Function at 0x7437b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x744cbc
sub esp, 0x110
mov ecx, dword [esp + 0x11c]
cmp ecx, 2
jl 0x744bc1
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x120]
mov eax, ebp
mov edx, ebx
xor esi, esi
xor edi, edi
xor eax, eax
mov word [esp + 0x24], ax
xor edx, edx
mov dword [esp + 0x34], edx
xor edx, edx
mov dword [esp + 0x30], edx
xor edx, edx
mov dword [esp + 0x10c], edx
xor ebx, ebx
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x118]
mov eax, ebp
mov edx, ebx
jmp 0x7438c0
inc ebx
mov ebp, dword [esp + 0x10c]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x104]
movzx esi, word [esp + 0x24]
mov dword [esp + 0x38], ebx
movzx ebx, word [esp + 0x22]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x30]
cmp ebx, esi
jge 0x743881
mov ebp, dword [esp + 0x28]
cmp ebx, ebp
jge 0x743881
cmp ebx, esi
jae 0x744cab
mov ebp, dword [esp + 0x10c]
mov ebp, dword [ebp + ebx*4]
mov esi, dword [esp + 0x104]
mov esi, dword [esi + ebx*4]
cmp ebp, esi
je 0x74382b
test ebx, ebx
jle 0x743941
mov ebp, dword [esp + 0x34]
cmp ebx, ebp
ja 0x744ca2
movzx esi, word [esp + 0x24]
mov eax, dword [esp + 0x64]
inc eax
mov word [esp + 0x24], si
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov ebp, dword [esp + 0x40]
mov ebx, dword [esp + 0x108]
mov esi, eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x108], ebx
cmp esi, ecx
jg 0x743f72
mov dword [esp + 0x64], esi
jge 0x743f5e
jae 0x744cb4
mov ebx, dword [edx + esi*4]
cmp byte [ebx], 0x12
jne 0x7438f7
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
test ebp, ebp
jle 0x7438f7
mov ebx, dword [esi]
cmp byte [ebx], 3
je 0x743f3a
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov dword [esp + 0x28], ebx
xor ebx, ebx
mov word [esp + 0x22], bx
mov dword [esp + 0x104], ebp
mov dword [esp + 0x2c], esi
movzx esi, word [esp + 0x24]
cmp bx, si
jne 0x743941
mov dword [esp + 0xb0], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xb0]
jmp 0x74384c
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x104]
movzx ebx, word [esp + 0x22]
mov word [esp + 0x26], bx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x64]
cmp ebx, edi
jne 0x743993
mov edi, dword [esp + 0x108]
mov ebx, ebp
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edi
mov edi, dword [esp + 0x64]
movzx esi, word [esp + 0x26]
mov ebp, dword [esp + 0x5c]
jmp 0x74389a
mov dword [esp + 0x58], ebp
mov dword [esp + 0x100], esi
lea ebp, [edi + 1]
cmp ebx, ebp
jne 0x743aaa
cmp edi, ecx
jae 0x744c9b
mov ebp, dword [esp + 0x3c]
lea ebx, [ebp + 1]
mov esi, dword [edx + edi*4]
mov edi, esi
mov esi, dword [esp + 0x40]
cmp ebx, esi
ja 0x743a43
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], esi
mov ebx, dword [esp + 0xe0]
lea esi, [ebx + ebp*4]
mov dword [esp + 0xfc], esi
mov esi, dword [0xe8ff30]
test esi, esi
jne 0x743a2d
mov dword [ebx + ebp*4], edi
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, ebx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], esi
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x100]
jmp 0x743971
mov ebp, edi
mov edi, dword [esp + 0xfc]
mov esi, eax
mov eax, ebp
call fcn.00456ab0
mov eax, esi
jmp 0x743a07
mov dword [esp + 0xf8], edi
lea eax, [0x98d460]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x118]
mov ebp, dword [esp + 0x3c]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x120]
jmp 0x7439e1
mov dword [esp + 0x4c], edi
nop
mov ebp, dword [esp + 0x114]
