Function at 0x446c10
Capabilities:
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x66486e
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
mov eax, dword [0x702ca8]
xor eax, esp
mov dword [esp + 0xa4], eax
push ebx
push ebp
push esi
mov eax, dword [0x702ca8]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov eax, dword [edi + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
xor ebp, ebp
push ebp
push eax
call edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x18
mov ebx, 0xf
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], ebp
push 0x6c25bc
mov dword [esp + 0x70], eax
mov byte [ecx + 4], 0
call fcn.004027b0
lea eax, [esp + 0x30]
push eax
call fcn.00488db0
add esp, 0x20
mov esi, 0x10
mov dword [esp + 0xc0], ebp
cmp dword [eax + 0x18], esi
jb 0x446ca3
mov eax, dword [eax + 4]
jmp 0x446ca6
add eax, 4
push eax
push 0x6c25d8
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 8
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], ebp
push 0x6ba1c0
mov byte [ecx + 4], 0
call fcn.004027b0
mov ecx, dword [0x717c9c]
mov edx, dword [ecx + 0x10]
push edx
call fcn.0045bb10
add esp, 0x28
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x2c], esi
jb 0x446cfb
mov eax, dword [esp + 0x18]
push eax
call fcn.0060445c
add esp, 4
cmp dword [esp + 0x4c], ebp
jbe 0x446e22
mov eax, dword [edi + 0x40]
mov ecx, dword [eax]
lea edx, [esp + 0x50]
push edx
push ebp
push 0
push eax
mov eax, dword [ecx + 0x1c]
call eax
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
push ecx
lea esi, [esp + 0x34]
call fcn.0044ad20
mov dword [esp + 0xc4], 1
cmp dword [eax + 0x18], 0x10
jb 0x446d40
mov eax, dword [eax + 4]
jmp 0x446d43
add eax, 4
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x58]
push edx
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x12
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], 0
push 0x6c25f0
mov byte [ecx + 4], 0
call fcn.004027b0
lea ecx, [esp + 0x40]
push ecx
call fcn.00488db0
add esp, 0x30
mov esi, 0x10
mov byte [esp + 0xc0], 2
cmp dword [eax + 0x18], esi
jb 0x446d95
mov eax, dword [eax + 4]
jmp 0x446d98
add eax, 4
push eax
push 0x6c25d8
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 8
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], 0
push 0x6ba1c0
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
cmp dword [esp + 0x2c], esi
jb 0x446de6
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x48], esi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
jb 0x446e15
mov edx, dword [esp + 0x34]
push edx
call fcn.0060445c
add esp, 4
add ebp, 1
cmp ebp, dword [esp + 0x4c]
jb 0x446d05
xor ebp, ebp
push ebp
push 0x6ba06e
lea ecx, [esp + 0xa0]
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xb4], ebp
mov byte [esp + 0xa4], 0
call fcn.004027b0
push ebp
mov esi, 3
mov dword [esp + 0xc4], esi
push 0x6ba06e
lea ecx, [esp + 0x84]
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x98], ebp
mov byte [esp + 0x88], 0
call fcn.004027b0
mov byte [esp + 0xc0], 4
cmp dword [edi + 0x44], 1
jne 0x446ea0
push ebx
push 0x6c2604
lea ecx, [esp + 0xa0]
call fcn.00402320
cmp dword [edi + 0x44], 2
jne 0x446eb8
push ebx
push 0x6c2614
lea ecx, [esp + 0xa0]
call fcn.00402320
cmp dword [edi + 0x44], esi
jne 0x446ed0
push 0xe
push 0x6c2624
lea ecx, [esp + 0xa0]
call fcn.00402320
cmp dword [esp + 0xb0], 0x10
mov eax, dword [esp + 0x9c]
jae 0x446ee8
lea eax, [esp + 0x9c]
push eax
push 0x6c2634
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], 0
push 0x6c2640
mov byte [ecx + 4], 0
call fcn.004027b0
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.0045bb10
mov esi, dword [esp + 0xbc]
mov ebp, dword [esp + 0xa8]
add esp, 0x28
cmp esi, 0x10
mov eax, ebp
jae 0x446f3e
lea eax, [esp + 0x80]
push 0
push 0x6ba06e
push eax
call fcn.00403fd0
add esp, 0xc
test eax, eax
jne 0x446f60
cmp dword [esp + 0x90], eax
setne al
test eax, eax
je 0x446fa9
cmp esi, 0x10
mov eax, ebp
jae 0x446f6e
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], 0
push 0x6c2658
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
xor esi, esi
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 5
call fcn.00402610
mov ebp, 0x10
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x447003
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 6
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x447056
