Function at 0x456120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x18c]
cmp eax, dword [ecx + 8]
jbe 0x457bed
sub esp, 0x20c
mov eax, dword [esp + 0x220]
test eax, eax
jle 0x45615e
mov ecx, dword [esp + 0x22c]
test ecx, ecx
je 0x456165
jmp 0x457bd6
mov ecx, dword [esp + 0x22c]
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x21c]
cmp ebx, edx
jne 0x456189
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x50], edx
je 0x457bc0
call fcn.004462b0
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x210]
cmp ecx, 0xffffffff
jne 0x4561cc
mov edx, dword [esp + 0x214]
cmp edx, 0xffffffff
jne 0x4561d3
mov ecx, dword [esp + 0x21c]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x4561c1
mov ebx, dword [ecx + 0x3c]
xor ebp, ebp
jmp 0x4561e3
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
jmp 0x4561e3
mov edx, dword [esp + 0x214]
mov ecx, dword [esp + 0x21c]
mov ebx, dword [esp + 0x210]
xor ebp, ebp
mov dword [esp + 0x90], eax
mov dword [esp + 0x1c0], ebp
lea edi, [esp + 0x1e0]
mov esi, eax
xor eax, eax
call fcn.00461345
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1f4], edx
mov ecx, dword [esp + 0x21c]
mov edi, esi
mov esi, dword [ecx + 0xcc]
mov ebp, dword [ecx + 0xd0]
mov dword [esp + 0x60], ebp
mov ebp, dword [ecx + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x224]
test ecx, ecx
je 0x456249
xor eax, eax
mov byte [esp + 0x1f], al
xor eax, eax
jmp 0x45626a
mov edi, dword [esp + 0x22c]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x90]
mov byte [esp + 0x1f], cl
mov ecx, dword [esp + 0x224]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ebp
test ebx, ebx
jne 0x4562a4
mov edx, dword [edx]
mov dword [esp + 0x1e8], edx
mov edx, dword [esp + 0x84]
lea edi, [edx + 4]
mov dword [esp + 0x1f4], edi
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
call fcn.004509e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
je 0x45633d
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x1e4], ecx
lea edi, [esp + 0xd4]
xor eax, eax
call fcn.00461320
mov ecx, dword [esp + 0x228]
mov ebx, dword [esp + 0x21c]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0x80]
xor eax, eax
mov dword [esp + 0x44], eax
xor eax, eax
mov byte [esp + 0x1e], al
xor eax, eax
mov byte [esp + 0x20], al
mov eax, dword [esp + 0x220]
mov dword [esp + 0x78], eax
mov dword [esp + 0xa4], ecx
xor ecx, ecx
mov dword [esp + 0x38], ecx
xor eax, eax
mov ecx, dword [esp + 0xa4]
jmp 0x4564c7
mov eax, dword [esp + 0x22c]
test eax, eax
jne 0x456355
movzx ecx, byte [esp + 0x1f]
test cl, cl
je 0x45641c
mov eax, dword [esp + 0x21c]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x90], ecx
mov eax, dword [eax + 0x54]
mov dword [esp + 0x7c], eax
mov edx, dword [esp + 0x1e8]
mov dword [esp + 0x88], edx
call fcn.00438140
lea eax, [0x60e367]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438a20
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00438820
lea eax, [0x60eef9]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004388a0
call fcn.00438360
call fcn.004381b0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 4], eax
lea eax, [esp + 0x1e0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.004598e0
mov eax, dword [esp + 0x22c]
test eax, eax
jmp 0x45641e
test eax, eax
jne 0x456432
mov dword [esp + 0x238], 0
add esp, 0x20c
ret
lea eax, [0x60dbfb]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00436610
mov dword [esp + 0x1e0], ebx
mov ebx, dword [esp + 0x1b4]
mov dword [esp + 0x1e4], ebx
mov ebx, dword [esp + 0x1f0]
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1f0], 0
mov ebx, dword [esp + 0x1f8]
mov dword [esp + 0x1f4], ebx
mov dword [esp + 0x1f8], 0
mov dword [esp + 0x208], 0
sete bl
mov ebp, dword [esp + 0x21c]
mov esi, dword [esp + 0x88]
