Function at 0x449040
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x140]
cmp eax, dword [ecx + 8]
jbe 0x44a6a6
sub esp, 0x1c0
mov eax, dword [esp + 0x1d4]
test eax, eax
jle 0x44a47a
mov ecx, dword [esp + 0x1e0]
test ecx, ecx
jne 0x44a68f
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x1d0]
cmp edx, ebx
jne 0x4490a5
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x4c], edx
je 0x44a679
call fcn.0043af70
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x1c4]
cmp ecx, 0xffffffff
jne 0x44a471
mov edx, dword [esp + 0x1c8]
cmp edx, 0xffffffff
jne 0x44a45c
mov ecx, dword [esp + 0x1d0]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x44a44e
mov ebx, dword [ecx + 0x3c]
xor ebp, ebp
mov dword [esp + 0x74], eax
lea edi, [esp + 0x194]
mov esi, eax
xor eax, eax
call fcn.00453d35
mov dword [esp + 0x19c], ebx
mov dword [esp + 0x1a8], edx
mov ecx, dword [esp + 0x1d0]
mov edi, esi
mov esi, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0xb8]
mov dword [esp + 0x184], ecx
mov ecx, dword [esp + 0x1d8]
test ecx, ecx
je 0x44a42b
xor eax, eax
mov byte [esp + 0x22], al
xor eax, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x180], ebp
test ebx, ebx
jne 0x449160
mov ebx, edx
mov edx, dword [edx]
mov dword [esp + 0x19c], edx
lea edx, [ebx + 4]
mov dword [esp + 0x1a8], edx
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
call fcn.00443c10
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
je 0x44a37b
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], ecx
lea edi, [esp + 0x90]
xor eax, eax
call fcn.00453d10
mov ecx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x1d0]
mov ebp, dword [esp + 0x1d4]
mov esi, dword [esp + 0x184]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x180]
xor edi, edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1f], al
xchg edi, eax
xor edi, edi
xchg edi, eax
mov byte [esp + 0x20], al
xchg edi, eax
xor edi, edi
mov dword [esp + 0x2c], edi
jmp 0x449263
mov dword [esp + 0x194], ebp
mov ebp, dword [esp + 0x16c]
mov dword [esp + 0x198], ebp
mov ebp, dword [esp + 0x1a4]
mov dword [esp + 0x19c], ebp
mov dword [esp + 0x1a4], 0
mov ebp, dword [esp + 0x1ac]
mov dword [esp + 0x1a8], ebp
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1bc], 0
cmp bl, 9
sete bl
mov ebp, dword [esp + 0x1d0]
mov edi, eax
mov byte [esp + 0x1f], bl
xchg esi, eax
mov byte [esp + 0x20], al
xchg esi, eax
mov eax, edx
mov esi, dword [esp + 0x190]
mov ebp, dword [esp + 0x1d4]
mov ebx, dword [esp + 0x1d0]
xor edx, edx
cmp edi, ecx
jge 0x44a370
mov dword [esp + 0x38], edi
mov dword [esp + 0x1d4], ebp
mov ebp, dword [esp + 0x194]
mov edi, dword [esp + 0x198]
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x44a363
mov dword [esp + 0x180], edx
mov ebx, dword [esp + 0x1ac]
test ebx, ebx
je 0x44a20d
mov dword [esp + 0x168], edi
mov ebx, dword [esp + 0x1d0]
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x44a206
cmp dword [edi], ebx
xchg edi, ebx
sete bl
xchg edi, ebx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x190], esi
mov dword [esp + 0x174], ebp
movzx ebx, byte [ebp + 0x20]
cmp bl, 2
jne 0x449fe1
mov dword [esp + 0x1a4], 0
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x17c], edi
mov ebx, dword [esp + 0x1ac]
mov dword [esp + 0x1b0], ebx
add ebx, 0xfffffffc
mov dword [esp + 0x1b0], ebx
mov ebx, dword [esp + 0x1e0]
test ebx, ebx
je 0x449fc4
mov edi, dword [esp + 0x1ac]
mov dword [esp + 0x1b4], edi
je 0x449fbd
cmp dword [ebp + 8], 0x80000000
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [ebp + 8]
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1bc], 0
xchg edi, eax
test al, al
xchg edi, eax
jne 0x449f58
mov esi, dword [esp + 0x19c]
mov dword [esp + 0x1a0], esi
movzx esi, byte [esp + 0x1f]
xchg esi, eax
test al, al
xchg esi, eax
je 0x449f4f
mov edi, dword [esp + 0x194]
mov edx, ebp
mov ebp, dword [edi + 0xc]
test ebp, ebp
je 0x449f3d
mov edi, dword [edi]
lea ebp, [ebp + edi + 1]
mov dword [esp + 0x1a0], ebp
test ebx, ebx
jne 0x449edb
mov ebp, dword [esp + 0x1d8]
test ebp, ebp
je 0x449ec6
