecx, esi
call eax
mov edx, dword [esi]
movzx ebx, ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov dword [edi + 0x2bc], eax
mov dword [edi + 0x2c0], ebx
mov dword [edi + 0x2b8], 1
cmp dword [ebp], 0xd805
mov ecx, dword [0x63b058]
jne 0x4469d5
push 1
call fcn.00463010
mov ecx, dword [0x63b058]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
jmp 0x446a10
test bl, bl
jns 0x446d43
mov edx, dword [0x648a5c]
cmp dword [edx + 0x434], ebp
je 0x446d1f
mov eax, dword [esi]
mov edx, dword [eax + 0x7c]
mov ecx, esi
call edx
push eax
call fcn.00509790
add esp, 4
cmp eax, ebp
je 0x446cd9
cmp eax, 7
jne 0x446e69
lea eax, [esp + 0x14]
push eax
jmp 0x445172
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x649790
call fcn.00497520
cmp eax, ebp
je 0x446e69
movzx eax, word [eax + 0x2a]
mov ecx, dword [0x63aef0]
sub eax, 0x81
lea ebx, [eax + 0x276a]
push ebx
call fcn.00546600
push eax
push esi
push ebx
mov ecx, edi
call fcn.00444650
jmp 0x446e69
push 0x684
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x17
push 0x64aa48
call fcn.004be450
add esp, 0xc
jmp 0x446e69
test bl, 0x40
je 0x446e69
cmp ebx, 0x41
jne 0x446e69
mov ecx, dword [0x648a5c]
call fcn.00488c70
test al, al
je 0x446d6b
push 0x60c
jmp 0x446d24
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push eax
mov ecx, 0x66e1e0
call fcn.00548620
test eax, eax
jne 0x446d8a
push 0x5e6
jmp 0x446d24
cmp dword [0x66e1e4], ebp
je 0x446dbd
mov edx, dword [esi]
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
mov ecx, 0x66e1e0
mov edi, eax
call fcn.00547150
cmp eax, edi
je 0x446db5
push 0x60d
jmp 0x446d24
cmp dword [0x66e1e4], ebp
jne 0x446e0a
mov ecx, 0x66e1e0
call fcn.00547440
test eax, eax
jne 0x446df2
lea ecx, [esp + 0x3c]
push ecx
mov ecx, 0x66e1e0
call fcn.005475f0
lea edx, [esp + 0x3c]
push edx
call fcn.0050a1c0
add esp, 4
push eax
push 0x609
jmp 0x445681
mov ecx, 0x66e1e0
call fcn.00547170
test eax, eax
jne 0x446e0a
push 0x193
jmp 0x446d24
cmp dword [0x635f98], 1
je 0x446d1f
mov ecx, 0x62d0e4
call fcn.004aa970
mov eax, dword [0x648a50]
mov edx, dword [esi]
mov dword [esp + 0x48], eax
mov eax, dword [edx + 0x78]
mov ecx, esi
mov byte [esp + 0x41], 0
mov word [esp + 0x42], 0x204
mov word [esp + 0x44], 0x1f6
call eax
mov edx, dword [esi]
mov dword [esp + 0x4e], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
mov word [esp + 0x4c], ax
lea ecx, [esp + 0x40]
push 0x12
push ecx
mov ecx, 0x636dc0
call fcn.00508f50
mov ecx, dword [esp + 0x158]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.0055160d
add esp, 0x150
ret 4