mov ebp, esi
xor eax, eax
mov dword [esp + 0x1c0], eax
mov byte [esp + 0x1e], bl
mov esi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x21c]
xor eax, eax
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x44]
cmp ecx, esi
jle 0x456fe7
mov esi, dword [esp + 0x1e0]
mov ebx, dword [esp + 0x1e4]
mov dword [esp + 0x1dc], ebx
mov ebx, dword [esi + 0x10]
test ebx, ebx
je 0x456fd6
mov dword [esp + 0x1d8], esi
movzx ebx, byte [esi + 0x25]
movzx esi, byte [esi + 0x24]
xchg esi, eax
cmp al, 4
xchg esi, eax
jne 0x456510
and ebx, 0xfffffffd
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
cmp dword [esp + 0x1e8], ebp
jne 0x456547
cmp dword [esp + 0x1f4], edx
jne 0x45653e
mov esi, dword [esp + 0x21c]
cmp dword [esi + 0x3c], ebp
jne 0x45654e
cmp dword [esi + 0x38], edx
jne 0x45654e
and ebx, 0xfffffffd
jmp 0x45654e
mov esi, dword [esp + 0x21c]
jmp 0x45654e
mov esi, dword [esp + 0x21c]
mov ebp, dword [esp + 0x1f8]
test ebp, ebp
je 0x45657a
mov ebp, dword [esp + 0x1d8]
mov ebp, dword [esp + 0x1dc]
mov dword [esp + 0x1b8], ebp
mov ebp, dword [esp + 0x1d8]
jmp 0x456795
mov ebp, dword [esp + 0x234]
test ebp, 4
je 0x4566e0
mov eax, dword [esi + 0x18]
cmp dword [eax], esi
jne 0x4566e0
mov eax, dword [eax + 0x50]
test eax, eax
je 0x4566e0
movzx edx, byte [esp + 0x23]
cmp dl, 0xc
je 0x456647
cmp dl, 0x13
jne 0x456617
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x1f4], eax
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 0x50]
mov edx, dword [eax]
mov edi, dword [eax + 4]
mov ecx, dword [eax + 0xcc]
mov eax, dword [eax + 0xd0]
and ebx, 0xfffffffd
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x1d8]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x1dc]
mov dword [esp + 0x1b8], ecx
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x94]
jmp 0x45670b
mov eax, dword [esp + 0x1d8]
mov dword [esp + 0x1bc], eax
mov edx, dword [esp + 0x1dc]
mov dword [esp + 0x1b8], edx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x2c]
jmp 0x45670b
mov eax, dword [eax + 0x20]
mov dword [esp + 0x1e8], eax
mov dword [esp], eax
call fcn.004509e0
mov esi, dword [esp + 4]
mov ebx, dword [esp + 8]
mov dword [esp + 0x1e0], esi
mov dword [esp + 0x1e4], ebx
mov eax, dword [esp + 0x21c]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
movzx edx, byte [esi + 0x25]
mov ecx, dword [ecx + 0x30]
mov dword [esp + 0x1f0], ecx
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
mov ecx, dword [ecx + 0x1c]
mov dword [esp + 0x1f4], ecx
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
mov ebp, dword [ecx]
mov edi, dword [ecx + 4]
mov eax, dword [ecx + 0xcc]
mov ecx, dword [ecx + 0xd0]
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov ebx, edx
mov edx, ebp
mov ebp, dword [esp + 0x234]
mov esi, dword [esp + 0x21c]
mov ebp, eax
mov eax, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x234]
jmp 0x45670b
mov eax, dword [esp + 0x1d8]
mov dword [esp + 0x1bc], eax
mov eax, dword [esp + 0x1dc]
mov dword [esp + 0x1b8], eax
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], eax
mov dword [esp + 0x1c4], ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], edx
mov byte [esp + 0x21], bl
mov ebp, dword [esp + 0x1e8]
mov esi, dword [esp + 0x1bc]
mov dword [esp], esi
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
lea ebp, [esp + 0xd4]
mov dword [esp + 0xc], ebp
call fcn.00451490
mov eax, dword [esp + 0x1f4]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1f8], eax
add eax, 4
mov dword [esp + 0x1f8], eax
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x21c]
movzx ebx, byte [esp + 0x21]
mov ebp, dword [esp + 0x1bc]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x30], edi
mov dword [esp + 0x1bc], ebp
test bl, 1
je 0x4567c2
mov dword [esp + 0x1f0], 0