mov esi, dword [ebp + 0x10]
lea edx, [ebp + 0x10]
mov dword [esp + 0xf4], edx
test esi, esi
je 0x743f0c
mov ecx, dword [0xe8ff30]
mov ebx, dword [esi + 0x10]
test ecx, ecx
jne 0x743ec7
mov dword [ebp + 0x10], ebx
mov edi, esi
mov ebx, eax
xor eax, eax
call fcn.00456d71
mov dword [esp + 0xdc], esi
mov byte [esi], 3
movzx ecx, word [esp + 0x24]
mov word [esi + 2], cx
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x1c]
mov edx, dword [esp + 0x30]
cmp edx, edi
ja 0x743e94
mov dword [esp + 0x84], edi
mov dword [esp + 0x104], ecx
mov dword [esp], ecx
mov eax, dword [esp + 0x10c]
mov dword [esp + 4], eax
shl edx, 2
mov dword [esp + 8], edx
call fcn.00457480
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xdc]
mov dword [ecx + 0x18], eax
mov edx, dword [esp + 0x84]
mov dword [ecx + 0x1c], edx
mov edx, dword [0xe8ff30]
test edx, edx
jne 0x743e7c
mov ebx, dword [esp + 0x104]
mov dword [ecx + 0x14], ebx
mov ebx, dword [esp + 0x118]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x4c]
jmp 0x743bb6
inc edx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x114]
mov ebp, dword [esp + 0x11c]
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0x11c]
mov edi, dword [esp + 0x64]
cmp edx, edi
jge 0x743c0c
cmp edx, esi
jae 0x744c92
mov dword [esp + 0x84], edx
mov ecx, dword [ebx + edx*4]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00744cd0
mov eax, dword [0xe8ff30]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x118]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x743c00
mov dword [ebx + edx*4], ecx
jmp 0x743b86
mov eax, ecx
call fcn.00456ab0
jmp 0x743b86
mov edx, dword [esp + 0x120]
cmp edi, edx
ja 0x744c8b
mov eax, dword [esp + 0x4c]
cmp eax, edi
ja 0x744c84
mov dword [esp], ebp
sub edx, eax
mov dword [esp + 0x84], edx
mov esi, eax
shl eax, 2
neg edx
sar edx, 0x1f
and edx, eax
lea eax, [ebx + edx]
mov dword [esp + 4], eax
sub edi, esi
mov dword [esp + 8], edi
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc], edx
mov byte [esp + 0x10], 0x13
call fcn.007433d0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], eax
nop
mov ecx, dword [esp + 0x114]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x743e5c
mov dword [esp + 0xd4], edi
mov ebx, dword [0xe8ff30]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x743e2a
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00456d71
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0xd0], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 0xc]
cmp ebp, 2
jb 0x743de0
mov esi, 2
mov edi, ebp
mov ebp, dword [0xe8ff30]
test ebp, ebp
jne 0x743db1
mov ebp, dword [esp + 0xdc]
mov dword [ebx], ebp
mov dword [ebx + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov ebp, dword [0xe8ff30]
test ebp, ebp
jne 0x743da0
mov dword [ecx + 4], ebx
mov ebx, dword [esp + 0x3c]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x40]
cmp ebp, esi
ja 0x743d5a
mov edx, dword [esp + 0x108]
mov dword [esp + 0x40], esi
mov edi, ebp
mov ebp, dword [0xe8ff30]
lea esi, [edx + ebx*4]
test ebp, ebp
jne 0x743d49
mov dword [edx + ebx*4], ecx
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x11c]
mov ebp, dword [esp + 0x40]
mov ebx, edx
mov esi, edi
mov edx, dword [esp + 0x118]
jmp 0x743a0f
mov ebx, edi
mov edi, esi
mov eax, ecx
call fcn.00456ab0
xor eax, eax
mov edi, ebx
jmp 0x743d27
lea eax, [0x98d460]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.004402d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x3c]
