Function at 0x44ce30
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48bfb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xdac
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
xor ecx, ecx
push ebx
xor ebx, ebx
cmp byte [eax], 2
mov eax, dword [eax + 8]
setne cl
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp + 0xc]
push esi
push edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], 0x49588a
dec ecx
and ecx, dword [0x4a09d8]
add edx, edx
mov edi, dword [eax + edx*8 + 0xc]
lea eax, [eax + edx*8 + 0xc]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x38], ebx
cmp dword [edi + 8], 0x3d
mov dword [ebp - 0x24], edi
je 0x44e736
mov eax, 0x10
call fcn.00488480
mov ecx, dword [edi]
mov esi, esp
mov dword [esi], ecx
mov edx, dword [edi + 4]
mov dword [esi + 4], edx
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
mov ecx, dword [edi + 0xc]
mov dword [esi + 0xc], ecx
mov eax, dword [esi + 8]
cmp eax, 7
jge 0x44d338
cmp eax, 6
jne 0x44dd3a
mov eax, dword [esi + 4]
test eax, eax
je 0x44d10d
mov ecx, dword [esi]
xor edi, edi
mov dword [esi], 0x49588a
mov dword [esi + 8], edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
cmp dword [ecx], edi
je 0x44cff7
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp eax, dword [ecx]
jae 0x44cf21
cmp edi, 0xfd
jae 0x44cf2b
mov dl, byte [eax]
mov byte [ebp + edi - 0x194], dl
inc eax
inc edi
cmp eax, dword [ecx]
jb 0x44cf07
mov dword [ebp - 0x14], eax
cmp edi, 0xfd
jb 0x44cf39
jmp 0x44cf2e
mov dword [ebp - 0x14], eax
cmp eax, dword [ecx]
jb 0x44d028
mov ecx, dword [ebp - 0x18]
mov ebx, dword [ecx + 4]
movzx eax, byte [ebx + 0x17]
cmp eax, 3
ja case.default.0x44cf45
jmp dword [eax*4 + 0x44eaa4]
mov eax, ebx
call fcn.00401150
cmp dword [0x4a0b8c], 0
jne 0x44cf8d
cmp dword [ebx + 0xc], 0
jne 0x44cf8d
mov ecx, dword [ebx + 0x18]
push 0
lea eax, [ebp - 0x79]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x44cf83
mov dword [0x4a3b6c], 0
dec eax
jmp 0x44cfc1
mov dword [0x4a3b6c], ebx
xor eax, eax
jmp 0x44cfc1
mov eax, dword [ebx + 0xc]
jmp 0x44cfc1
mov ecx, dword [ebx + 0xc]
push 0
call fcn.00466bf0
jmp 0x44cfc1
push 0
mov ecx, 0x4a2bfc
call fcn.004039a0
cmp eax, 0xffffffff
jne 0x44cfc1
xor eax, eax
jmp 0x44cfc1
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x10]
push edx
push 0
call eax
add esp, 8
mov ecx, 0xfd
sub ecx, edi
cmp eax, ecx
ja 0x44d028
mov ebx, dword [ebp - 0x18]
mov ecx, dword [ebx + 4]
lea edx, [ebp + edi - 0x194]
push edx
call fcn.00466bf0
add edi, eax
movzx eax, word [ebx + 0xa]
add dword [ebp - 0x14], eax
add ebx, 0xc
cmp dword [ebx], 0
mov dword [ebp - 0x18], ebx
jne 0x44cefd
mov ecx, dword [ebp - 0x14]
mov al, byte [ecx]
test al, al
je 0x44d017
cmp edi, 0xfd
jae 0x44d01f
inc ecx
mov byte [ebp + edi - 0x194], al
mov al, byte [ecx]
inc edi
test al, al
jne 0x44d000
cmp edi, 0xfd
jb 0x44d024
cmp byte [ecx], 0
jne 0x44d028
test edi, edi
jne 0x44d066
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
je 0x44d038
add eax, 0xc
cmp dword [eax], 0
jne 0x44d030
cmp byte [eax + 8], 0
je 0x44dd3a
mov eax, dword [ebp - 0x54]
test eax, eax
je case.default.0x44e7fd
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je case.default.0x44e7fd
push eax
or eax, 0xffffffff
call fcn.004011f0
jmp case.default.0x44e7fd
mov ebx, dword [ebp - 0x18]
mov byte [ebp + edi - 0x194], 0
cmp byte [ebx + 8], 0
je 0x44d0b3
push 0
push edi
lea ecx, [ebp - 0x194]
push ecx
mov ecx, 0x4a2c18
call fcn.0041c320
mov dword [ebx + 4], eax
test eax, eax
je 0x44d042
movzx edx, byte [ebx + 9]
cmp edx, dword [eax + 0x10]
jge 0x44e691
cmp byte [ebx + 8], 2
jne 0x44d042
mov edi, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x20]
add edi, 0x10
jmp 0x44ce93
cmp byte [ebp - 0x194], 0
je 0x44e8f9
lea eax, [ebp - 0x4d]
push eax
push 0
push 3
lea ecx, [ebp - 0x90]
push ecx
push edi
lea edx, [ebp - 0x194]
push edx
mov ecx, 0x4a2c18
call fcn.0041d790
test eax, eax
jne 0x44d10b
movzx eax, byte [ebp - 0x4d]
mov ecx, dword [ebp - 0x90]
push eax
push ecx
push edi
lea edx, [ebp - 0x194]
push edx
mov ecx, 0x4a2c18
call fcn.0041db10
test eax, eax
je 0x44e8f9
mov dword [esi], eax
mov ebx, dword [esi]
mov al, byte [ebx + 0x17]
test al, al
jne 0x44d11c
