Function at 0x449570
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x44a433
sub esp, 0x110
mov esi, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
cmp ecx, esi
jne 0x4495b4
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
movzx ebp, byte [ecx + 0xf]
mov ebx, ebp
and ebx, 0x1f
mov edx, ebx
movzx ebp, byte [esi + 0xf]
mov ebx, ebp
and ebx, 0x1f
mov byte [esp + 0x17], dl
cmp bl, dl
je 0x4495df
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov dword [esp], ecx
call fcn.00447f40
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
call fcn.00447f40
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x44a424
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x44a424
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
call fcn.00447fe0
mov ebx, dword [esp + 4]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
call fcn.00447fe0
movzx edi, byte [esp + 0x17]
mov esi, dword [esp + 0x38]
mov edx, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
mov eax, dword [esp + 4]
xor ebp, ebp
cmp esi, ebp
jne 0x44a33a
xor ebp, ebp
cmp eax, ebp
jne 0x44a33a
xchg edi, eax
cmp al, 1
xchg edi, eax
jb 0x4496cc
xchg edi, eax
cmp al, 0x10
xchg edi, eax
ja 0x4496cc
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x15
xchg edi, eax
ja 0x449ffd
xchg edi, eax
cmp al, 0x12
xchg edi, eax
ja 0x4497de
xchg edi, eax
cmp al, 0x11
xchg edi, eax
jne 0x449738
mov dword [esp + 0x74], ecx
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov dword [esp + 0x68], edx
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x44972e
mov ebx, dword [esp + 0x74]
mov ecx, dword [ebx + 0x28]
mov ebx, dword [esp + 0x68]
mov ebp, dword [ebx + 0x28]
cmp ecx, ebp
jne 0x44972e
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
jmp 0x449727
xchg edi, eax
cmp al, 0x12
xchg edi, eax
jne 0x44977e
mov esi, dword [ecx + 0x24]
mov ebp, dword [edx + 0x24]
cmp esi, ebp
jne 0x449774
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x449774
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
jmp 0x44976d
call fcn.00429e30
mov ebx, 0x5f5d9c
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.0042a840
call fcn.0042a040
movzx ebx, byte [esp + 0x17]
xor ecx, ecx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0042a650
call fcn.0042a080
call fcn.00429eb0
mov ebx, 0x5f5d9c
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.00429650
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x13
xchg edi, eax
jne 0x449c2d
mov dword [esp + 0x64], ecx
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0x64]
movzx ebp, word [ebx + 0x22]
mov ecx, ebp
mov ebx, dword [esp + 0x60]
movzx ebp, word [ebx + 0x22]
cmp cx, bp
jne 0x449c1e
mov ebx, dword [esp + 0x64]
movzx ebp, word [ebx + 0x20]
mov ecx, ebp
mov ebx, dword [esp + 0x60]
movzx ebp, word [ebx + 0x20]
cmp cx, bp
jne 0x449c1e
mov ecx, dword [esp + 0x64]
xor ebx, ebx
mov eax, 0x24
movzx ebp, byte [ecx + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x449843
add eax, 0x10
mov edx, ecx
add edx, eax
movzx ebp, word [ecx + 0x20]
cmp ebp, 0x100000
ja 0x449c17
mov esi, edx
cmp edx, 0
je 0x449c10
mov edi, 0x100000
mov dword [esp + 0xa8], ebp
mov ecx, dword [esp + 0x60]
xor ebx, ebx
mov eax, 0x24
movzx ebp, byte [ecx + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x44988a
add eax, 0x10
mov edx, ecx
add edx, eax
movzx ebp, word [ecx + 0x20]
mov eax, ebp
cmp ebp, 0x100000
ja 0x449c09
mov ebp, edx
cmp edx, 0
je 0x449c02
mov ecx, eax
mov eax, 0x100000
mov dword [esp + 0xa4], esi
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x108], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0x104], esi
mov dword [esp + 0xec], esi
mov edx, dword [esp + 0x108]
mov dword [esp + 0x10c], edi
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0xdc], eax
xor eax, eax
mov dword [esp + 0xf0], edx
cmp eax, edx
jge 0x4499b6
mov ebx, eax
cmp eax, edx
jae 0x449bfb
mov ebp, dword [esp + 0xec]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 0x1c], eax
mov ebx, eax
mov ebp, dword [esp + 0xd8]
cmp eax, ebp
jae 0x449bf4
mov ebp, dword [esp + 0xd4]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp + 4], ebx
call fcn.00449570
mov edx, dword [esp + 0xf0]
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x4499a6
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0xf0], edx
cmp eax, edx
jl 0x44993d
mov eax, dword [esp + 0x64]
xor ebx, ebx
mov ecx, 0x24
movzx ebp, byte [eax + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x4499d2
add ecx, 0x10
movzx ebp, word [eax + 0x22]
mov ebx, ebp
and ebx, 0x7fff
mov edi, ebx
mov esi, eax
add esi, ecx
movzx ebp, word [eax + 0x20]
mov ecx, ebp
movzx ebp, word [eax + 0x20]
mov ebx, ebp
add ebx, edi
mov edx, ebx
movzx ebx, cx
mov eax, ebx
movzx ebx, dx
cmp ebx, 0x100000
ja 0x449bed
cmp eax, ebx
ja 0x449bed
mov edx, ebx
sub edx, eax
mov ecx, 0x100000
sub ecx, eax
mov ebx, esi
cmp esi, 0
je 0x449be6
cmp ecx, 0
je 0x449a32
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], edx
mov edi, ecx
mov eax, dword [esp + 0x60]
xor ebx, ebx
mov ecx, 0x24