jmp 0x743d11
lea edi, [ecx + 4]
mov eax, ebx
call fcn.00456ab0
xor eax, eax
jmp 0x743cfb
mov dword [esp + 0x84], edi
mov edi, ebx
mov eax, dword [esp + 0xdc]
call fcn.00456ab0
lea ebp, [ebx + 4]
mov edi, ebp
mov eax, edx
call fcn.00456ab0
xor eax, eax
mov edi, dword [esp + 0x84]
jmp 0x743ce4
lea eax, [0x98d460]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.004402d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xc0]
jmp 0x743cc8
mov eax, edi
mov edi, dword [esp + 0xf4]
mov ecx, eax
mov eax, ebp
call fcn.00456ab0
lea edx, [0x9a01c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00411550
xor eax, eax
mov edx, dword [esp + 0xc0]
jmp 0x743ca3
lea eax, [0x9a01c0]
mov dword [esp], eax
call fcn.0040af00
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xc0]
jmp 0x743caa
lea edi, [ecx + 0x14]
mov edx, eax
mov eax, dword [esp + 0x104]
call fcn.00456ab0
mov eax, edx
jmp 0x743b67
lea eax, [0x92bb00]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.004402d0
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x30]
jmp 0x743b0f
mov dword [esp + 0xcc], esi
mov edi, edx
mov eax, ebx
call fcn.00456ab0
lea ecx, [0x9a01c0]
mov dword [esp], ecx
mov dword [esp + 4], esi
call fcn.00411550
xor eax, eax
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x114]
mov esi, dword [esp + 0xcc]
jmp 0x743aea
lea eax, [0x9a01c0]
mov dword [esp], eax
call fcn.0040af00
mov esi, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x120]
mov ebp, dword [esp + 0x114]
jmp 0x743aea
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x1c]
movzx ebx, word [ebx + 2]
and ebx, 1
mov dword [esp + 0x28], ebp
mov ebp, esi
mov esi, eax
mov eax, dword [esp + 0x120]
jmp 0x74390e
xor ebx, ebx
xor ebp, ebp
xor esi, esi
xor ebx, ebx
mov word [esp + 0x26], bx
xor ebx, ebx
jmp 0x74395e
mov esi, dword [esp + 0x3c]
mov eax, ebp
mov ecx, ebx
xor edx, edx
xor edi, edi
xor eax, eax
mov dword [esp + 0xd8], eax
xor ecx, ecx
mov dword [esp + 0x84], ecx
mov eax, ebp
mov ecx, ebx
jmp 0x743fb2
inc edx
mov dword [esp + 0xd8], ebp
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x84], ebx
mov ebx, esi
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x10c], ebx
cmp edx, esi
jg 0x7445df
mov dword [esp + 0x60], edx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x50], edi
jge 0x7445d1
jae 0x744c7b
mov ebx, dword [ecx + edx*4]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x74459b
xor ebx, ebx
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0xd8]
test ebp, ebp
jne 0x74455c
mov dword [esp + 0xa0], eax
xor eax, eax
mov byte [esp + 0x21], al
mov eax, dword [esp + 0xa0]
movzx esi, byte [esp + 0x21]
xchg esi, eax
test al, al
xchg esi, eax
je 0x744092
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x744531
cmp dword [ebp + 0x18], 1
jne 0x744531
mov dword [esp + 0x98], eax
mov eax, 1
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x98]
movzx ebx, byte [esp + 0x20]
test bl, bl
je 0x7444d6
mov ebx, 1
test bl, bl
je 0x744092
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x10c]
mov esi, dword [esp + 0x80]
mov dword [esp + 0x84], esi
mov esi, dword [esp + 0x10c]
jmp 0x743f96
mov ebx, dword [esp + 0xb8]
cmp edx, edi
jne 0x7440c6
mov ebp, dword [esp + 0x10c]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x84], esi
mov esi, ebp
mov ebp, ebx
mov ebx, edi
mov edi, edx
jmp 0x743f96
mov dword [esp + 0xe4], ebx
lea esi, [edi + 1]
cmp edx, esi
jne 0x7441da