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
movzx eax, al
mov edi, 1
sub eax, edi
je 0x44d1c6
sub eax, 3
jne 0x44d1fc
mov eax, dword [ebx + 0x10]
cmp eax, 0x43dbf0
jne 0x44d157
mov eax, dword [0x49d3c8]
mov ecx, dword [eax + 8]
mov dword [esi], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 8], edi
jmp 0x44dd3a
cmp eax, 0x43b970
jne 0x44d189
mov eax, dword [ebx + 0x18]
cmp byte [eax + 4], 0
jne 0x44d178
mov eax, edi
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], edi
jmp 0x44dd3a
xor eax, eax
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], edi
jmp 0x44dd3a
cmp eax, 0x43c350
jne 0x44d1a5
mov dword [esi], 4
mov dword [esi + 4], 0
mov dword [esi + 8], edi
jmp 0x44dd3a
cmp eax, 0x43e1d0
jne 0x44d1fc
mov ecx, dword [0x49d3c8]
mov edx, dword [ecx + 0x38]
mov dword [esi], edx
mov dword [esi + 4], 0
mov dword [esi + 8], edi
jmp 0x44dd3a
cmp dword [0x4a0b8c], 0
jne 0x44dd33
cmp byte [ebx + 0x17], 0
jne 0x44d1de
mov eax, dword [ebx + 0xc]
jmp 0x44d1e0
mov eax, ebx
test byte [eax + 0x15], 0xa
jne 0x44dd33
xor ecx, ecx
cmp dword [eax + 0xc], ecx
setne cl
mov eax, ecx
test eax, eax
jne 0x44dd33
movzx eax, byte [ebx + 0x17]
cmp eax, 3
ja case.default.0x44d205
jmp dword [eax*4 + 0x44eab4]
mov eax, ebx
call fcn.00401150
cmp dword [0x4a0b8c], 0
jne 0x44d24d
cmp dword [ebx + 0xc], 0
jne 0x44d24d
mov eax, dword [ebx + 0x18]
push 0
lea edx, [ebp - 0x71]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
je 0x44d243
mov dword [0x4a3b6c], 0
dec eax
jmp 0x44d281
mov dword [0x4a3b6c], ebx
xor eax, eax
jmp 0x44d281
mov eax, dword [ebx + 0xc]
jmp 0x44d281
mov ecx, dword [ebx + 0xc]
push 0
call fcn.00466bf0
jmp 0x44d281
push 0
mov ecx, 0x4a2bfc
call fcn.004039a0
cmp eax, 0xffffffff
jne 0x44d281
xor eax, eax
jmp 0x44d281
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebx + 0x10]
push ecx
push 0
call edx
add esp, 8
lea ebx, [eax + 1]
cmp ebx, edi
jne 0x44d2b2
mov eax, dword [esi]
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x44d297
mov eax, dword [eax + 0xc]
mov cl, byte [eax + 0x17]
cmp cl, 1
je 0x44dd33
mov dword [esi], 0x49588a
mov dword [esi + 8], 0
jmp 0x44dd3a
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3c]
mov eax, dword [ebp + 0x20]
add edx, dword [eax]
cmp ebx, edx
ja 0x44d2cf
mov eax, dword [ebp - 0x3c]
mov edi, eax
add eax, ebx
mov dword [ebp - 0x3c], eax
jmp 0x44d31b
cmp ebx, 0x1001
jae 0x44d2ee
cmp dword [ebp - 0x38], 0x9c40
jae 0x44d2ee
mov eax, ebx
call fcn.004854f0
add dword [ebp - 0x38], ebx
mov edi, esp
jmp 0x44d31b
cmp dword [ebp - 0x28], 0xc8
je 0x44e69f
push ebx
call 0x476de3
mov ecx, dword [ebp - 0x28]
add esp, 4
mov dword [ebp + ecx*4 - 0x4b4], eax
test eax, eax
je 0x44e69f
inc dword [ebp - 0x28]
mov edi, eax
mov ecx, dword [esi]
push edi
call fcn.00466bf0
mov dword [esi], edi
mov dword [esi + 4], 0
mov dword [esi + 8], 4
jmp 0x44dd3a
cmp eax, 0x3b
jne 0x44d676
mov ecx, dword [esi]
movzx eax, byte [ecx + 9]
mov edi, dword [ecx + 4]
mov dword [ebp - 0x40], edi
cmp eax, dword [ebp - 0x20]
jg 0x44d042
mov ebx, dword [ebp - 0x20]
lea edx, [ebp - 0x194]
mov dword [esi + 4], edx
mov edx, dword [esi + 0xc]
mov dword [ebp - 0x58], edx
xor edx, edx
sub ebx, eax
mov dword [ebp - 0x20], ebx
mov dword [esi + 0xc], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 4], edx
cmp byte [ecx + 8], 2
lea ebx, [ebp + ebx*4 - 0xcb4]
sete cl
movzx edx, cl
push edx
push eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
push eax
lea ecx, [ebp - 0x68]
push ecx
push edi
call fcn.0044ec60
test al, al
je 0x44e6aa
mov eax, dword [esi + 8]
cmp eax, 1
je 0x44d648
cmp eax, 2
je 0x44d648
cmp eax, 5
je 0x44d648
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x44d3ef
mov edx, dword [ebp - 0x24]
cmp dword [edx + 0x18], 0x3d
jne 0x44d3ef
mov eax, dword [ebp + 8]
cmp byte [eax], 3
mov dword [ebp - 0x14], 1
je 0x44e6e1
mov ebx, dword [ebp - 0x54]
jmp 0x44d421
mov ecx, dword [ebp - 0x24]
cmp dword [ecx + 0x18], 0x10
mov dword [ebp - 0x14], 0
jne 0x44d41f
test eax, eax
je 0x44d41f
mov ebx, dword [ebx - 4]
cmp dword [ebx + 8], 3
jne 0x44d41f
mov ebx, dword [ebx]
mov al, byte [ebx + 0x17]
test al, al
jne 0x44d41b
mov edx, dword [ebx + 0xc]
mov al, byte [edx + 0x17]