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x1b4], eax
xor eax, eax
jmp 0x456a72
test bl, 2
je 0x45680b
mov ebx, dword [esp + 0x22c]
test ebx, ebx
je 0x4567e3
mov esi, dword [esp + 0x44]
test esi, esi
jle 0x456816
test ebx, ebx
je 0x4567e7
jmp 0x457b48
mov esi, dword [esp + 0x44]
mov dword [esp + 0x1f0], 0
xor eax, eax
mov dword [esp + 0x1a8], eax
xor eax, eax
mov dword [esp + 0x1a4], eax
xor eax, eax
jmp 0x456a54
mov ebx, dword [esp + 0x22c]
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x1f0]
test eax, eax
jne 0x45683e
mov eax, dword [esp + 0x1f8]
add eax, 0xfffffffc
mov dword [esp + 0x48], eax
mov eax, dword [eax]
mov dword [esp + 0x1f0], eax
mov eax, dword [esp + 0x48]
jmp 0x456840
xor eax, eax
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x1f0]
mov dword [esp], ecx
call fcn.004509e0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x45687e
movzx edx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x22c]
mov esi, dword [esp + 0x1bc]
mov edi, dword [esp + 0x21c]
jmp 0x456a2a
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x4568ba
mov ebp, dword [esp + 0x21c]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x8c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4568b1
mov esi, dword [esp + 0x1bc]
cmp byte [esi + 0x24], 0x12
jne 0x4568c8
mov edx, ebx
xor ebx, ebx
jmp 0x4568ca
mov esi, dword [esp + 0x1bc]
jmp 0x4568c8
mov ebp, dword [esp + 0x21c]
mov esi, dword [esp + 0x1bc]
mov edx, ebx
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
mov edi, ebp
mov ebp, dword [esp + 0x22c]
test ebp, ebp
jne 0x4568f0
test bl, bl
jne 0x4568f0
test ebp, ebp
jmp 0x456a24
mov dword [esp], esi
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
call fcn.004510c0
mov eax, dword [esp + 0x21c]
mov ecx, dword [eax + 0x50]
mov dword [esp + 0x74], ecx
mov edx, dword [eax + 0x54]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 8]
mov dword [esp + 0x1cc], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x70], ebp
mov esi, dword [esp + 0x1f0]
mov dword [esp + 0x8c], esi
call fcn.00438140
lea eax, [0x60e367]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438a20
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00438820
lea eax, [0x615d8a]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.00438a20
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.00438a20
lea eax, [0x60ee1c]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004388a0
call fcn.00438360
call fcn.004381b0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], ecx
lea edx, [esp + 0x1e0]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0xc], ebx
call fcn.004598e0
mov edx, dword [esp + 0x22c]
test edx, edx
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d4]
movzx edx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x22c]
mov esi, dword [esp + 0x1bc]
mov edi, dword [esp + 0x21c]
jne 0x457b32
mov edx, dword [esp + 0x84]
mov ebx, ebp
mov ebp, esi
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1a4], eax
xor eax, eax
mov ecx, dword [esp + 0x228]
mov esi, dword [esp + 0x21c]
mov ebx, dword [esp + 0x1a8]
mov eax, dword [esp + 0x1a4]
mov dword [esp + 0x1b4], eax
xor eax, eax
mov dword [esp + 0x1a8], ebx
mov esi, dword [esp + 0x1f8]
mov dword [esp + 0x1fc], esi
add esi, 0xfffffffc
mov dword [esp + 0x1fc], esi
mov esi, dword [esp + 0x22c]
test esi, esi
jne 0x456ab2
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x456b5f
test esi, esi
mov ebx, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x1f8]
mov dword [esp + 0x200], ebx
je 0x456ace
cmp dword [ebp + 8], 0x80000000
sete bl
jmp 0x456ad0
xor ebx, ebx
mov ebp, dword [ebp + 8]
mov dword [esp + 0x204], ebp
mov dword [esp + 0x208], 0
test bl, bl
je 0x456b53
