Function at 0x44db20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4a8680
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov esi, ecx
xor ebx, ebx
lea ecx, [esp + 0x14]
push ebx
mov dword [esp + 0x28], ebx
call fcn.00475930
push ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 1
call fcn.00475930
push ebx
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 2
call fcn.00475930
push 0xc
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], 3
xor edi, edi
call fcn.0041b6f0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00475910
lea ecx, [esp + 0x18]
call fcn.00475ae0
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00475910
mov ecx, dword [0x4c4560]
call fcn.0042d870
cmp ax, bx
jne 0x44dc31
push ebx
push 7
lea ecx, [esi + 0x1c]
call fcn.00475c80
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44dc11
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44dbfe
mov esi, dword [esp + 0x30]
push esi
call fcn.00498130
add esp, 4
xor ax, ax
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
push 5
lea ecx, [esp + 0x30]
call fcn.0041b6f0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00475910
lea ecx, [esp + 0x14]
call fcn.00475ae0
push 6
lea ecx, [esp + 0x30]
call fcn.0041b6f0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00475910
lea ecx, [esp + 0x10]
call fcn.00475ae0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00475910
mov ecx, dword [0x4c4560]
call fcn.0042dcf0
sub eax, 3
cmp eax, 0x1e
ja case.0x44dc9b.20
jmp dword [eax*4 + 0x44ec7c]
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], al
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44dcbd
xor eax, eax
jmp 0x44dcc6
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44dccc
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.004513d0
jmp 0x44eba4
mov cl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], cl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44dd1e
xor eax, eax
jmp 0x44dd27
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44dd2d
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00451650
jmp 0x44eba4
mov dl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], dl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44dd7f
xor eax, eax
jmp 0x44dd88
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44dd8e
xor eax, eax
shl eax, 2
push eax
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00452160
jmp 0x44eba4
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], al
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44dddc
xor eax, eax
jmp 0x44dde5
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44ddeb
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00452380
jmp 0x44eba4
mov cl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], cl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44de3d
xor eax, eax
jmp 0x44de46
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44de4c
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00453590
jmp 0x44eba4
mov dl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], dl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44de9e
xor eax, eax
jmp 0x44dea7
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44dead
xor eax, eax
shl eax, 2
push eax
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00454860
jmp 0x44eba4
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], al
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44defb
xor eax, eax
jmp 0x44df04
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44df0a
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00454d70
jmp 0x44eba4
mov cl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], cl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44df5c
xor eax, eax
jmp 0x44df65
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44df6b
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00455020
jmp 0x44eba4
mov dl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], dl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44dfbd
xor eax, eax
jmp 0x44dfc6
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44dfcc
xor eax, eax
shl eax, 2
push eax
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00455db0
jmp 0x44eba4
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.00456600
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44e3eb
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44e061
jmp 0x44e3e7
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], al
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e090
xor eax, eax
jmp 0x44e099
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e09f
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00456f90
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44e3eb
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44e114
jmp 0x44e3e7
mov cl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], cl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e143
xor eax, eax
jmp 0x44e14c
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e152
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00457530
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44e3eb
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44e1c7
jmp 0x44e3e7
mov dl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], dl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e1f6
xor eax, eax
jmp 0x44e1ff
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e205
xor eax, eax
shl eax, 2
push eax
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00457920
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44e3eb
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44e276
jmp 0x44e3e7
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], al
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e2a5
xor eax, eax
jmp 0x44e2ae
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e2b4
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00457db0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44e3eb
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44e329
jmp 0x44e3e7
mov cl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], cl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e358
xor eax, eax
jmp 0x44e361
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e367
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.004580d0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov dword [esp + 0x24], 0xffffffff
mov edi, eax
je 0x44e3eb
push ebx
mov ecx, esi
call fcn.0041cb80
add esi, 4
cmp esi, edi
jne 0x44e3d8
mov esi, dword [esp + 0x30]
push esi
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov dl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], dl
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e427
xor eax, eax
jmp 0x44e430
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e436
xor eax, eax
shl eax, 2
push eax
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00458410
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov edx, dword [esp + 0x30]
push edx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], al
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jne 0x44e4e8
xor eax, eax
jmp 0x44e4f1
mov eax, dword [esp + 0x44]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jge 0x44e4f7
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00458790
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov eax, dword [esp + 0x30]
push eax
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov cl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x4c], esp
mov byte [edi], cl
lea ecx, [esp + 0x3c]
call fcn.0041b6d0
cmp eax, ebx
jge 0x44e5b0
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.0045ac10
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov ecx, dword [esp + 0x30]
push ecx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov dl, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
lea ecx, [esp + 0x3c]
mov dword [esp + 0x4c], esp
mov byte [edi], dl
call fcn.0041b6d0
cmp eax, ebx
jge 0x44e669
xor eax, eax
shl eax, 2
push eax
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
push ecx
push edx
mov ecx, edi
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.0045b9a0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov edx, dword [esp + 0x30]
push edx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov al, byte [esp + 0x2c]
sub esp, 0x10
mov edi, esp
lea ecx, [esp + 0x3c]
mov dword [esp + 0x4c], esp
mov byte [edi], al
call fcn.0041b6d0
cmp eax, ebx
jge 0x44e71e
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00498866
add esp, 4
mov dword [edi + 4], eax
mov edx, dword [esp + 0x44]
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
push edx
push eax
call fcn.0041bce0
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.0045cd40
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov eax, dword [esp + 0x30]
push eax
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.0045de10
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov edx, dword [esp + 0x30]
push edx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.0045fb80
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov edx, dword [esp + 0x30]
push edx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.004615b0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov edx, dword [esp + 0x30]
push edx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.004627c0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041bcb0
mov edx, dword [esp + 0x30]
push edx
call fcn.00498130
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.00463cd0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], 0xffffffff
call fcn.0041b4c0
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.00465800
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], 0xffffffff
call fcn.0041b4c0
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.00467610
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], 0xffffffff
call fcn.0041b4c0
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x2c]
push eax
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.0041b450
mov ecx, esi
call fcn.004691e0
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], 0xffffffff
call fcn.0041b4c0
mov ax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 0x14
mov ecx, esi
call fcn.0046b290
mov edi, eax
add esi, 0x1c
push 7
mov ecx, esi
call fcn.00475c70
inc al
mov ecx, esi
push eax
push 7
call fcn.00475c80
cmp di, 1
jne 0x44ebec
push ecx
lea eax, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00475910
mov ecx, dword [0x4c4560]
call fcn.0042d870
cmp ax, bx
je 0x44ec2b
push ebx
lea ecx, [esp + 0x14]
jmp 0x44ec1c
cmp di, bx
jne 0x44ec2b
push ecx
lea edx, [esp + 0x10]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
mov edi, 1
call fcn.00475910
mov ecx, dword [0x4c4560]
call fcn.0042d870
cmp ax, bx
je 0x44ec2b
push ebx
lea ecx, [esp + 0x10]
call fcn.00475c70
push eax
push 7
mov ecx, esi
call fcn.00475c80
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 2
call fcn.00475a40
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.00475a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], bl
call fcn.00475a40
lea ecx, [esp + 0x2c]
mov dword [esp + 0x24], 0xffffffff
call fcn.0041b4c0
mov ecx, dword [esp + 0x1c]
mov ax, di
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x1c
ret 0x14