cmp al, 1
je 0x44d421
xor ebx, ebx
mov edi, dword [esi]
test ebx, ebx
je 0x44d4d6
mov eax, dword [0x49d3c8]
mov ecx, dword [eax + 0x94]
cmp ecx, dword [ebp - 0x40]
jne 0x44d44b
cmp byte [ebx + 0x16], 0
je 0x44d44b
test byte [ebx + 0x15], 4
je 0x44d4d6
mov eax, dword [esi + 0xc]
cmp eax, edi
jne 0x44d460
mov edx, dword [esi + 4]
push edx
push eax
mov eax, ebx
call fcn.00466e90
jmp 0x44d49d
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44d465
sub eax, edx
cmp edi, dword [0x4a2b50]
jne 0x44d492
cmp eax, 0x40
jb 0x44d492
push eax
push edi
mov eax, ebx
call fcn.00466e90
xor eax, eax
mov dword [0x4a2b50], eax
mov dword [0x4a2b54], eax
jmp 0x44d49d
push ebx
or eax, 0xffffffff
mov ecx, edi
call fcn.004011f0
cmp dword [ebp - 0x14], 0
jne 0x44e6f1
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x20]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
lea eax, [ebp - 0x68]
mov dword [esi], ebx
mov dword [esi + 8], 3
mov dword [ebp - 4], 0xffffffff
call fcn.0044f1d0
jmp 0x44dd3a
mov eax, dword [esi + 0xc]
mov edx, 1
test eax, eax
je 0x44d502
mov ecx, dword [ebp - 0x28]
cmp ecx, 0xc8
je 0x44e705
cmp eax, edi
jne 0x44d4f7
xor edx, edx
mov dword [ebp + ecx*4 - 0x4b4], eax
inc ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x58]
mov dword [esi + 0xc], ecx
cmp byte [edi], 0
jne 0x44d535
lea eax, [ebp - 0x68]
mov dword [esi], 0x49588a
mov dword [esi + 8], 4
mov dword [esi + 4], 0
mov dword [ebp - 4], 0xffffffff
call fcn.0044f1d0
jmp 0x44dd3a
mov eax, dword [ebp - 0x40]
cmp byte [eax + 0x31], 0
je 0x44d54c
test edx, edx
je 0x44d587
xor edx, edx
cmp dword [ebp - 0x14], edx
sete dl
jmp 0x44d587
cmp edi, dword [0x4a2b50]
jne 0x44d582
xor edx, edx
cmp dword [ebp - 0x14], edx
jne 0x44d587
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x18]
add ecx, 0x18
cmp eax, 0x3d
je 0x44d587
lea esp, [esp]
cmp eax, 0x3b
je 0x44d582
mov eax, dword [ecx + 0x10]
add ecx, 0x10
cmp eax, 0x3d
jne 0x44d570
jmp 0x44d587
mov edx, 1
mov dword [esi + 4], 0
mov dword [esi + 8], 4
test edx, edx
je 0x44d634
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44d5a2
mov ecx, dword [ebp + 0x1c]
sub eax, edx
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3c]
lea ebx, [eax + 1]
mov eax, dword [ebp + 0x20]
add edx, dword [eax]
cmp ebx, edx
ja 0x44d5d2
mov ecx, dword [ebp - 0x3c]
push ebx
push edi
push ecx
call fcn.0047b470
add esp, 0xc
add dword [ebp - 0x3c], ebx
jmp 0x44d632
cmp ebx, 0x1001
jae 0x44d5fc
cmp dword [ebp - 0x38], 0x9c40
jae 0x44d5fc
mov eax, ebx
call fcn.004854f0
mov eax, esp
push ebx
push edi
push eax
call fcn.0047b470
add esp, 0xc
add dword [ebp - 0x38], ebx
jmp 0x44d632
cmp dword [ebp - 0x28], 0xc8
je 0x44e72e
push ebx
call 0x476de3
mov edx, dword [ebp - 0x28]
add esp, 4
mov dword [ebp + edx*4 - 0x4b4], eax
test eax, eax
je 0x44e72e
push ebx
push edi
push eax
call fcn.0047b470
add esp, 0xc
inc dword [ebp - 0x28]
mov dword [esi], eax
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
call fcn.0044f1d0
jmp 0x44dd3a
mov eax, dword [ebp - 0x58]
mov dword [esi + 0xc], eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x44dd3a
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
push eax
call fcn.004670b0
add esp, 0xc
jmp 0x44dd3a
cmp eax, 0x1c
jne 0x44d6b9
cmp dword [esi + 0xc], 0
je 0x44e691
test ebx, ebx
je 0x44e691
mov eax, dword [ebp + ebx*4 - 0xcb8]
mov ecx, dword [eax]
dec ebx
mov dword [esi], ecx
mov edx, dword [eax + 4]
mov dword [esi + 4], edx
mov ecx, dword [eax + 8]
mov dword [esi + 8], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0xc], edx
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x20], ebx
mov dword [esi + 0xc], eax
jmp 0x44dd44
test ebx, ebx
je 0x44d042
dec ebx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp + ebx*4 - 0xcb4]
cmp dword [ebx + 8], 7
jge 0x44d042
cmp eax, 0x1d
jne 0x44d711
mov eax, dword [esi + 0xc]
test eax, eax
je 0x44d042
mov ecx, dword [eax + 0xc]
mov dword [ebx + 0xc], ecx
mov edx, dword [ebx]
mov dword [esi], edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov ecx, dword [ebx + 8]
mov dword [esi + 8], ecx
mov edx, dword [ebx + 0xc]
mov dword [esi + 0xc], edx
mov dword [ebx + 8], 1
jmp 0x44dd3a
cmp eax, 0xf
je 0x44e691
cmp eax, 0x10