mov edi, dword [esp + 0x19c]
mov ebx, dword [esp + 0x38]
test ebx, ebx
jne 0x449eb9
mov ebp, dword [esp + 0x1e8]
test ebp, 2
je 0x449e8b
lea esi, [edi + 1]
cmp byte [edx + 0x23], 4
ja 0x449e68
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x80]
mov ebp, dword [esp + 0x18c]
test ebp, ebp
jne 0x449d1d
movzx ebp, byte [esp + 0x20]
mov edi, dword [esp + 0x1d4]
cmp byte [edx + 0x20], 0x16
jne 0x449436
xchg ebp, eax
cmp al, 0x12
xchg ebp, eax
jne 0x449d00
test edi, edi
jle 0x449cd4
lea ebp, [edi - 1]
movzx esi, byte [edx + 0x20]
dec ebx
mov dword [esp + 0x1d4], ebp
movzx edi, byte [esp + 0x22]
xchg edi, eax
test al, al
xchg edi, eax
je 0x449cc4
mov edi, dword [esp + 0x19c]
test ebx, ebx
jle 0x449ca5
cmp dword [edx], edi
jae 0x44947e
movzx ebp, byte [esp + 0x1f]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x449c9f
cmp byte [edx + 0x23], 4
ja 0x449c87
xor ebp, ebp
mov dword [esp + 0x70], ebx
test ebp, ebp
jne 0x449a04
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x1e8]
test edi, 1
je 0x44999e
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4495e2
movzx esi, byte [edx + 0x20]
mov dword [esp + 0x2c], ebp
inc ebx
cmp byte [edx + 0x20], 0xe
jne 0x4495d4
test eax, eax
jle 0x4495d4
mov edi, dword [esp + 0x190]
mov ebp, dword [edi + eax*4 - 4]
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x1d4]
test ebp, ebp
jne 0x4495c8
mov ebp, dword [esp + 0x1e0]
test ebp, ebp
je 0x44956c
lea ebp, [eax - 1]
mov eax, ebx
movzx ebx, byte [edx + 0x20]
cmp bl, 9
mov edx, ebp
mov ebp, dword [esp + 0x17c]
test ebp, ebp
jne 0x4491df
mov edx, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x22]
test bl, bl
je 0x449568
mov eax, dword [esp + 0x1e0]
test eax, eax
je 0x44955a
cmp edx, ecx
jge 0x44955a
mov eax, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x1d0]
mov ebp, dword [ebx + 0x40]
cmp eax, ebp
jne 0x44a486
mov dword [esp + 0x1ec], edx
add esp, 0x1c0
ret
mov edx, eax
jmp 0x449532
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
mov eax, dword [esp + 0x1d8]
mov dword [esp], eax
movzx edx, byte [esp + 0x22]
mov byte [esp + 4], dl
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044a820
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x174]
mov ebp, dword [esp + 0x1e0]
movzx esi, byte [esp + 0x23]
mov edi, dword [esp + 0x190]
jmp 0x449508
mov ebp, dword [esp + 0x1e0]
jmp 0x449508
mov edi, dword [esp + 0x190]
mov ebp, eax
jmp 0x44950b
mov dword [esp], edx
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
call fcn.00444210
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x150], ecx
mov edx, dword [esp + 0x174]
mov dword [esp], edx
mov ebx, dword [esp + 0x168]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
call fcn.00444480
mov eax, dword [esp + 0xc]
mov dword [esp + 0x160], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0x30]
cmp ebx, 0xf
je 0x449958
mov ebp, dword [esp + 0x150]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x150], ebp
call fcn.0042ee90
mov eax, dword [esp + 0x150]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0042f730
lea eax, [0x4e2df6]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042f730
call fcn.0042ef00
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x18c], eax
xor ecx, ecx
jmp 0x4496e2
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x6c], edx
call fcn.0042ee90
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
call fcn.0042ef00
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x18c]
mov edx, dword [esp + 0x1b8]
shr edx, 2
cmp ecx, edx
jae 0x44974a
cmp ecx, 0xa
jae 0x44972a
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x4496ad
call fcn.0042ee90
lea eax, [0x4e2e24]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042f730
call fcn.0042ef00
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x4c]
jmp 0x4496ad
call fcn.0042ee90
lea eax, [0x4e3178]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042f730
call fcn.0042ef00
call fcn.0042ee90
lea eax, [0x4e2e22]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042f730
call fcn.0042ef00