movzx ebp, byte [eax + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x449a5e
add ecx, 0x10
movzx ebp, word [eax + 0x22]
mov ebx, ebp
and ebx, 0x7fff
mov esi, ebx
mov edx, eax
add edx, ecx
movzx ebp, word [eax + 0x20]
mov ecx, ebp
movzx ebp, word [eax + 0x20]
mov ebx, ebp
add ebx, esi
mov ebp, ebx
movzx ebx, cx
mov eax, ebx
movzx ebx, bp
cmp ebx, 0x100000
ja 0x449bdf
cmp eax, ebx
ja 0x449bdf
mov esi, ebx
sub esi, eax
mov ecx, 0x100000
sub ecx, eax
mov ebx, edx
cmp edx, 0
je 0x449bd8
cmp ecx, 0
je 0x449abe
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov ebp, ebx
mov edx, esi
mov eax, ecx
mov esi, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x108], ebx
mov dword [esp + 0xb8], edi
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], edx
mov ecx, edx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x104], esi
mov dword [esp + 0xe0], esi
mov edx, dword [esp + 0x108]
mov dword [esp + 0x10c], edi
mov dword [esp + 0xe8], edi
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0xd0], eax
xor eax, eax
cmp eax, edx
jge 0x449bbb
mov ebx, eax
mov dword [esp + 0xe4], edx
cmp eax, edx
jae 0x449bd1
mov ebp, dword [esp + 0xe0]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 0x18], eax
mov ebx, eax
mov ebp, dword [esp + 0xcc]
cmp eax, ebp
jae 0x449bca
mov ebp, dword [esp + 0xc8]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp + 4], ebx
call fcn.00449570
mov edx, dword [esp + 0xe4]
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x449bb2
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x18]
inc eax
cmp eax, edx
jl 0x449b4a
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
call fcn.00427990
ud2
call fcn.00427990
ud2
mov dword [edx], eax
jmp 0x449ab2
call fcn.00427a00
ud2
mov dword [esi], eax
jmp 0x449a26
call fcn.00427a00
ud2
call fcn.00427990
ud2
call fcn.00427990
ud2
mov dword [edx], eax
jmp 0x4498ab
call fcn.00427a00
ud2
mov dword [edx], eax
jmp 0x449862
call fcn.00427a00
ud2
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x14
xchg edi, eax
jne 0x449f91
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], ecx
mov eax, ecx
cmp ecx, 0
je 0x449f8a
add eax, 0x20
cld
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.00448bf0
mov ebx, dword [esp + 4]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x58]
cmp eax, 0
je 0x449f83
add eax, 0x20
cld
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.00448bf0
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x449f74
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x90], edi
mov dword [esp + 8], edi
mov dword [esp + 0x94], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x449f74
mov ecx, dword [edx + 0x28]
mov ebx, dword [esp + 0x58]
mov ebp, dword [ebx + 0x28]
cmp ecx, ebp
je 0x449cf9
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xor eax, eax
mov ebp, dword [edx + 0x28]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x20]
cmp eax, ebp
jge 0x449f10
mov dword [esp + 0x24], eax
mov ebp, eax
mov esi, dword [edx + 0x28]
cmp eax, esi
jae 0x449f6d
mov ecx, dword [edx + 0x24]
shl ebp, 3
add ecx, ebp
mov ebx, dword [esp + 0x58]
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x449f66
mov esi, dword [ebx + 0x24]
shl ebp, 3
add esi, ebp
mov dword [esp + 0x2c], esi
mov dword [esp], edx
cmp dword [esp], 0
je 0x449f5b
mov dword [esp + 0x40], ecx
mov ebp, dword [ecx]
mov dword [esp + 4], ebp
call fcn.00448460
mov ebx, dword [esp + 8]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x449f50
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx]
mov dword [esp + 4], ebp
call fcn.00448460
mov ebx, dword [esp + 8]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp], ebx
call fcn.00448bf0
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp], ebx
call fcn.00448bf0
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x449f41
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x449f41
mov ebx, dword [esp + 0x3c]
mov dword [esp], ebx
call fcn.00448dd0
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp], ebx
call fcn.00448dd0
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x449f32
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x449f32
mov ebx, dword [esp + 0x5c]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x449f27
mov ebx, dword [esp + 0x40]
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
call fcn.004484b0
mov ebx, dword [esp + 8]
mov dword [esp + 0x6c], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x449f1f
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
call fcn.004484b0
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0x6c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00449570
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x449eff
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x24]
inc eax
mov ebp, dword [esp + 0x20]
cmp eax, ebp
jl 0x449d0e
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov dword [0], eax
jmp 0x449ebe
mov dword [0], eax
jmp 0x449e99
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov dword [0], eax
jmp 0x449d79
mov dword [0], eax
jmp 0x449d51