je 0x44d733
cmp eax, 0x1b
je 0x44d733
cmp eax, 0x28
je 0x44d733
mov eax, ebx
call fcn.00445830
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 8]
xor edi, edi
lea ecx, [eax - 8]
mov dword [ebp - 0x14], edi
cmp ecx, 0x32
ja case.0x44d74e.10
movzx ecx, byte [ecx + 0x44eae0]
jmp dword [ecx*4 + 0x44eac4]
mov ecx, dword [ebp - 0x2c]
mov eax, ebx
call fcn.00445770
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
mov dword [esi + 8], 1
jmp 0x44dd3a
mov ecx, dword [ebp - 0x2c]
mov eax, ebx
call fcn.00445770
test eax, eax
jne 0x44e087
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
jmp 0x44dd3a
mov eax, dword [ebp - 0x2c]
cmp eax, 1
jne 0x44d7c0
push eax
mov ecx, ebx
call fcn.004458f0
add esp, 4
neg eax
adc edx, edi
neg edx
mov dword [esi + 4], edx
mov edx, dword [ebp - 0x2c]
mov dword [esi], eax
mov dword [esi + 8], edx
jmp 0x44dd3a
cmp eax, 2
jne 0x44d964
push 1
push edi
mov eax, ebx
call fcn.00445970
fchs
fstp qword [esi]
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [esi + 8], edx
jmp 0x44dd3a
xor ecx, ecx
cmp eax, 0x39
setge cl
mov edi, ecx
mov ecx, dword [ebx + 8]
cmp ecx, 3
jne 0x44d2a0
mov edx, dword [ebp - 0x2c]
test edx, edx
je 0x44d8ac
cmp eax, 8
je 0x44d817
mov dword [ebp - 0x14], 0xffffffff
cmp eax, 0x39
jne 0x44d81e
mov dword [ebp - 0x14], 1
push 1
cmp edx, 1
jne 0x44d849
mov ecx, ebx
call fcn.004458f0
mov dword [esi], eax
mov eax, dword [ebp - 0x14]
mov dword [esi + 4], edx
add esp, 4
cdq
add eax, dword [esi]
adc edx, dword [esi + 4]
push edx
mov edx, dword [ebx]
push eax
push edx
call 0x411d40
jmp 0x44d862
push 0
mov eax, ebx
call fcn.00445970
fst qword [esi]
fiadd dword [ebp - 0x14]
mov eax, dword [ebx]
fstp qword [esp]
push eax
call 0x411d70
test edi, edi
je 0x44d7da
mov ebx, dword [ebx]
mov al, byte [ebx + 0x17]
test al, al
jne 0x44d879
mov ecx, dword [ebx + 0xc]
mov al, byte [ecx + 0x17]
cmp al, 1
jne 0x44d884
mov dword [esi], ebx
jmp 0x44dd33
mov ecx, dword [ebp - 0x2c]
cmp ecx, 1
jne 0x44d89d
mov eax, dword [ebp - 0x14]
cdq
add dword [esi], eax
mov dword [esi + 8], ecx
adc dword [esi + 4], edx
jmp 0x44dd3a
fild dword [ebp - 0x14]
mov dword [esi + 8], ecx
fadd qword [esi]
fstp qword [esi]
jmp 0x44dd3a
cmp ecx, 3
jne 0x44d2a0
mov ecx, dword [ebx]
push 1
push 0
push 0xffffffffffffffff
push 0
call fcn.004668b0
test edi, edi
je 0x44d2a0
mov ebx, dword [ebx]
mov al, byte [ebx + 0x17]
test al, al
jne 0x44d8db
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x44d2a0
mov dword [esi], ebx
jmp 0x44dd33
mov eax, dword [ebx + 8]
cmp eax, 3
jne 0x44d946
mov eax, dword [ebx]
cmp byte [eax + 0x17], 0
jne 0x44d8ff
mov ecx, dword [eax + 0xc]
jmp 0x44d901
mov ecx, eax
test byte [ecx + 0x15], 2
je 0x44d926
mov dword [esi + 8], 1
mov ebx, dword [ebx]
cmp byte [ebx + 0x17], 0
jne 0x44d919
mov ebx, dword [ebx + 0xc]
mov eax, dword [ebx]
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
jmp 0x44dd3a
call fcn.004033d0
mov dword [esi + 8], 1
mov ecx, dword [ebx]
push 1
call fcn.00401230
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
jmp 0x44dd3a
cmp eax, 5
jne 0x44d964
mov dword [esi + 8], 1
mov eax, dword [ebx]
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
jmp 0x44dd3a
cmp dword [ebp - 0x2c], edi
jne 0x44d972
mov dword [esi], 0x49588a
mov dword [esi + 8], edi
jmp 0x44dd3a
xor ecx, ecx
cmp dword [ebp - 0x2c], 1
sete cl
push ecx
mov ecx, ebx
call fcn.004458f0
add esp, 4
cmp dword [esi + 8], 0x35
jne 0x44d9bf
cmp edx, edi
ja 0x44d9aa
jb 0x44d997
cmp eax, 0xffffffff
ja 0x44d9aa
not eax
mov dword [esi + 4], edi
mov dword [esi], eax
mov dword [esi + 8], 1
jmp 0x44dd3a
not eax
not edx
mov dword [esi + 4], edx
mov dword [esi], eax
mov dword [esi + 8], 1
jmp 0x44dd3a
cmp eax, 0x1000
jae 0x44d9da
xor eax, eax
cdq
mov dword [esi + 4], edx
mov dword [esi], eax
mov dword [esi + 8], 1
jmp 0x44dd3a
movzx eax, byte [eax]
cdq
mov dword [esi + 4], edx
mov dword [esi], eax
mov dword [esi + 8], 1
jmp 0x44dd3a
mov ecx, dword [ebp - 0x20]
cmp ecx, edi
je 0x44d042
dec ecx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp + ecx*4 - 0xcb4]
mov dword [ebp - 0x48], ecx
mov ecx, dword [ecx]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ecx + 8]
cmp ecx, 7
jge 0x44d042