mov ebp, dword [esp + 0x3c]
cmp edi, ebp
jae 0x744c69
mov esi, dword [esp + 0x84]
lea ebp, [esi + 1]
mov ebx, dword [ecx + edi*4]
mov edi, ebx
mov ebx, dword [esp + 0x80]
cmp ebp, ebx
ja 0x744176
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x84], ebp
mov dword [esp + 0x7c], ebx
mov ebx, dword [esp + 0xe0]
lea ebp, [ebx + esi*4]
mov dword [esp + 0xf0], ebp
mov ebp, dword [0xe8ff30]
test ebp, ebp
jne 0x744160
mov dword [ebx + esi*4], edi
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x84]
mov edi, esi
mov esi, ebp
mov ebp, ebx
mov ebx, dword [esp + 0xe4]
jmp 0x7440b2
mov ebp, edi
mov edi, dword [esp + 0xf0]
mov esi, eax
mov eax, ebp
call fcn.00456ab0
mov eax, esi
jmp 0x744143
mov dword [esp + 0xf8], edi
lea eax, [0x98d460]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0xf8]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x40]
jmp 0x74411a
mov esi, dword [esp + 0x114]
jmp 0x744216
lea edi, [edx + 1]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x60]
mov eax, dword [esp + 0x40]
mov ecx, ebx
mov edx, ebp
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x114]
cmp edi, edx
jge 0x744276
mov ebx, dword [esp + 0x3c]
cmp edi, ebx
jae 0x744c60
mov dword [esp + 0x7c], edi
mov eax, dword [ecx + edi*4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
cmp edi, eax
setne dl
mov byte [esp + 8], dl
call fcn.00744f00
mov eax, dword [0xe8ff30]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x108]
lea edi, [ebx + edx*4]
test eax, eax
jne 0x74426a
mov dword [ebx + edx*4], ecx
jmp 0x7441e3
mov eax, ecx
call fcn.00456ab0
jmp 0x7441e3
cmp edx, eax
ja 0x744c57
mov edi, dword [esp + 0x50]
cmp edi, edx
ja 0x744c4e
mov dword [esp], esi
sub eax, edi
mov ebp, eax
neg eax
shl edi, 2
sar eax, 0x1f
and eax, edi
add eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
sub edx, eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov byte [esp + 0x10], 0x13
call fcn.007433d0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xbc], eax
nop
mov ecx, dword [esp + 0x114]
mov edi, dword [ecx + 0x10]
test edi, edi
je 0x7444b6
mov dword [esp + 0xc8], edi
mov ebx, dword [0xe8ff30]
mov ebp, dword [edi + 0x10]
test ebx, ebx
jne 0x744486
mov dword [ecx + 0x10], ebp
mov edx, eax
xor eax, eax
call fcn.00456d71
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xc4], ecx
mov byte [ecx], 0x12
mov ebx, dword [ecx + 0xc]
mov ebp, dword [ecx + 4]
cmp ebx, 2
jb 0x74443c
mov esi, 2
mov edi, ebx
mov ebx, dword [0xe8ff30]
test ebx, ebx
jne 0x744413
mov ebx, dword [esp + 0xd8]
mov dword [ebp], ebx
mov dword [ebp + 4], edx
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], edi
mov ebx, dword [0xe8ff30]
test ebx, ebx
jne 0x744402
mov dword [ecx + 4], ebp
mov ebx, dword [esp + 0x84]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x80]
cmp ebp, esi
ja 0x7443b9
mov edx, dword [esp + 0x10c]
mov dword [esp + 0x84], esi
mov edi, ebp
mov ebp, dword [0xe8ff30]
lea esi, [edx + ebx*4]
test ebp, ebp
jne 0x7443a8
mov dword [edx + ebx*4], ecx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x108]
mov ebp, dword [esp + 0x84]
mov esi, edi
mov ebx, edx
mov edx, dword [esp + 0x60]
jmp 0x74414e
mov ebx, edi
mov edi, esi
mov eax, ecx
call fcn.00456ab0
xor eax, eax
mov edi, ebx
jmp 0x744389
lea eax, [0x98d460]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.004402d0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov ebx, dword [esp + 0x84]
jmp 0x744370
lea edi, [ecx + 4]