call fcn.0042ee90
lea eax, [0x4e2e0f]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042f730
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0042f730
lea eax, [0x4e2dff]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042f730
mov eax, dword [esp + 0x44]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042f570
call fcn.0042ef00
mov eax, dword [esp + 0x19c]
mov ecx, dword [esp + 0x174]
mov edx, dword [ecx]
cmp eax, edx
ja 0x44990a
mov eax, dword [esp + 0x1d0]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x449901
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x4498f8
cmp dword [edx + 0x4c], eax
jne 0x4498e9
mov eax, dword [esp + 0x1ac]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x19c]
mov dword [esp + 0x64], edx
call fcn.0042ee90
lea eax, [0x4e2fca]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042f730
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
lea eax, [0x4e2fe6]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042f730
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
lea eax, [0x4e2fde]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042f730
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
call fcn.0042ef00
call fcn.0042ee90
call fcn.0042f0b0
call fcn.0042ef00
mov eax, dword [esp + 0x2c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x1e8]
jmp 0x4494c4
mov edx, dword [esp + 0x74]
cmp edx, 2
jge 0x449808
jmp 0x4498b1
mov edx, dword [esp + 0x74]
cmp edx, 2
jmp 0x4498f0
mov edx, dword [esp + 0x74]
cmp edx, 2
jmp 0x4498f0
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], edx
call fcn.0042ee90
lea eax, [0x4e2e16]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042f730
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
call fcn.0042ef00
mov ecx, dword [esp + 0x174]
jmp 0x4497e2
mov eax, dword [esp + 0x150]
mov dword [esp], eax
lea ecx, [0x4e4ec3]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00402380
movzx eax, byte [esp + 0xc]
test al, al
je 0x44998e
mov ebx, 5
lea ebp, [0x4e3236]
jmp 0x449659
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x150]
jmp 0x449659
movzx eax, byte [edx + 0x20]
mov dword [esp], edx
mov ecx, dword [esp + 0x168]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1d0]
mov dword [esp + 8], ebx
test ebp, ebp
xchg edi, ebx
sete bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0xc], al
xchg edi, eax
mov byte [esp + 0xd], al
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.0044b5b0
movzx esi, byte [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0x1e8]
jmp 0x4494ba
mov dword [esp + 0x18c], ebp
jmp 0x449a3d
mov ebx, dword [esp + 0x194]
lea eax, [eax + eax*4]
mov ebp, eax
shl eax, 2
mov esi, ecx
mov ecx, dword [esp + 0x18c]
movzx eax, byte [ecx + eax + 2]
mov edi, dword [ecx + ebp*4 + 0x10]
add edi, dword [ebx]
mov edx, dword [esp + 0x174]
mov dword [esp + 0x2c], esi
mov esi, eax
xchg esi, eax
mov byte [esp + 0x20], al
xchg esi, eax
mov dword [esp + 0x24], edi
mov dword [esp], edx
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
call fcn.00444710
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x449c5f
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x1e8]
test edx, 1
je 0x449be8
mov ecx, 1
test cl, cl
jne 0x449aae
mov ecx, dword [esp + 0x2c]
cmp eax, 0x100000
jb 0x449a0d
jmp 0x44a60f
cmp eax, 0x100000
jae 0x44a619
lea ecx, [eax + eax*4]
mov edx, dword [esp + 0x18c]
mov ecx, dword [edx + ecx*4 + 0xc]
mov ebx, dword [esp + 0x174]
mov dword [esp], ebx
mov ebp, dword [esp + 0x168]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00444290
mov eax, dword [esp + 0xc]
mov dword [esp + 0x154], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x174]
mov dword [esp], edx
mov ebx, dword [esp + 0x168]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.00444480
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x164], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x50], edx
call fcn.0042ee90
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0042f730
lea eax, [0x4e32cc]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0042f730