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
mov edx, dword [edi + 0x48]
push edx
push 0x6c2660
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 7
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], esi
push 0x6c2670
mov byte [ecx + 4], 0
call fcn.004027b0
mov eax, dword [0x717c9c]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.0045bb10
add esp, 0x28
test dword [edi + 0x4c], 0x20000
push 0x16
push 0x6c2678
lea ecx, [esp + 0xa0]
jne 0x4470ad
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], ebp
mov eax, dword [esp + 0x9c]
jae 0x4470c9
lea eax, [esp + 0x9c]
push eax
push 0x6c2690
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], esi
push 0x6c2640
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push esi
push 0x6ba06e
push ecx
push esi
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x44716d
cmp dword [esp + 0x94], ebp
mov eax, dword [esp + 0x80]
jae 0x447136
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], esi
push 0x6c2658
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 7
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4471c0
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 8
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x447213
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x50], 0x100000
push 0x1b
push 0x6c2698
lea ecx, [esp + 0xa0]
jne 0x447231
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x50], 0x80000
push 0x1b
push 0x6c26b4
lea ecx, [esp + 0xa0]
jne 0x447254
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x50], 0x20000
push 0x19
push 0x6c26d0
lea ecx, [esp + 0xa0]
jne 0x447277
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x50], 2
push 0x1b
push 0x6c26ec
lea ecx, [esp + 0xa0]
jne 0x447297
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], ebp
mov eax, dword [esp + 0x9c]
jae 0x4472b3
lea eax, [esp + 0x9c]
push eax
push 0x6c2708
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], esi
push 0x6c2640
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push esi
push 0x6ba06e
push ecx
push esi
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x447357
cmp dword [esp + 0x94], ebp
mov eax, dword [esp + 0x80]
jae 0x447320
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], esi
push 0x6c2658
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 9
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4473aa
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0xa
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4473fd
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x58], 0x80000000
push 0x1e
push 0x6c2710
lea ecx, [esp + 0xa0]
jne 0x44741b
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x58], 1
push 0x18
push 0x6c2730
lea ecx, [esp + 0xa0]
jne 0x44743b
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x58], 2
push 0x18
push 0x6c274c
lea ecx, [esp + 0xa0]
jne 0x44745b
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x58], 4
push 0x1a
push 0x6c2768
lea ecx, [esp + 0xa0]
jne 0x44747b
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x58], 8
push 0x19
push 0x6c2784
lea ecx, [esp + 0xa0]
jne 0x44749b
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], ebp
mov eax, dword [esp + 0x9c]
jae 0x4474b7
lea eax, [esp + 0x9c]
push eax
push 0x6c27a0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], esi
push 0x6c2640
mov byte [ecx + 4], 0
call fcn.004027b0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push esi
push 0x6ba06e
push ecx
push esi
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x44754f
cmp dword [esp + 0x94], ebp
mov eax, dword [esp + 0x80]
jae 0x447524
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 0xb
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4475a2
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0xc
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4475f5
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test byte [edi + 0x5c], 1
push 0x14
push 0x6c27b8
lea ecx, [esp + 0xa0]
jne 0x447610
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x5c], 2
push 0x15
push 0x6c27d0
lea ecx, [esp + 0xa0]
jne 0x447630
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], ebp
mov eax, dword [esp + 0x9c]
jae 0x44764c
lea eax, [esp + 0x9c]
push eax
push 0x6c27e8
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2640
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push esi
push 0x6ba06e