mov eax, ebp
call fcn.00456ab0
xor eax, eax
jmp 0x744354
mov dword [esp + 0x7c], edi
mov edi, ebp
mov eax, dword [esp + 0xd8]
call fcn.00456ab0
lea ebx, [ebp + 4]
mov edi, ebx
mov eax, edx
call fcn.00456ab0
xor eax, eax
mov edi, dword [esp + 0x7c]
jmp 0x74433d
lea eax, [0x98d460]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.004402d0
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea esi, [eax + 2]
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x744320
lea edx, [ecx + 0x10]
mov eax, edi
mov edi, edx
mov ebx, eax
mov eax, ebp
call fcn.00456ab0
lea edx, [0x9a01c0]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00411550
xor eax, eax
mov edx, dword [esp + 0xbc]
jmp 0x7442fb
lea eax, [0x9a01c0]
mov dword [esp], eax
call fcn.0040af00
mov ecx, dword [esp + 4]
xor eax, eax
mov edx, dword [esp + 0xbc]
jmp 0x744302
xchg esi, eax
cmp al, 0x11
xchg esi, eax
jne 0x74452a
mov ebx, dword [ebp + 0x2c]
cmp dword [ebp + 0x28], ebx
jne 0x74452a
mov ebx, dword [ebp + 4]
mov esi, dword [ebp + 8]
test esi, esi
jbe 0x744c72
mov ebx, dword [ebx]
movzx esi, byte [ebx]
xchg esi, eax
cmp al, 3
xchg esi, eax
jne 0x74450f
cmp dword [ebx + 0x18], 1
jne 0x74450f
mov ebx, 1
jmp 0x744066
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x744505
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x744505
xchg esi, eax
cmp al, 6
xchg esi, eax
sete bl
jmp 0x744066
xor ebx, ebx
jmp 0x744066
xchg esi, eax
cmp al, 4
xchg esi, eax
je 0x74403d
xchg esi, eax
cmp al, 5
xchg esi, eax
je 0x74403d
xchg esi, eax
cmp al, 6
xchg esi, eax
sete al
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x40]
jmp 0x744054
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0074b690
movzx eax, byte [esp + 8]
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xd8]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x50]
mov byte [esp + 0x21], al
mov eax, dword [esp + 0x40]
jmp 0x744019
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x7445c8
mov ebp, dword [ebx + 4]
mov esi, dword [ebx + 8]
test esi, esi
jle 0x7445c8
mov ebx, dword [ebp]
cmp byte [ebx], 2
jne 0x7445bf
mov esi, dword [esp + 0x3c]
xor ebx, ebx
jmp 0x743fef
mov esi, dword [esp + 0x3c]
jmp 0x743fef
mov esi, dword [esp + 0x3c]
jmp 0x743fef
mov ebp, dword [esp + 0xd8]
xor ebx, ebx
jmp 0x744099
mov edx, dword [esp + 0x84]
mov eax, ebx
xor ecx, ecx
xor esi, esi
xor edi, edi
jmp 0x744601
inc ecx
mov ebx, dword [esp + 0x84]
mov ebx, edx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x108], ebx
cmp ecx, edx
jg 0x744a8a
jge 0x744647
jae 0x744c45
mov edx, dword [eax + ecx*4]
movzx ebx, byte [edx]
cmp bl, 3
jne 0x744a6d
cmp dword [edx + 0x18], 1
jne 0x744a6d
mov edx, 1
test dl, dl
je 0x744647
mov edx, dword [esp + 0x108]
jmp 0x7445f0
mov dword [esp + 0x68], ecx
cmp ecx, esi
jne 0x74470f
mov edx, dword [esp + 0x84]
cmp ecx, edx
mov ebx, dword [esp + 0x108]
jge 0x744709
jae 0x744c06
lea esi, [edi + 1]
mov edx, dword [eax + ecx*4]
cmp esi, ebp
ja 0x7446b6
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], ebp
mov ebp, dword [0xe8ff30]
lea esi, [ebx + edi*4]
test ebp, ebp
jne 0x7446a7
mov dword [ebx + edi*4], edx
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
lea esi, [ecx + 1]
mov edi, ebp
mov ebp, edx
mov edx, ebx
jmp 0x7445f0
mov edi, esi
mov ebp, eax
mov eax, edx
call fcn.00456ab0
mov eax, ebp
jmp 0x744691
mov dword [esp + 0x78], edi
mov dword [esp + 0xf8], edx