cmp eax, 0x1b
jg 0x44db05
cmp eax, 0x10
jl 0x44db05
cmp ecx, 3
je 0x44da3e
mov dword [esi], 0x49588a
mov dword [esi + 8], edi
jmp 0x44dd3a
add eax, 0xfffffff0
cmp eax, 0xb
ja case.default.0x44da4a
jmp dword [eax*4 + 0x44eb14]
mov edx, dword [ebp - 0x30]
mov edi, dword [edx]
mov eax, ebx
call fcn.004662d0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x44da6f
mov ecx, dword [eax + 0xc]
mov cl, byte [ecx + 0x17]
cmp cl, 2
jne 0x44e422
mov edx, dword [ebx]
mov dword [esi], edx
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov ecx, dword [ebx + 8]
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], ecx
mov edx, dword [ebx + 0xc]
mov dword [esi + 0xc], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0xc], ecx
jmp 0x44dd3a
mov dword [esi + 8], 0x2e
jmp case.default.0x44da4a
mov dword [esi + 8], 0x2f
jmp case.default.0x44da4a
mov dword [esi + 8], 0x30
jmp case.default.0x44da4a
mov dword [esi + 8], 0x31
jmp case.default.0x44da4a
mov dword [esi + 8], 0x32
jmp case.default.0x44da4a
mov dword [esi + 8], 0x29
jmp case.default.0x44da4a
mov dword [esi + 8], 0x2a
jmp case.default.0x44da4a
mov dword [esi + 8], 0x2b
jmp case.default.0x44da4a
mov dword [esi + 8], 0x2c
jmp case.default.0x44da4a
mov dword [esi + 8], 0x2d
jmp case.default.0x44da4a
mov dword [esi + 8], 0x28
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
mov dword [ebp - 0x14], eax
cmp dword [esi + 8], 0x28
je 0x44e03c
cmp dword [ebp - 0x2c], edi
je 0x44e03c
mov eax, dword [ebp - 0x30]
call fcn.00445830
mov edi, eax
mov dword [ebp - 0x58], edi
test edi, edi
je 0x44e03c
cmp dword [ebp - 0x2c], 1
jne 0x44db3e
cmp edi, 1
jne 0x44db3e
cmp dword [esi + 8], 0x31
jne 0x44db53
mov eax, dword [esi + 8]
cmp eax, 0x2d
jg 0x44dde5
cmp eax, 0x29
jl 0x44dde5
xor ecx, ecx
cmp dword [ebp - 0x2c], 1
sete cl
push ecx
mov ecx, ebx
call fcn.004458f0
mov ecx, dword [ebp - 0x30]
mov edi, edx
xor edx, edx
add esp, 4
cmp dword [ebp - 0x58], 1
mov ebx, eax
sete dl
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], edi
push edx
call fcn.004458f0
mov ecx, dword [esi + 8]
add ecx, 0xffffffdf
add esp, 4
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x18], 1
cmp ecx, 0x17
ja case.0x44dbab.40
jmp dword [ecx*4 + 0x44eb44]
add eax, ebx
adc edx, edi
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
sub eax, ebx
sbb edx, edi
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
push edi
push ebx
push edx
push eax
call fcn.0047f2b0
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
cmp eax, ebx
jne 0x44dbfa
cmp edx, edi
jne 0x44dbfa
mov eax, 1
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
xor eax, eax
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
cmp eax, ebx
jne 0x44dc10
cmp edx, edi
je 0x44dbfa
mov eax, 1
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
cmp edx, edi
jl 0x44dbfa
jg 0x44dc2b
cmp eax, ebx
jbe 0x44dbfa
mov eax, 1
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
cmp edx, edi
jg 0x44dbfa
jl 0x44dc46
cmp eax, ebx
jae 0x44dbfa
mov eax, 1
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
cmp edx, edi
jl 0x44dbfa
jg 0x44dc61
cmp eax, ebx
jb 0x44dbfa
mov eax, 1
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
cmp edx, edi
jg 0x44dbfa
jl 0x44dc80
cmp eax, ebx
ja 0x44dbfa
mov eax, 1
xor ecx, ecx
mov dword [esi + 4], ecx
mov dword [esi], eax
jmp case.0x44dbab.40
and eax, ebx
and edx, edi
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
or eax, ebx
or edx, edi
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
xor eax, ebx
xor edx, edi
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
mov ecx, ebx
call fcn.0048ab50
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
mov ecx, ebx
call fcn.0048ab20
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
mov ecx, ebx
or ecx, dword [ebp - 0x80]
je case.default.0x44e0d5
mov ecx, dword [ebp - 0x80]
push ecx
push ebx
push edx
push eax
call fcn.0048a050
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
mov ecx, eax
or ecx, edx
jne 0x44dd57
test edi, edi
jg 0x44ddb3
jl case.default.0x44e0d5
test ebx, ebx
jae 0x44ddb3
mov dword [esi], 0x49588a
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x18]
mov dword [esi + 8], edx