lea eax, [esp + 0x1e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1bc]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1b8]
mov dword [esp + 8], edx
test esi, esi
setne bl
mov byte [esp + 0xc], bl
mov ebx, dword [esp + 0x1c0]
mov dword [esp + 0x10], ebx
call fcn.004581e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x204], eax
mov dword [esp + 0x208], ecx
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x22c]
mov edi, dword [esp + 0x30]
movzx ebx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x1e8]
mov dword [esp + 0x1ec], ebp
movzx ebp, byte [esp + 0x1e]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x456c05
mov ebx, dword [esp + 0x1e0]
mov dword [esp + 0x1d8], ebx
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jne 0x456ba0
mov dword [esp + 0x1ec], 0
test esi, esi
jmp 0x456bfe
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1d8]
mov ecx, dword [ecx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00450540
mov eax, dword [esp + 0x1e0]
mov eax, dword [eax + 0xc]
add eax, dword [esp + 8]
inc eax
mov dword [esp + 0x1ec], eax
mov edx, dword [esp + 0x22c]
test edx, edx
mov eax, 0
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
movzx ebp, byte [esp + 0x1e]
mov esi, dword [esp + 0x22c]
mov edi, dword [esp + 0x30]
movzx ebx, byte [esp + 0x1f]
jmp 0x456c07
test esi, esi
jne 0x456c14
mov esi, dword [esp + 0x224]
test esi, esi
jmp 0x456c6d
mov eax, dword [esi]
lea ecx, [esp + 0x1e0]
mov dword [esp], ecx
mov ebx, dword [esp + 0x230]
mov dword [esp + 4], ebx
mov edx, esi
call eax
movzx eax, byte [esp + 8]
test al, al
je 0x456fc4
mov ebx, dword [esp + 0x224]
test ebx, ebx
mov eax, 0
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
movzx ebx, byte [esp + 0x1f]
movzx ebp, byte [esp + 0x1e]
mov esi, dword [esp + 0x224]
mov edi, dword [esp + 0x30]
je 0x456d9a
mov ebx, dword [esp + 0x1e8]
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x456c97
mov esi, dword [esp + 0x234]
test esi, 2
jne 0x456cf2
xchg ebp, eax
test al, al
xchg ebp, eax
jmp 0x456ca2
xchg ebp, eax
test al, al
xchg ebp, eax
mov esi, dword [esp + 0x234]
jne 0x456cf2
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x1bc]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1b8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450540
mov eax, dword [esp + 0x34]
cmp dword [esp + 8], eax
jne 0x456cf7
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x34]
movzx ebp, byte [esp + 0x1e]
mov esi, dword [esp + 0x234]
mov edi, dword [esp + 0x30]
lea ebp, [ebx + 1]
jmp 0x456d19
lea ebx, [eax - 1]
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov esi, dword [esp + 0x234]
mov edi, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x1bc]
cmp byte [ebx + 0x27], 3
ja 0x456d37
xor eax, eax
mov dword [esp + 0x198], eax
xor eax, eax
jmp 0x456d81
mov dword [esp + 0x6c], ebp
lea esi, [ebx + 0x27]
mov ebx, dword [ebx + 0x1c]
lea ebx, [esi + ebx*4 + 0xd]
mov ebx, dword [ebx]
cmp ebx, 0xffffffff
xchg esi, ebx
sete bl
xchg esi, ebx
mov ebp, dword [esp + 0x1b8]
mov ebp, dword [ebp + 0x98]
xchg esi, eax
movzx eax, al
xchg esi, eax
dec esi
add ebx, ebp
and ebx, esi
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x234]
mov dword [esp + 0x198], ebx
mov ebx, dword [esp + 0x1bc]
mov esi, dword [esp + 0x198]
test esi, esi
jne 0x457968
movzx esi, byte [esp + 0x20]
jmp 0x457a76
test bl, bl
je 0x456eb1
mov ebx, dword [esp + 0x1e8]
mov dword [esp + 0x24], ebx
mov esi, dword [esp + 0x44]
test esi, esi
jg 0x456dce
mov esi, dword [esp + 0x234]
test esi, 2
je 0x456dce
xor eax, eax
mov byte [esp + 0x22], al
xor eax, eax
jmp 0x456e20
mov eax, dword [esp + 0x1bc]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1b8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450540
mov eax, dword [esp + 0x1e8]
cmp dword [esp + 8], eax
setb al