call fcn.00427990
ud2
call fcn.00427990
ud2
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov dword [eax], eax
jmp 0x449c7c
mov dword [ecx], eax
jmp 0x449c4b
xchg edi, eax
cmp al, 0x15
xchg edi, eax
jne 0x44977e
mov dword [esp + 0x54], ecx
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov dword [esp + 0x50], edx
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x449ff3
mov ebx, dword [esp + 0x54]
mov ebp, dword [ebx + 0x24]
mov dword [esp], ebp
mov ebx, dword [esp + 0x50]
mov ebp, dword [ebx + 0x24]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x449ff3
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
jmp 0x449fec
xchg edi, eax
cmp al, 0x17
xchg edi, eax
ja 0x44a060
xchg edi, eax
cmp al, 0x16
xchg edi, eax
jne 0x44a030
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
mov byte [esp + 0x11c], bl
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x17
xchg edi, eax
jne 0x44977e
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
mov byte [esp + 0x11c], bl
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x18
xchg edi, eax
jne 0x44a076
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jne 0x44a32a
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x4c]
mov eax, dword [ebx + 0x28]
mov ebx, dword [esp + 0x48]
mov ebp, dword [ebx + 0x28]
cmp eax, ebp
je 0x44a0aa
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xor eax, eax
mov ebx, dword [esp + 0x4c]
mov ebp, dword [ebx + 0x28]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x24]
cmp eax, ebp
jge 0x44a2e0
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x4c]
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x44a323
mov ecx, dword [ebx + 0x24]
imul ebp, ebp, 0xc
add ecx, ebp
mov ebx, dword [esp + 0x48]
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x44a31c
mov esi, dword [ebx + 0x24]
imul ebp, ebp, 0xc
add esi, ebp
mov dword [esp + 0x30], esi
mov dword [esp + 0x44], ecx
cld
mov ecx, dword [ecx]
mov dword [esp], ecx
call fcn.00448bf0
mov ebx, dword [esp + 4]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0x30]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00448bf0
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x44a30d
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x90], edi
mov dword [esp + 8], edi
mov dword [esp + 0x94], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x44a30d
mov ebx, dword [esp + 0x44]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00448dd0
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x30]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00448dd0
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x44a2fe
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x44a2fe
mov ebx, dword [esp + 0x44]
mov ebp, dword [ebx + 4]
mov dword [esp], ebp
mov ebx, dword [esp + 0x30]
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
call fcn.00449570
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x44a234
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov ebx, dword [esp + 0x44]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00448ce0
mov ebx, dword [esp + 4]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0x30]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00448ce0
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x44a2ef
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x90], edi
mov dword [esp + 8], edi
mov dword [esp + 0x94], edx
mov dword [esp + 0xc], edx
call fcn.00451c80
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x44a2ef
mov ebx, dword [esp + 0x44]
mov eax, dword [ebx + 8]
mov ebx, dword [esp + 0x30]
mov ebp, dword [ebx + 8]
cmp eax, ebp
je 0x44a2cf
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x20]
inc eax
mov ebp, dword [esp + 0x24]
cmp eax, ebp
jl 0x44a0c3
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
call fcn.00427990
ud2
call fcn.00427990
ud2
xchg edi, eax
cmp al, 0x1a
xchg edi, eax
je 0x44a067
jmp 0x44977e
xor ebp, ebp
cmp esi, ebp
je 0x44a415
mov dword [esp + 0x34], eax
xor ebp, ebp
cmp eax, ebp
je 0x44a415
mov dword [esp], ecx
mov ebp, dword [esi]
mov dword [esp + 4], ebp
call fcn.00448460
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
mov dword [esp], eax
call fcn.00448bf0
mov ebx, dword [esp + 4]
mov dword [esp + 0x80], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x84], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
mov ebx, dword [esp + 0x34]
mov ebp, dword [ebx]
mov dword [esp + 4], ebp
call fcn.00448460
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
mov dword [esp], eax
call fcn.00448bf0
mov edi, dword [esp + 0x84]
mov esi, dword [esp + 4]
mov eax, dword [esp + 8]
cmp edi, eax
jne 0x44a406
mov ebp, dword [esp + 0x80]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x78], esi
mov dword [esp + 8], esi
mov dword [esp + 0x7c], eax
mov dword [esp + 0xc], eax
call fcn.00451c80
movzx edi, byte [esp + 0x17]
mov edx, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
jne 0x4496af
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
call fcn.0044ff60
jmp fcn.00449570