cmp dword [ebp - 0x14], 0
je 0x44dd3a
mov edi, dword [ebp - 0x14]
mov eax, esi
call fcn.004662d0
mov al, byte [edi + 0x17]
test al, al
jne 0x44dd2d
mov eax, dword [edi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 2
je 0x44dd3a
mov dword [esi], edi
mov dword [esi + 8], 3
cmp dword [esi + 0xc], 0
je 0x44e648
mov eax, dword [esi + 8]
cmp eax, 5
ja case.0x44dd50.1
jmp dword [eax*4 + 0x44eba4]
test edx, edx
jg 0x44ddb3
jl 0x44dd61
test eax, eax
jae 0x44ddb3
neg eax
adc edx, 0
neg edx
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], edx
fild qword [ebp - 0x84]
sub esp, 0x10
fstp qword [esp + 8]
fild qword [ebp - 0x8c]
fstp qword [esp]
call fcn.0042a660
cmp dword [ebp - 0x58], 0
fst qword [esi]
je 0x44ddbc
push 0
push 2
push edi
push ebx
call fcn.0048a930
or eax, edx
je 0x44ddbc
fchs
fstp qword [esi]
jmp 0x44ddbe
mov dword [ebp - 0x58], 0
jmp 0x44dd7b
fstp st(0)
test edi, edi
jg 0x44ddd4
jl 0x44ddc8
test ebx, ebx
jae 0x44ddd4
mov dword [ebp - 0x18], 2
jmp case.0x44dbab.40
fld qword [esi]
call fcn.00489fd6
mov dword [esi + 4], edx
mov dword [esi], eax
jmp case.0x44dbab.40
xor eax, eax
cmp dword [ebp - 0x2c], 2
sete al
push eax
push 1
mov eax, ebx
call fcn.00445970
fstp qword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edi, 2
sete cl
push ecx
push 1
call fcn.00445970
fst qword [ebp - 0x5c]
mov ecx, dword [esi + 8]
add esp, 0x10
cmp ecx, 0x21
jl 0x44de26
mov ebx, 1
cmp ecx, 0x27
jle 0x44de2b
mov ebx, 2
lea eax, [ecx - 0x21]
cmp eax, 0x17
ja case.0x44de3a.40
movzx edx, byte [eax + 0x44ebec]
jmp dword [edx*4 + 0x44ebbc]
fadd qword [ebp - 0x4c]
mov dword [esi + 8], ebx
fstp qword [esi]
jmp 0x44dd10
fsub qword [ebp - 0x4c]
mov dword [esi + 8], ebx
fstp qword [esi]
jmp 0x44dd10
fmul qword [ebp - 0x4c]
mov dword [esi + 8], ebx
fstp qword [esi]
jmp 0x44dd10
fld qword [ebp - 0x4c]
fld st(0)
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x44de8c
fstp st(1)
mov dword [esi], 0x49588a
xor ebx, ebx
fstp st(0)
mov dword [esi + 8], ebx
jmp 0x44dd10
fdivp st(1)
fst qword [esi]
cmp ecx, 0x32
jne case.0x44de3a.40
sub esp, 8
fstp qword [esp]
call fcn.0042a6c0
fstp qword [esi]
mov dword [esi + 8], ebx
jmp 0x44dd10
fld qword [ebp - 0x4c]
fucompp
fnstsw ax
test ah, 0x44
jp 0x44deca
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
xor eax, eax
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
fld qword [ebp - 0x4c]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x44deca
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
fcomp qword [ebp - 0x4c]
fnstsw ax
test ah, 0x41
jne 0x44deca
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
fcomp qword [ebp - 0x4c]
fnstsw ax
test ah, 5
jp 0x44deca
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
fcomp qword [ebp - 0x4c]
fnstsw ax
test ah, 1
jne 0x44deca
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
fcomp qword [ebp - 0x4c]
fnstsw ax
test ah, 0x41
jp 0x44deca
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
jmp 0x44dd10
fldz
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x44df89
mov edi, 1
jmp 0x44df8b
xor edi, edi
fld st(1)
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jp 0x44dfb4
fcomp qword [ebp - 0x4c]
fnstsw ax
test ah, 0x41
jne 0x44dfb6
fstp st(0)
xor ebx, ebx
mov dword [esi], 0x49588a
mov dword [esi + 8], ebx
jmp 0x44dd10
fstp st(0)
test edi, edi
je 0x44dfe0
fstp st(0)
sub esp, 0x10
fld1
fstp qword [esp + 8]
fld qword [ebp - 0x4c]
fstp qword [esp]
call fcn.0042a6f0
fldz
fucompp
fnstsw ax
test ah, 0x44
jp 0x44dfa4
fld qword [ebp - 0x5c]
fchs
fld qword [ebp - 0x4c]
sub esp, 0x10
fstp qword [esp + 8]
fstp qword [esp]
call fcn.0042a660
fstp qword [esi]
test edi, edi
je 0x44de84
fld qword [0x497c48]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [ebp - 0x4c]
fstp qword [esp]
call fcn.0042a6f0
sub esp, 8
fstp qword [esp]
call fcn.0042a650
fld1
fucompp
fnstsw ax
test ah, 0x44
jp 0x44de84
fld qword [esi]
mov dword [esi + 8], ebx
fchs
fstp qword [esi]
jmp 0x44dd10
mov edi, dword [esi + 8]
lea eax, [edi - 0x21]
cmp eax, 2
ja 0x44e09c
mov eax, ebx
call fcn.00445b80
mov edx, eax
mov eax, dword [ebp - 0x30]
call fcn.00445b80
test edx, edx
jne 0x44e060
test eax, eax
je 0x44e09c
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