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x24]
movzx ebp, byte [esp + 0x1e]
mov esi, dword [esp + 0x234]
mov edi, dword [esp + 0x30]
mov byte [esp + 0x22], al
xor eax, eax
movzx esi, byte [esp + 0x22]
xchg esi, eax
test al, al
xchg esi, eax
je 0x456e32
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x456e32
dec ebx
mov ebp, dword [esp + 0x1bc]
cmp byte [ebp + 0x27], 3
ja 0x456e43
xor esi, esi
jmp 0x456e82
mov dword [esp + 0x68], ebx
lea esi, [ebp + 0x27]
mov ebp, dword [ebp + 0x1c]
lea ebp, [esi + ebp*4 + 0xd]
mov ebp, dword [ebp]
cmp ebp, 0xffffffff
xchg esi, ebx
sete bl
xchg esi, ebx
mov ebx, dword [esp + 0x1b8]
mov ebx, dword [ebx + 0x98]
xchg esi, eax
movzx eax, al
xchg esi, eax
dec esi
add ebx, ebp
and ebx, esi
mov ebp, dword [esp + 0x1bc]
mov esi, ebx
mov ebx, dword [esp + 0x68]
test esi, esi
jne 0x456e90
movzx esi, byte [esp + 0x20]
jmp 0x4574ff
mov dword [esp + 0x194], esi
lea edi, [esp + 0xac]
call fcn.00461346
movzx ecx, byte [esp + 0x20]
mov edi, dword [esp + 0x38]
jmp 0x4572e2
movzx ebp, byte [esp + 0x20]
xchg ebp, eax
mov byte [esp + 0x20], al
xchg ebp, eax
mov ebx, dword [esp + 0x44]
inc ebx
mov esi, dword [esp + 0x1bc]
cmp byte [esi + 0x24], 4
jne 0x456f53
mov ebp, dword [esp + 0x60]
test ebp, ebp
je 0x456f57
mov esi, dword [esp + 0x1c4]
mov esi, dword [esi + ebp*4 - 4]
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x78]
test esi, esi
jne 0x456f49
mov esi, dword [esp + 0x22c]
test esi, esi
jne 0x456f50
mov eax, dword [esp + 0x224]
mov dword [esp], eax
movzx edx, byte [esp + 0x1f]
mov byte [esp + 4], dl
mov ebp, dword [esp + 0x5c]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00458380
mov ebx, dword [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x22c]
mov edi, dword [esp + 0x30]
jmp 0x456f50
mov esi, dword [esp + 0x22c]
dec ebp
jmp 0x456f5e
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x22c]
mov dword [esp + 0x44], ebx
mov esi, dword [esp + 0x1bc]
movzx esi, byte [esi + 0x24]
xchg esi, eax
cmp al, 0x12
xchg esi, eax
mov ebx, dword [esp + 0x1a8]
test ebx, ebx
je 0x4571cc
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x1e8]
cmp dword [esp + 0x1f0], ebp
jne 0x456fba
mov dword [esp + 0x8c], ebp
mov ebp, dword [esp + 0x1f4]
cmp dword [esp + 0x1f8], ebp
je 0x4571e0
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jmp 0x456448
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jmp 0x456448
mov eax, dword [esp + 0x44]
mov dword [esp + 0x238], eax
add esp, 0x20c
ret
mov ebx, dword [esp + 0x21c]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x44]
jmp 0x456feb
mov eax, dword [esp + 0x38]
movzx edx, byte [esp + 0x1f]
test dl, dl
jne 0x456ff6
mov eax, esi
mov edx, dword [esp + 0x22c]
test edx, edx
je 0x457013
cmp ecx, eax
jle 0x457013
mov edx, dword [esp + 0x1f4]
mov ebp, dword [ebx + 0x40]
cmp ebp, edx
jne 0x457021
mov dword [esp + 0x238], eax
add esp, 0x20c
ret
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ebp
mov dword [esp + 0x44], eax
mov eax, dword [ebx + 0x50]
mov dword [esp + 0x90], eax
mov ecx, dword [ebx + 0x54]
mov dword [esp + 0x7c], ecx
call fcn.00438140
lea eax, [0x60db6f]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00438a20
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00438820
lea eax, [0x60dd2c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004388a0
lea eax, [0x60c2e0]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004388a0
call fcn.00438360
call fcn.004381b0
mov eax, dword [esp + 0x21c]
mov ecx, dword [eax]
mov dword [esp + 0x8c], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x88], eax
call fcn.00438140
lea eax, [0x60d15d]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004388a0
lea eax, [0x60ba1d]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004388a0