lea eax, [0x98d460]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.004402d0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xf8]
mov edi, dword [esp + 0x78]
jmp 0x744679
mov edx, ebp
mov ebp, edi
jmp 0x744699
lea edx, [esi + 1]
cmp ecx, edx
jne 0x744800
mov edx, dword [esp + 0x84]
cmp esi, edx
jae 0x744c3c
lea ebx, [edi + 1]
mov esi, dword [eax + esi*4]
cmp ebx, ebp
ja 0x74479c
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebp
mov ebx, dword [esp + 0xe0]
lea ebp, [ebx + edi*4]
mov dword [esp + 0xec], ebp
mov ebp, dword [0xe8ff30]
test ebp, ebp
jne 0x744786
mov dword [ebx + edi*4], esi
cmp ecx, edx
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov edi, esi
jmp 0x744663
mov edi, dword [esp + 0xec]
mov ebp, eax
mov eax, esi
call fcn.00456ab0
cmp ecx, edx
mov eax, ebp
jmp 0x744777
mov dword [esp + 0xf8], esi
lea eax, [0x98d460]
mov dword [esp], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004402d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [ecx + 1]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x10c]
jmp 0x74474f
mov dword [esp + 0x74], ebp
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], esi
mov ebx, dword [esp + 0x84]
jmp 0x744833
mov ebx, dword [esp + 0x54]
inc ebx
mov ebp, dword [esp + 0x84]
mov ebp, dword [esp + 0x74]
mov esi, edx
mov edx, ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x7c], esi
cmp edx, ecx
jge 0x744881
cmp esi, ebx
jae 0x744c33
mov ebp, dword [eax + esi*4]
movzx esi, byte [ebp]
cmp edx, ebx
jae 0x744c2a
mov dword [esp + 0x54], edx
mov ebx, dword [eax + edx*4]
movzx edx, byte [ebx]
xchg esi, eax
cmp al, dl
xchg esi, eax
jae 0x744868
mov edx, dword [esp + 0x54]
jmp 0x744818
jne 0x74487d
mov edx, dword [ebx + 0x18]
cmp dword [ebp + 0x18], edx
setl dl
test dl, dl
jne 0x744862
mov edx, dword [esp + 0x7c]
jmp 0x744818
xor edx, edx
jmp 0x744873
mov edx, dword [esp + 0x44]
cmp edx, ebx
jae 0x744c21
mov ebp, dword [eax + edx*4]
mov dword [esp + 0xf8], ebp
lea ebp, [eax + edx*4]
cmp esi, ebx
jae 0x744c18
mov dword [esp + 0xe8], ebp
mov ebp, dword [0xe8ff30]
mov ebx, dword [eax + esi*4]
lea esi, [eax + esi*4]
test ebp, ebp
jne 0x744a41
mov dword [eax + edx*4], ebx
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0xf8]
mov dword [eax + ebx*4], ebp
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x80]
jmp 0x744901
lea esi, [eax + 1]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x68]
mov eax, ecx
mov ecx, ebx
mov ebx, dword [esp + 0x84]
mov edi, dword [esp + 0x3c]
mov ebp, esi
cmp ebp, ecx
jge 0x74496c
mov esi, dword [eax + edx*4]
cmp ebp, ebx
jae 0x744c0f
mov dword [esp + 0x48], ebp
mov ecx, dword [eax + ebp*4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.00746bf0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x10c]
mov edx, dword [ecx + eax*4]
test byte [edx], al
mov ebx, dword [0xe8ff30]
mov ebp, dword [esp + 0x114]
mov esi, dword [ebp + 0x10]
test ebx, ebx
jne 0x74494f
mov dword [edx + 0x10], esi
mov dword [ebp + 0x10], edx
jmp 0x7448de
lea edi, [edx + 0x10]
mov ebx, eax
mov eax, esi
call fcn.00456ab0
lea edi, [ebp + 0x10]
mov eax, edx
call fcn.00456ab0
mov eax, ebx
jmp 0x7448de
mov ecx, dword [eax + edx*4]
mov dword [esp], ecx
call fcn.00743200
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x10c]
mov edx, dword [ebx + edx*4]
mov ebp, dword [esp + 0x74]
cmp ecx, ebp
ja 0x7449ef
mov esi, dword [esp + 0x108]
mov dword [esp + 0x40], ebp
mov edi, ebx
mov ebx, dword [0xe8ff30]
lea ebp, [esi + eax*4]
test ebx, ebx