cmp edi, 0x23
setne dl
cmp edx, ecx
jne 0x44e087
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
jmp 0x44dd3a
xor eax, eax
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], 1
jmp 0x44dd3a
lea ecx, [ebp - 0xdb4]
mov eax, ebx
call fcn.00445a20
mov edi, eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x40], edi
call fcn.00445a20
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 8]
add eax, 0xffffffdf
mov dword [ebp - 0x18], 1
cmp eax, 7
ja case.default.0x44e0d5
jmp dword [eax*4 + 0x44ec04]
mov eax, dword [0x49d3c8]
cmp byte [eax + 0xc9], 0
push edi
jne 0x44e0f9
mov ecx, dword [ebp - 0x1c]
push ecx
call 0x476cb6
add esp, 8
jmp 0x44e103
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x44e118
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
xor eax, eax
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
mov eax, dword [ebp - 0x1c]
push edi
push eax
call 0x476dcc
add esp, 8
test eax, eax
jne 0x44e118
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
mov ecx, dword [0x49d3c8]
mov al, byte [ecx + 0xc9]
push edi
test al, al
jne 0x44e164
mov edx, dword [ebp - 0x1c]
push edx
call 0x476cb6
jmp 0x44e18f
cmp al, 2
jne 0x44e186
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
xor edx, edx
test eax, eax
setne dl
mov eax, edx
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
jmp case.0x44dbab.40
mov ecx, dword [ebp - 0x1c]
push ecx
call 0x476dcc
xor edx, edx
add esp, 8
test eax, eax
setne dl
mov eax, edx
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
jmp case.0x44dbab.40
mov eax, dword [0x49d3c8]
mov al, byte [eax + 0xc9]
push edi
test al, al
jne 0x44e1c1
mov ecx, dword [ebp - 0x1c]
push ecx
call 0x476cb6
jmp 0x44e1da
cmp al, 2
jne 0x44e1d1
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x44e1dd
mov eax, dword [ebp - 0x1c]
push eax
call 0x476dcc
add esp, 8
test eax, eax
jle 0x44e118
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
mov ecx, dword [0x49d3c8]
mov al, byte [ecx + 0xc9]
push edi
test al, al
jne 0x44e212
mov edx, dword [ebp - 0x1c]
push edx
call 0x476cb6
jmp 0x44e22b
cmp al, 2
jne 0x44e222
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x44e22e
mov ecx, dword [ebp - 0x1c]
push ecx
call 0x476dcc
add esp, 8
test eax, eax
jns 0x44e118
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
mov edx, dword [0x49d3c8]
mov al, byte [edx + 0xc9]
push edi
test al, al
jne 0x44e263
mov eax, dword [ebp - 0x1c]
push eax
call 0x476cb6
jmp 0x44e27c
cmp al, 2
jne 0x44e273
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x44e27f
mov edx, dword [ebp - 0x1c]
push edx
call 0x476dcc
add esp, 8
cmp eax, 0xffffffff
jle 0x44e118
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
mov eax, dword [0x49d3c8]
mov al, byte [eax + 0xc9]
push edi
test al, al
jne 0x44e2b4
mov ecx, dword [ebp - 0x1c]
push ecx
call 0x476cb6
jmp 0x44e2cd
cmp al, 2
jne 0x44e2c4
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x44e2d0
mov eax, dword [ebp - 0x1c]
push eax
call 0x476dcc
add esp, 8
cmp eax, 1
jge 0x44e118
mov eax, 1
xor ecx, ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp case.0x44dbab.40
cmp dword [ebx + 8], 3
jne 0x44e2f9
mov eax, dword [ebx]
call 0x412120
jmp 0x44e309
mov eax, edi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44e300
sub eax, edx
cmp dword [ebp - 0x14], 0
mov dword [ebp - 0x18], eax
je 0x44e32c
mov ecx, eax
mov eax, dword [ebp - 0x14]
push ecx
push edi
call fcn.00466e10
test eax, eax
je 0x44e32c
mov edx, dword [ebp - 0x14]
mov dword [esi], edx
jmp 0x44dd33
mov eax, dword [ebp - 0x30]
cmp dword [eax + 8], 3
jne 0x44e340
mov ecx, eax
mov eax, dword [ecx]
call 0x412120
jmp 0x44e34f
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44e346
sub eax, edx
cmp dword [ebp - 0x14], 0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x6c], eax
lea eax, [eax + edx + 1]
mov dword [ebp - 0x70], eax
jne 0x44e4bc
cmp dword [ebp - 0x54], 0
je 0x44e387
cmp dword [ebp - 0x20], 0
jne 0x44e387
mov ecx, dword [ebp - 0x24]
cmp dword [ecx + 0x18], 0x3d
jne 0x44e387
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x58], 1
jmp 0x44e3cc
mov edx, dword [ebp - 0x24]
cmp dword [edx + 0x18], 0x10
jne 0x44e4bc
cmp dword [ebp - 0x20], 0