call fcn.0042ef00
call fcn.0042ee90
lea eax, [0x4e2e0f]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042f730
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0042f730
lea eax, [0x4e2dff]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042f730
mov eax, dword [esp + 0x40]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042f570
call fcn.0042f0b0
call fcn.0042ef00
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1e8]
jmp 0x449a9e
cmp eax, 0x100000
jae 0x44a623
lea ecx, [eax + eax*4]
shl ecx, 2
mov edx, dword [esp + 0x18c]
movzx ecx, byte [edx + ecx + 2]
mov ebx, dword [esp + 0x174]
mov dword [esp], ebx
mov ebp, dword [esp + 0x168]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1d0]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov byte [esp + 0xd], cl
movzx ecx, byte [esp + 0x20]
mov byte [esp + 0xe], cl
call fcn.0044b5b0
movzx ecx, byte [esp + 0x10]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1e8]
jmp 0x449a96
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x70]
movzx esi, byte [esp + 0x20]
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x2c]
jmp 0x44949a
lea ebp, [edx + 0x23]
mov ecx, dword [edx + 0x1c]
lea ecx, [ebp + ecx*4 + 0x11]
mov ebp, dword [ecx]
mov ecx, dword [esp + 0x1dc]
jmp 0x44948a
dec edi
jmp 0x44947e
mov ebp, dword [esp + 0x1e8]
test ebp, 2
jne 0x44947e
mov ebp, dword [esp + 0x1d4]
jmp 0x44946b
mov edi, dword [esp + 0x1e8]
mov ebp, dword [esp + 0x2c]
jmp 0x4494c8
cmp ebx, ecx
jge 0x449cf7
cmp ebx, 0x100000
jae 0x44a62d
mov ebp, dword [esp + 0x1d8]
mov dword [ebp + ebx*4], esi
inc ebx
mov ebp, edi
jmp 0x449441
mov ebp, dword [esp + 0x1d8]
jmp 0x449cf0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x449436
xchg ebp, eax
cmp al, 0x13
xchg ebp, eax
je 0x449436
mov ebp, edi
jmp 0x449441
mov dword [esp + 0x78], eax
movzx eax, byte [esp + 0x20]
mov byte [esp + 0x21], al
jmp 0x449d5d
mov esi, eax
mov eax, dword [esp + 0x194]
mov edi, ecx
movzx ecx, byte [ebp + edx + 2]
mov ebp, dword [ebp + ebx*4 + 0x10]
add ebp, dword [eax]
lea eax, [ebp + 1]
mov edx, dword [esp + 0x174]
mov byte [esp + 0x21], cl
mov ebx, edi
mov dword [esp + 0x1d4], esi
mov edi, ebp
mov esi, eax
mov dword [esp + 0x28], esi
mov dword [esp + 0x70], ebx
mov dword [esp], edx
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
lea ecx, [esp + 0x90]
mov dword [esp + 0x10], ecx
call fcn.00444710
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x449e3d
cmp eax, 0x100000
jae 0x44a643
lea edx, [eax + eax*4]
mov ebx, edx
shl edx, 2
mov ebp, dword [esp + 0x18c]
movzx esi, byte [ebp + edx + 2]
xchg esi, eax
cmp al, 0x16
xchg esi, eax
jne 0x449dcd
movzx esi, byte [esp + 0x21]
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x449e1f
mov esi, dword [esp + 0x1d4]
test esi, esi
jle 0x449de4
lea eax, [esi - 1]
mov ecx, dword [esp + 0x70]
jmp 0x449d2c
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x1dc]
cmp eax, edi
jge 0x449e16
cmp eax, 0x100000
jae 0x44a639
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x1d8]
mov dword [edi + eax*4], ecx
inc eax
mov ecx, eax
mov eax, esi
jmp 0x449d2c
mov edi, dword [esp + 0x1d8]
jmp 0x449e0d
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x449dcd
xchg esi, eax
cmp al, 0x13
xchg esi, eax
je 0x449dcd
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1d4]
jmp 0x449d2c
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x174]
movzx ebp, byte [esp + 0x21]
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x1d4]
jmp 0x449425
lea eax, [edx + 0x23]
mov ebp, dword [edx + 0x1c]
lea eax, [eax + ebp*4 + 0x11]
mov eax, dword [eax]
mov ebp, dword [esp + 0x1e8]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x5c]
jmp 0x44940a
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4493e6
cmp dword [edx], edi
je 0x4493e6
lea esi, [edi - 1]
mov dword [esp + 0x88], eax
mov eax, edi
mov edi, esi
mov esi, eax
mov eax, dword [esp + 0x88]
jmp 0x4493e9
xchg esi, eax
test al, al
xchg esi, eax
mov ebp, dword [esp + 0x1e8]
jmp 0x449e8f
mov ebx, dword [esp + 0x38]