push ecx
push esi
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x4476d8
cmp dword [esp + 0x94], ebp
mov eax, dword [esp + 0x80]
jae 0x4476ad
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 0xd
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x44772b
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push esi
push 0x6ba06e
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.004027b0
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0xe
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x44777e
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x60], 0x20000
push 0x1f
push 0x6c27f4
lea ecx, [esp + 0xa0]
jne 0x44779c
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x800
push 0x1e
push 0x6c2814
lea ecx, [esp + 0xa0]
jne 0x4477bf
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x400
push 0x1c
push 0x6c2834
lea ecx, [esp + 0xa0]
jne 0x4477e2
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x60], 0x10
push 0x1f
push 0x6c2854
lea ecx, [esp + 0xa0]
jne 0x447802
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x60], 0x20
push 0x1e
push 0x6c2874
lea ecx, [esp + 0xa0]
jne 0x447822
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x80000
push 0x1b
push 0x6c2894
lea ecx, [esp + 0xa0]
jne 0x447845
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x10000
push 0x1f
push 0x6c28b0
lea ecx, [esp + 0xa0]
jne 0x447868
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x1000000
push 0x14
push 0x6c28d0
lea ecx, [esp + 0xa0]
jne 0x44788b
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x100000
push 0x16
push 0x6c28e8
lea ecx, [esp + 0xa0]
jne 0x4478ae
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x200000
push 0x1c
push 0x6c2900
lea ecx, [esp + 0xa0]
jne 0x4478d1
lea ecx, [esp + 0x84]
call fcn.00402320
mov esi, 0x400000
test dword [edi + 0x60], esi
push 0x15
push 0x6c2920
lea ecx, [esp + 0xa0]
jne 0x4478f5
lea ecx, [esp + 0x84]
call fcn.00402320
mov ebp, 0x800000
test dword [edi + 0x60], ebp
push 0x1d
push 0x6c2938
lea ecx, [esp + 0xa0]
jne 0x447919
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x4000
push 0x23
push 0x6c2958
lea ecx, [esp + 0xa0]
jne 0x44793c
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x1000
push 0x21
push 0x6c297c
lea ecx, [esp + 0xa0]
jne 0x44795f
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x100
push 0x1f
push 0x6c29a0
lea ecx, [esp + 0xa0]
jne 0x447982
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x60], 0x200
push 0x1e
push 0x6c29c0
lea ecx, [esp + 0xa0]
jne 0x4479a5
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x60], 0x40
push 0x20
push 0x6c29e0
lea ecx, [esp + 0xa0]
jne 0x4479c5
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x60], 0x80
push 0x1f
push 0x6c2a04
lea ecx, [esp + 0xa0]
jne 0x4479e5
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], 0x10
mov eax, dword [esp + 0x9c]
jae 0x447a02
lea eax, [esp + 0x9c]
push eax
push 0x6c2a24
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2640
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push 0
push 0x6ba06e
push ecx
push 0
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x447a91
cmp dword [esp + 0x94], 0x10
mov eax, dword [esp + 0x80]
jae 0x447a66
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], bl
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], 0x10
jb 0x447ad7
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0x10
call fcn.00402610
mov ebx, 0x10
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebx
jb 0x447b22
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x64], 0x800
push 0x15
push 0x6c2a2c
lea ecx, [esp + 0xa0]
jne 0x447b40
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x64], 0x100
push 0x23
push 0x6c2a44
lea ecx, [esp + 0xa0]
jne 0x447b63
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x64], 0x200
push 0x19
push 0x6c2a68
lea ecx, [esp + 0xa0]
jne 0x447b86
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x64], 0x80
push 0x1e
push 0x6c2a84
lea ecx, [esp + 0xa0]
jne 0x447ba6
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x64], 0x40
push 0x15
push 0x6c2aa4
lea ecx, [esp + 0xa0]
jne 0x447bc6
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x64], 0x20
push 0x14
push 0x6c2abc
lea ecx, [esp + 0xa0]
jne 0x447be6
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x64], bl
push 0x16
push 0x6c2ad4
lea ecx, [esp + 0xa0]