jne 0x7449d1
mov dword [esi + eax*4], edx
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov eax, edi
mov ebx, esi
mov ebp, dword [esp + 0x40]
mov esi, ecx
mov ecx, dword [esp + 0x68]
jmp 0x74477f
mov eax, edi
mov edi, ebp
mov ebx, eax
mov eax, edx
call fcn.00456ab0
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
cmp eax, edx
mov edi, ebx
jmp 0x7449be
mov dword [esp + 0xf8], edx
lea edx, [0x98d460]
mov dword [esp], edx
mov ebx, dword [esp + 0x108]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
call fcn.004402d0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0x10c]
jmp 0x74499b
mov ebp, edi
mov edi, dword [esp + 0xe8]
mov eax, ebx
call fcn.00456ab0
mov edi, esi
mov eax, dword [esp + 0xf8]
call fcn.00456ab0
mov eax, dword [esp + 0x10c]
mov edi, ebp
jmp 0x7448ce
cmp bl, 4
je 0x744635
cmp bl, 5
je 0x744635
cmp bl, 6
sete dl
jmp 0x74463a
mov eax, ebx
xor ecx, ecx
xor edx, edx
jmp 0x744a96
mov ebx, ecx
mov ecx, esi
cmp ecx, edi
jge 0x744ba5
mov dword [esp + 0x10c], ebx
lea esi, [ecx + 1]
cmp esi, edi
jge 0x744b9e
cmp ecx, edi
jae 0x744bfd
mov ebx, dword [eax + ecx*4]
cmp byte [ebx], 2
jne 0x744b97
cmp esi, edi
jae 0x744bf4
mov ebx, dword [eax + ecx*4 + 4]
cmp byte [ebx], 2
jne 0x744ade
mov ecx, dword [esp + 0x10c]
jmp 0x744a92
cmp ecx, edi
jae 0x744beb
mov dword [esp + 0x70], esi
lea ebx, [edx + 1]
mov esi, dword [eax + ecx*4]
cmp ebx, ebp
ja 0x744b3d
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x40], ebp
mov ebx, dword [0xe8ff30]
lea ebp, [ecx + edx*4]
test ebx, ebx
jne 0x744b2a
mov dword [ecx + edx*4], esi
mov esi, dword [esp + 0x70]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x84]
jmp 0x744a92
mov edx, edi
mov edi, ebp
mov ebx, eax
mov eax, esi
call fcn.00456ab0
mov eax, ebx
mov edi, edx
jmp 0x744b16
mov dword [esp + 0x6c], edx
mov dword [esp + 0xf8], esi
lea eax, [0x98d460]
mov dword [esp], eax
mov ecx, dword [esp + 0x10c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.004402d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0xf8]
mov edi, dword [esp + 0x3c]
jmp 0x744afb
cmp ecx, edi
jmp 0x744ae0
cmp ecx, edi
jmp 0x744ae0
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], edx
mov dword [esp + 0x12c], ebp
add esp, 0x110
ret
mov eax, dword [esp + 0x118]
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], ecx
mov eax, dword [esp + 0x120]
mov dword [esp + 0x12c], eax
add esp, 0x110
ret
mov eax, ecx
mov ecx, edi
call fcn.00456b30
mov eax, esi
mov ecx, edi
call fcn.00456b30
mov eax, ecx
mov ecx, edi
call fcn.00456b30
mov eax, ecx
mov ecx, edx
call fcn.00456b30
mov eax, ebp
mov ecx, ebx
call fcn.00456b30
mov eax, esi
mov ecx, ebx
call fcn.00456b30
mov eax, edx
mov ecx, ebx
call fcn.00456b30
mov eax, edx
mov ecx, ebx
call fcn.00456b30
mov eax, esi
mov ecx, ebx
call fcn.00456b30
mov eax, esi
mov ecx, edx
call fcn.00456b30
mov eax, ecx
mov ecx, edx
call fcn.00456b30
mov eax, edi
mov ecx, edx
call fcn.00456b90
mov ecx, edx
mov edx, eax
call fcn.00456b70
mov eax, edi
mov ecx, ebx
call fcn.00456b30
mov eax, edi
mov ecx, ebp
call fcn.00456b30
xor eax, eax
mov ecx, esi
call fcn.00456b30
mov eax, edx
mov ecx, esi
call fcn.00456b30
mov ecx, edi
call fcn.00456b90
mov ecx, edi
call fcn.00456b70
mov eax, edx
mov ecx, esi
call fcn.00456b30
mov eax, edi
call fcn.00456b30
mov ecx, ebx
mov edx, ebp
call fcn.00456b70
mov eax, ebx
mov ecx, esi
call fcn.00456b30
mov eax, esi
call fcn.00456b30
nop
call fcn.00455270
jmp fcn.007437b0