lea eax, [0x60c112]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438a20
mov eax, dword [esp + 0x44]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438820
lea eax, [0x60c2cc]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00438a20
mov eax, dword [esp + 0x228]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438820
call fcn.00438360
call fcn.004381b0
lea eax, [0x619392]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00436610
mov ebx, dword [esp + 0x21c]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x44]
jmp 0x456feb
mov dword [esp + 0x88], ebp
call fcn.00438140
lea eax, [0x617100]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004388a0
lea eax, [0x60bfd2]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004388a0
call fcn.00438360
call fcn.004381b0
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1e0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004598e0
lea eax, [0x610622]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00436610
mov dword [esp + 0x38], edi
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1c8]
movzx ecx, byte [ecx + 2]
mov byte [esp + 0x20], cl
mov edx, dword [esp + 0x1e4]
mov eax, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00450540
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x194]
add ebx, dword [ecx + eax*4 + 0x10]
mov ebp, dword [esp + 0x1bc]
movzx ecx, byte [esp + 0x20]
mov edi, dword [esp + 0x38]
mov dword [esp + 0x38], edi
mov byte [esp + 0x20], cl
mov dword [esp + 0x24], ebx
mov dword [esp], ebp
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 0
call fcn.00451630
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4574db
cmp eax, 0x100000
jae 0x457911
lea eax, [eax + eax*4]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x194]
mov edx, dword [ecx + eax*4 + 0xc]
mov dword [esp + 0xb0], edx
lea edx, [ecx + eax*4 + 2]
movzx edx, byte [edx]
mov byte [esp + 0xd0], dl
lea ebx, [ecx + eax*4]
mov dword [esp + 0x1c8], ebx
mov ebp, dword [esp + 0x234]
test ebp, 1
jne 0x4573be
lea eax, [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x21c]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x38]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov byte [esp + 0xd], dl
movzx edx, byte [esp + 0x20]
mov byte [esp + 0xe], dl
call fcn.00459200
movzx eax, byte [esp + 0x10]
test al, al
je 0x4574d2
lea eax, [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
call fcn.004510c0
mov eax, dword [esp + 8]
mov dword [esp + 0x1a0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x1bc]
mov dword [esp], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.00451430
mov eax, dword [esp + 0x14]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b0], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x58], edx
call fcn.00438140
mov eax, dword [esp + 0x1a0]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.00438a20
lea eax, [0x60c6e3]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00438a20
call fcn.004381b0
call fcn.00438140
lea eax, [0x666c3a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438a20
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.00438a20
lea eax, [0x60ba24]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438a20
mov eax, dword [esp + 0x50]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438820
call fcn.00438360
call fcn.004381b0
mov eax, dword [esp + 0x38]
lea edi, [eax + 1]
jmp 0x457290
mov edi, dword [esp + 0x38]
jmp 0x457290
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x1bc]
mov edi, dword [esp + 0x30]
movzx esi, byte [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x234]
test ebx, 1
je 0x457519
mov esi, 1
jmp 0x457581
movzx eax, byte [ebp + 0x24]
mov dword [esp], ebp