jne 0x447c05
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x64], 4
push 0x1c
push 0x6c2aec
lea ecx, [esp + 0xa0]
jne 0x447c25
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x64], 2
push 0x13
push 0x6c2b0c
lea ecx, [esp + 0xa0]
jne 0x447c45
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x64], 0x400
push 0x18
push 0x6c2b20
lea ecx, [esp + 0xa0]
jne 0x447c68
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], ebx
mov eax, dword [esp + 0x9c]
jae 0x447c84
lea eax, [esp + 0x9c]
push eax
push 0x6c2b3c
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2640
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push 0
push 0x6ba06e
push ecx
push 0
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x447d12
cmp dword [esp + 0x94], ebx
mov eax, dword [esp + 0x80]
jae 0x447ce7
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 0x11
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebx
jb 0x447d58
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0x12
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebx
jb 0x447d9e
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x68], 0x20000
push 0x1a
push 0x6c2b50
lea ecx, [esp + 0xa0]
jne 0x447dbc
lea ecx, [esp + 0x84]
call fcn.00402320
mov ebx, 0x1000
test dword [edi + 0x68], ebx
push 0x1e
push 0x6c2b6c
lea ecx, [esp + 0xa0]
jne 0x447de0
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], esi
push 0x20
push 0x6c2b8c
lea ecx, [esp + 0xa0]
jne 0x447dff
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x68], 1
push 0x16
push 0x6c2bb0
lea ecx, [esp + 0xa0]
jne 0x447e1f
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x10000
push 0x18
push 0x6c2bc8
lea ecx, [esp + 0xa0]
jne 0x447e42
lea ecx, [esp + 0x84]
call fcn.00402320
mov esi, 0x100
test dword [edi + 0x68], esi
push 0x18
push 0x6c2be4
lea ecx, [esp + 0xa0]
jne 0x447e66
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x68], 0x80
push 0x19
push 0x6c2c00
lea ecx, [esp + 0xa0]
jne 0x447e86
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x2000
push 0x1d
push 0x6c2c1c
lea ecx, [esp + 0xa0]
jne 0x447ea9
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x68], 8
push 0x13
push 0x6c2c3c
lea ecx, [esp + 0xa0]
jne 0x447ec9
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], ebp
push 0x25
push 0x6c2c50
lea ecx, [esp + 0xa0]
jne 0x447ee8
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x40000
push 0x17
push 0x6c2c78
lea ecx, [esp + 0xa0]
jne 0x447f0b
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x100000
push 0x14
push 0x6c2c90
lea ecx, [esp + 0xa0]
jne 0x447f2e
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x4000
push 0x15
push 0x6c2ca8
lea ecx, [esp + 0xa0]
jne 0x447f51
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x8000
push 0x1e
push 0x6c2cc0
lea ecx, [esp + 0xa0]
jne 0x447f74
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x68], 0x200000
push 0x14
push 0x6c2ce0
lea ecx, [esp + 0xa0]
jne 0x447f97
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x68], 0x10
push 0x15
push 0x6c2cf8
lea ecx, [esp + 0xa0]
jne 0x447fb7
lea ecx, [esp + 0x84]
call fcn.00402320
mov eax, dword [esp + 0x9c]
mov ebp, 0x10
cmp dword [esp + 0xb0], ebp
jae 0x447fd8
lea eax, [esp + 0x9c]
push eax
push 0x6c2d10
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2640
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
mov ecx, dword [esp + 0xb8]
add esp, 0x28
push 0
push 0x6ba06e
push ecx
push 0
lea ecx, [esp + 0x8c]
call fcn.00403f60
test eax, eax
je 0x448066
cmp dword [esp + 0x94], ebp
mov eax, dword [esp + 0x80]
jae 0x44803b
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 0x13
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4480ac
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0x14
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4480f2
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test byte [edi + 0x6c], 0x80
push 0x13
push 0x6c2d1c
lea ecx, [esp + 0xa0]
jne 0x44810d
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 4
push 0x12
push 0x6c2d30
lea ecx, [esp + 0xa0]
jne 0x44812d
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 0x10
push 0x14
push 0x6c2d44
lea ecx, [esp + 0xa0]
jne 0x44814d
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 0x40
push 0x19
push 0x6c2d5c
lea ecx, [esp + 0xa0]
jne 0x44816d
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 2