movzx esi, byte [esp + 0x20]
mov ebp, dword [esp + 0x1d4]
jmp 0x449446
lea eax, [esp + 0x194]
mov dword [esp], eax
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 4], ecx
mov ebp, dword [ebx]
mov edx, ebx
call ebp
movzx eax, byte [esp + 8]
test al, al
je 0x449f2b
mov ebp, dword [esp + 0x1d8]
test ebp, ebp
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x174]
mov ebx, dword [esp + 0x1e0]
movzx esi, byte [esp + 0x1f]
jmp 0x4493ba
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1ec], eax
add esp, 0x1c0
ret
mov dword [esp + 0x1a0], 0
test ebx, ebx
jmp 0x4493ab
test ebx, ebx
mov edx, ebp
jmp 0x4493ab
lea eax, [esp + 0x194]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x168]
mov dword [esp + 8], ecx
test ebx, ebx
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov dword [esp + 0x10], edx
call fcn.0044a6b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x1e0]
mov ebp, dword [esp + 0x174]
jmp 0x44936b
xor edi, edi
jmp 0x44934c
movzx edi, byte [esp + 0x22]
xchg edi, eax
test al, al
xchg edi, eax
je 0x44936b
test ebx, ebx
mov edi, dword [esp + 0x17c]
jmp 0x44932a
cmp bl, 6
je 0x4492e6
cmp bl, 4
je 0x4492e6
cmp bl, 5
je 0x4492e6
cmp bl, 7
je 0x4492e6
cmp bl, 0x10
je 0x4492e6
xchg edi, eax
test al, al
xchg edi, eax
je 0x44a01d
cmp bl, 8
je 0x4492e6
mov ebx, dword [esp + 0x1a4]
test ebx, ebx
jne 0x44a1ff
mov ebx, dword [esp + 0x1ac]
add ebx, 0xfffffffc
mov edi, ebx
mov ebx, dword [ebx]
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
call fcn.00443c10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x44a089
mov edx, dword [esp + 0x180]
mov ebp, dword [esp + 0x174]
mov esi, dword [esp + 0x190]
mov ebx, eax
mov edi, ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1dc]
jmp 0x4492f5
movzx ebx, byte [esp + 0x22]
test bl, bl
je 0x44a1ef
mov ebp, dword [esp + 0x1d0]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x88]
xchg esi, eax
test al, al
xchg esi, eax
je 0x44a1e6
mov esi, dword [esp + 0x174]
cmp byte [esi + 0x20], 9
jne 0x44a1df
xor edx, edx
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], ecx
mov edi, dword [esp + 0x1e0]
test edi, edi
jne 0x44a0ee
test dl, dl
jne 0x44a0ee
test edi, edi
je 0x44a060
jmp 0x44a64d
mov dword [esp], esi
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
call fcn.00444210
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x188], ecx
mov edx, dword [esp + 0x1a4]
mov dword [esp + 0x6c], edx
call fcn.0042ee90
lea eax, [0x4e9de4]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0042f730
mov eax, dword [esp + 0x188]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.0042f730
lea eax, [0x4e45cb]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.0042f730
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
call fcn.0042f0b0
call fcn.0042ef00
mov eax, dword [esp + 0x1d0]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x194]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
call fcn.0044bd30
mov edi, dword [esp + 0x1e0]
test edi, edi
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
movzx ebx, byte [esp + 0x22]
mov ebp, dword [esp + 0x1d0]
mov esi, dword [esp + 0x174]
jmp 0x44a0e3
mov edx, ebx
jmp 0x44a0c4
mov esi, dword [esp + 0x174]
jmp 0x44a1df
mov ebp, dword [esp + 0x1d0]
mov esi, dword [esp + 0x174]
jmp 0x44a1df
xor edi, edi
jmp 0x44a041
xor edi, edi
jmp 0x4492c7
mov ebx, dword [esp + 0x1e8]
test ebx, 4
je 0x44a35a
mov ecx, dword [esp + 0x1d0]
mov edx, dword [ecx + 0x18]
cmp dword [edx], ecx
jne 0x44a351
mov edx, dword [edx + 0x4c]
test edx, edx
je 0x44a351
movzx ebx, byte [ebp + 0x20]
cmp bl, 5
je 0x44a2fb
cmp bl, 0xd
jne 0x44a2f2
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x1a8], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
mov dword [esp + 0x190], eax
mov dword [esp + 0x5c], edx
mov dword [esp + 0x170], edi
mov dword [esp + 0x178], ebp
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x19c]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x90]
mov dword [esp + 0xc], ecx
call fcn.004444e0