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x21c]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x38]
test ebx, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0xc], al
xchg edi, eax
mov byte [esp + 0xd], al
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.00459200
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x234]
mov ebp, dword [esp + 0x1bc]
mov edi, dword [esp + 0x30]
mov esi, eax
xor eax, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x457590
mov esi, dword [esp + 0x38]
jmp 0x4578f4
mov dword [esp], ebp
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
call fcn.004510c0
mov eax, dword [esp + 8]
mov dword [esp + 0x19c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x1bc]
mov dword [esp], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.00451430
mov eax, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1ac], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x3c]
cmp ebx, 0xf
je 0x457605
mov ebp, dword [esp + 0x19c]
jmp 0x457647
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
lea ecx, [0x61059b]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.00402990
movzx eax, byte [esp + 0xc]
test al, al
je 0x45763c
mov ebx, 5
lea ebp, [0x60c5b5]
jmp 0x457647
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x19c]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x19c], ebp
call fcn.00438140
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.00438a20
lea eax, [0x60ba18]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438a20
call fcn.004381b0
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x1bc]
mov dword [esp], ecx
mov edx, dword [esp + 0x1b8]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
call fcn.00457c00
call fcn.00438140
lea eax, [0x60ba4c]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438a20
call fcn.004381b0
call fcn.00438140
lea eax, [0x666c3a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438a20
mov eax, dword [esp + 0x1ac]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00438a20
lea eax, [0x60ba24]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438a20
mov eax, dword [esp + 0x4c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438820
call fcn.004381b0
mov eax, dword [esp + 0x1bc]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1b8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450540
mov eax, dword [esp + 0x1e8]
cmp dword [esp + 8], eax
jae 0x4577c6
mov eax, dword [esp + 0x1bc]
mov ecx, dword [eax]
mov edx, dword [esp + 0x1b8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00450540
mov eax, dword [esp + 0x1e8]
sub eax, dword [esp + 8]
mov dword [esp + 0x8c], eax
call fcn.00438140
lea eax, [0x60ba3e]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004388a0
call fcn.004381b0
mov eax, dword [esp + 0x21c]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x4577f7
cmp dword [ecx + 0x70], 2
jb 0x4577eb
cmp dword [ecx + 0x50], eax
je 0x457807
mov ecx, dword [esp + 0x90]
cmp ecx, 2
jmp 0x457801
mov ecx, dword [esp + 0x90]
cmp ecx, 2
jmp 0x457801
mov ecx, dword [esp + 0x90]
cmp ecx, 2
jl 0x4578bc
mov eax, dword [esp + 0x1f8]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x1f4]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x1e8]
mov dword [esp + 0x64], edx
call fcn.00438140
lea eax, [0x60bfb6]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.004388a0
lea eax, [0x60bfd2]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004388a0
lea eax, [0x60bfca]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00438a20
mov dword [esp + 4], 0
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.004388a0
call fcn.004381b0
call fcn.00438140
call fcn.00438360
call fcn.004381b0
mov eax, dword [esp + 0x38]
inc eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x234]
mov ebp, dword [esp + 0x1bc]