push 0x11
push 0x6c2d78
lea ecx, [esp + 0xa0]
jne 0x44818d
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 8
push 0x16
push 0x6c2d8c
lea ecx, [esp + 0xa0]
jne 0x4481ad
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 1
push 0x12
push 0x6c2da4
lea ecx, [esp + 0xa0]
jne 0x4481cd
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x6c], 0x20
push 0x15
push 0x6c2db8
lea ecx, [esp + 0xa0]
jne 0x4481ed
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], ebp
mov eax, dword [esp + 0x9c]
jae 0x448209
lea eax, [esp + 0x9c]
push eax
push 0x6c2dd0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2640
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
lea ecx, [esp + 0xa4]
push 0x6ba06e
push ecx
call fcn.0040a820
add esp, 0x30
test al, al
je 0x44828c
cmp dword [esp + 0x94], ebp
mov eax, dword [esp + 0x80]
jae 0x448261
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 0x15
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x4482d2
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0x16
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], ebp
jb 0x448318
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x70], ebx
push 0x1e
push 0x6c2ddc
lea ecx, [esp + 0xa0]
jne 0x448332
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x70], 0x800
push 0x1b
push 0x6c2dfc
lea ecx, [esp + 0xa0]
jne 0x448355
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 0x40
push 0x18
push 0x6c2e18
lea ecx, [esp + 0xa0]
jne 0x448375
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x70], esi
push 0x18
push 0x6c2e34
lea ecx, [esp + 0xa0]
jne 0x448394
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 0x80
push 0x1b
push 0x6c2e50
lea ecx, [esp + 0xa0]
jne 0x4483b4
lea ecx, [esp + 0x84]
call fcn.00402320
mov ebp, 0x200
test dword [edi + 0x70], ebp
push 0x1b
push 0x6c2e6c
lea ecx, [esp + 0xa0]
jne 0x4483d8
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 0x20
push 0x1a
push 0x6c2e88
lea ecx, [esp + 0xa0]
jne 0x4483f8
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 8
push 0x1a
push 0x6c2ea4
lea ecx, [esp + 0xa0]
jne 0x448418
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 2
push 0x12
push 0x6c2ec0
lea ecx, [esp + 0xa0]
jne 0x448438
lea ecx, [esp + 0x84]
add byte [eax], al
sahf
sti
push esi
inc edi
jo 0x448451
push 0x17
push 0x6c2ed4
lea ecx, [esp + 0xa0]
jne 0x448458
lea ecx, [esp + 0x84]
call fcn.00402320
mov esi, 0x400
test dword [edi + 0x70], esi
push 0x1a
push 0x6c2eec
lea ecx, [esp + 0xa0]
jne 0x44847c
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 4
push 0x17
push 0x6c2f08
lea ecx, [esp + 0xa0]
jne 0x44849c
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x70], 1
push 0x13
push 0x6c2f20
lea ecx, [esp + 0xa0]
jne 0x4484bc
lea ecx, [esp + 0x84]
call fcn.00402320
cmp dword [esp + 0xb0], 0x10
mov eax, dword [esp + 0x9c]
jae 0x4484d9
lea eax, [esp + 0x9c]
push eax
push 0x6c2f34
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2640
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
lea ecx, [esp + 0xa4]
push 0x6ba06e
push ecx
call fcn.0040a820
add esp, 0x30
test al, al
je 0x44855d
cmp dword [esp + 0x94], 0x10
mov eax, dword [esp + 0x80]
jae 0x448532
lea eax, [esp + 0x80]
push eax
push 0x6c2648
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x6c2658
call fcn.00402ee0
mov edx, dword [0x717c9c]
mov eax, dword [edx + 0x10]
push eax
call fcn.0045bb10
add esp, 0x28
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 0x17
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], 0x10
jb 0x4485a4
mov edx, dword [esp + 0x18]
push edx
call fcn.0060445c
add esp, 4
push 0x6ba06e
lea ecx, [esp + 0x18]
call fcn.00402ee0
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xcc], 0x18
call fcn.00402610
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x2c], 0x10
jb 0x4485eb
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0060445c
add esp, 4
test dword [edi + 0x74], ebx
push 0x1e
push 0x6c2ddc
lea ecx, [esp + 0xa0]
jne 0x448605
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x74], 0x800
push 0x1b
push 0x6c2dfc
lea ecx, [esp + 0xa0]
jne 0x448628
lea ecx, [esp + 0x84]
call fcn.00402320
test byte [edi + 0x74], 0x40
push 0x18
push 0x6c2e18
lea ecx, [esp + 0xa0]
jne 0x448648
lea ecx, [esp + 0x84]
call fcn.00402320
test dword [edi + 0x74], 0x100
push 0x18
push 0x6c2e34
lea ecx, [esp + 0xa0]
jne 0x44866b