mov eax, dword [esp + 0x1a8]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1ac], eax
add eax, 4
mov dword [esp + 0x1ac], eax
mov ecx, dword [esp + 0x1dc]
mov edx, dword [esp + 0x180]
mov edi, dword [esp + 0x170]
mov ebp, dword [esp + 0x178]
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x190]
jmp 0x4492a5
mov edx, eax
mov eax, esi
jmp 0x44a26f
mov eax, dword [edx + 0x20]
mov dword [esp + 0x19c], eax
mov dword [esp], eax
call fcn.00443c10
mov ebp, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esp + 0x194], ebp
mov dword [esp + 0x198], edi
mov ecx, dword [esp + 0x1d0]
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x1a8], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
jmp 0x44a26f
mov edx, eax
mov eax, esi
jmp 0x44a26f
mov ecx, dword [esp + 0x1d0]
jmp 0x44a351
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
jmp 0x449529
mov edx, dword [esp + 0x2c]
mov eax, edi
jmp 0x449529
mov eax, dword [esp + 0x1e0]
test eax, eax
je 0x44a41a
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x6c], eax
call fcn.0042ee90
lea eax, [0x4e642a]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042f730
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
call fcn.0042f0b0
call fcn.0042ef00
mov eax, dword [esp + 0x1d0]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x194]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0044bd30
mov eax, dword [esp + 0x1e0]
test eax, eax
jne 0x44a663
mov dword [esp + 0x1ec], 0
add esp, 0x1c0
ret
movzx ecx, byte [esp + 0x22]
test cl, cl
jne 0x44a38a
test eax, eax
jmp 0x44a402
mov edi, dword [esp + 0x1e0]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x74]
mov byte [esp + 0x22], cl
mov ecx, dword [esp + 0x1d8]
jmp 0x44913c
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
jmp 0x4490e7
mov ecx, dword [esp + 0x1d0]
mov ebx, dword [esp + 0x1c4]
xor ebp, ebp
jmp 0x4490e7
mov edx, dword [esp + 0x1c8]
jmp 0x44a45c
mov ecx, dword [esp + 0x1e0]
jmp 0x449081
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x38], edx
mov eax, dword [ebx + 0x54]
mov dword [esp + 0x60], eax
mov ecx, dword [ebx + 0x50]
mov dword [esp + 0x74], ecx
call fcn.0042ee90
lea eax, [0x4e3e50]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042f730
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0042f570
lea eax, [0x4e3f9c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0042f730
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
lea eax, [0x4e313c]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042f730
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
call fcn.0042f0b0
call fcn.0042ef00
mov eax, dword [esp + 0x1d0]
mov ecx, dword [eax]
mov dword [esp + 0x6c], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x68], eax
call fcn.0042ee90
lea eax, [0x4e37c7]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.0042f730
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
lea eax, [0x4e2dfb]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042f730
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042f600
lea eax, [0x4e306e]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042f730
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042f570
lea eax, [0x4e3128]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042f730
mov eax, dword [esp + 0x1dc]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042f570
call fcn.0042f0b0
call fcn.0042ef00
lea eax, [0x4ea054]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0042da20
mov ecx, 0x100000
call fcn.00453bd0
mov ecx, 0x100000
call fcn.00453bd0
mov ecx, 0x100000
call fcn.00453bd0
mov eax, ebx
mov ecx, 0x100000
call fcn.00453bd0
mov ecx, 0x100000
call fcn.00453bd0
mov ecx, 0x100000
call fcn.00453bd0
lea eax, [0x4e56bf]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0042da20
lea eax, [0x4e3e96]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042da20
lea eax, [0x4ec176]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.0042da20
lea eax, [0x4ebfbb]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.0042da20
nop
call fcn.00452310
jmp fcn.00449040