mov edi, dword [esp + 0x30]
mov esi, eax
xor eax, eax
movzx eax, byte [ebp + 0x24]
movzx ebx, byte [esp + 0x1f]
mov ebp, eax
mov dword [esp + 0x38], esi
xor eax, eax
mov esi, dword [esp + 0x224]
jmp 0x456eb6
mov ecx, 0x100000
call fcn.00461150
mov dword [esp + 0x78], esi
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x1e0]
movzx edx, byte [ebp + 2]
mov byte [esp + 0x20], dl
mov ebx, dword [esp + 0x1e4]
mov ecx, dword [ecx]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00450540
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x198]
add ebx, dword [ecx + eax*4 + 0x10]
lea ebp, [ebx + 1]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x1bc]
mov dword [esp + 0x8c], ebp
mov dword [esp], ebx
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xd4]
mov dword [esp + 0x10], ecx
call fcn.00451630
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x457a4f
cmp eax, 0x100000
jae 0x457b28
lea edx, [eax + eax*4]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x198]
lea ebp, [ebx + edx*4]
lea esi, [ebx + edx*4 + 2]
cmp byte [esi], 0x15
jne 0x4579f5
movzx esi, byte [esp + 0x20]
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x4579f5
xchg esi, eax
cmp al, 0x12
xchg esi, eax
je 0x4579f5
xchg esi, eax
cmp al, 0xe
xchg esi, eax
je 0x4579f5
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x78]
jmp 0x45791b
mov esi, dword [esp + 0x78]
test esi, esi
jle 0x457a12
lea eax, [esi - 1]
mov edi, dword [esp + 0x224]
mov esi, eax
mov eax, dword [esp + 0x44]
jmp 0x45791b
mov edi, dword [esp + 0x228]
mov eax, dword [esp + 0x44]
cmp edi, eax
jle 0x457a43
cmp eax, 0x100000
jae 0x457b1e
mov ecx, dword [esp + 0x8c]
mov edi, dword [esp + 0x224]
mov dword [edi + eax*4], ecx
inc eax
jmp 0x45791b
mov edi, dword [esp + 0x224]
jmp 0x45791b
xor eax, eax
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x1bc]
mov edi, dword [esp + 0x30]
movzx esi, byte [esp + 0x20]
mov ebp, dword [esp + 0x8c]
cmp byte [ebx + 0x24], 0x15
jne 0x457aa2
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x457aa2
xchg esi, eax
cmp al, 0x12
xchg esi, eax
je 0x457aa2
xchg esi, eax
cmp al, 0xe
xchg esi, eax
je 0x457aa2
mov esi, dword [esp + 0x224]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x78]
jmp 0x457ae2
mov esi, dword [esp + 0x78]
test esi, esi
jle 0x457aba
lea ebp, [esi - 1]
mov esi, dword [esp + 0x224]
mov ebx, dword [esp + 0x44]
jmp 0x457ae2
mov ebx, dword [esp + 0x44]
cmp ecx, ebx
jle 0x457ad7
cmp ebx, 0x100000
jae 0x457b12
mov esi, dword [esp + 0x224]
mov dword [esi + ebx*4], ebp
inc ebx
jmp 0x457ade
mov esi, dword [esp + 0x224]
mov ebp, dword [esp + 0x78]
mov eax, dword [esp + 0x1bc]
movzx edx, byte [eax + 0x24]
dec ebx
xor eax, eax
mov dword [esp + 0x44], ebx
mov byte [esp + 0x20], dl
mov dword [esp + 0x78], ebp
mov edx, dword [esp + 0x84]
movzx ebx, byte [esp + 0x1f]
movzx ebp, byte [esp + 0x1e]
jmp 0x456d9a
mov eax, ebx
mov ecx, 0x100000
call fcn.00461150
mov ecx, 0x100000
call fcn.00461150
mov ecx, 0x100000
call fcn.00461150
lea eax, [0x61136b]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00436610
mov dword [esp], ebp
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
call fcn.004510c0
mov eax, dword [esp + 8]
mov dword [esp + 0x1cc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], ecx
call fcn.00438140
lea eax, [0x61a5af]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.00438a20
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
call fcn.00438a20
call fcn.00438360
call fcn.004381b0
lea eax, [0x60d700]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00436610
lea eax, [0x61df97]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00436610
lea eax, [0x61dbab]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.00436610
nop
call fcn.0045fcc0
jmp fcn.00456120