je 0x44e4bc
mov eax, dword [ebp - 0x48]
mov eax, dword [eax - 4]
cmp dword [eax + 8], 3
jne 0x44e4bc
mov edi, dword [eax]
mov al, byte [edi + 0x17]
test al, al
jne 0x44e3bd
mov ecx, dword [edi + 0xc]
mov al, byte [ecx + 0x17]
cmp al, 1
jne 0x44e4bc
mov dword [ebp - 0x58], 0
test edi, edi
je 0x44e4bc
push 0
mov ecx, edi
call fcn.00401230
cmp eax, dword [ebp - 0x1c]
jne 0x44e429
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
push edx
push eax
mov eax, edi
call fcn.00466e10
test eax, eax
je 0x44e4bc
cmp dword [ebp - 0x58], 0
jne case.default.0x44e7fd
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
dec eax
mov dword [esi + 0xc], ecx
mov edx, dword [ebp + eax*4 - 0xcb4]
mov dword [ebp - 0x20], eax
mov eax, dword [edx]
mov dword [esi], eax
jmp 0x44dd33
cmp eax, dword [ebp - 0x40]
je 0x44e4bc
mov ecx, dword [ebp - 0x70]
push 1
push 0
dec ecx
push ecx
push 0
mov ecx, edi
call fcn.004668b0
test eax, eax
je 0x44e8f9
push 1
mov ecx, edi
call fcn.00401230
mov ebx, eax
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x44e46f
mov edx, dword [ebp - 0x1c]
push eax
push edx
push ebx
call fcn.0047b470
mov eax, dword [ebp - 0x6c]
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x40]
inc ecx
push ecx
push edx
add eax, ebx
push eax
call fcn.0047b470
add esp, 0xc
push 0
mov eax, edi
call 0x412180
cmp dword [ebp - 0x58], 0
jne case.default.0x44e7fd
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0xcb8]
mov edx, dword [ecx]
dec eax
mov dword [ebp - 0x20], eax
mov dword [esi], edx
jmp 0x44dd33
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp + 0x20]
sub edx, eax
add edx, dword [ecx]
mov ecx, dword [ebp - 0x70]
cmp ecx, edx
ja 0x44e4db
mov dword [esi], eax
add eax, ecx
mov dword [ebp - 0x3c], eax
jmp 0x44e52f
cmp ecx, 0x1001
jae 0x44e4ff
cmp dword [ebp - 0x38], 0x9c40
jae 0x44e4ff
mov edi, dword [ebp - 0x70]
mov eax, edi
call fcn.004854f0
add dword [ebp - 0x38], edi
mov eax, esp
mov dword [esi], eax
jmp 0x44e52f
cmp dword [ebp - 0x28], 0xc8
je 0x44e8e5
mov edx, dword [ebp - 0x70]
push edx
call 0x476de3
mov ecx, dword [ebp - 0x28]
add esp, 4
mov dword [ebp + ecx*4 - 0x4b4], eax
mov dword [esi], eax
test eax, eax
je 0x44e8e5
inc dword [ebp - 0x28]
mov edi, dword [ebp - 0x6c]
test edi, edi
je 0x44e546
mov edx, dword [ebp - 0x1c]
mov eax, dword [esi]
push edi
push edx
push eax
call fcn.0047b470
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x40]
mov eax, dword [esi]
inc ecx
push ecx
push edx
add eax, edi
push eax
call fcn.0047b470
mov ecx, dword [ebp - 0x30]
xor eax, eax
add esp, 0xc
cmp dword [ecx + 8], eax
je 0x44e57a
cmp dword [ebx + 8], eax
je 0x44e57a
mov dword [ebp - 0x18], 4
mov dword [esi + 4], eax
jmp case.0x44dbab.40
mov dword [ebp - 0x18], eax
jmp case.0x44dbab.40
mov edi, dword [esi]
cmp byte [edi + 0x17], 0
jne 0x44e58d
mov edi, dword [edi + 0xc]
movzx eax, byte [edi + 0x15]
and eax, 0x70
cmp eax, 0x10
je 0x44e5dc
cmp eax, 0x20
je 0x44e5cf
cmp eax, 0x40
je case.0x44dd50.0
push 0
push 1
push 0
push 1
push 1
mov ecx, edi
call fcn.00401230
call fcn.00463e80
add esp, 0x10
test eax, eax
jne case.0x44dd50.1
mov cl, byte [edi + 0x15]
test cl, cl
js case.0x44dd50.1
or cl, 0x40
mov byte [edi + 0x15], cl
jmp case.0x44dd50.1
mov eax, 2
jmp case.0x44dd50.1
cmp dword [esi + 4], 0
je 0x44e5e3
mov eax, 1
jmp case.0x44dd50.1
push 0
push 1
push 0
push 1
xor ecx, ecx
mov eax, esi
call fcn.00445a20
call fcn.00463e80
add esp, 0x10
jmp case.0x44dd50.1
xor eax, eax
mov ecx, eax
mov eax, esi
call fcn.00445770
mov ecx, dword [esi + 0xc]
cmp dword [ecx + 8], 0x1d
je 0x44e687
xor edx, edx
cmp dword [ecx + 8], 0x1e
sete dl
cmp eax, edx
jne 0x44e691
mov dword [ebp - 0x24], ecx
mov ecx, dword [ecx + 0xc]
test ecx, ecx
je 0x44e633
cmp dword [ecx + 8], 0x1d
jne 0x44e616
cdq
mov dword [esi + 8], 1
mov dword [esi], eax
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
jmp 0x44dd3a
mov edi, dword [ebp - 0x78]
mov ebx, dword [ebp - 0x20]
cmp edi, ebx
jle 0x44e66e
mov eax, dword [ebp + edi*4 - 0xcb8]
dec edi
cmp dword [eax + 8], 5
jne 0x44e66a
mov eax, dword [eax]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jg 0x44e652
mov edi, dword [ebp - 0x24]
inc ebx
mov dword [ebp + ebx*4 - 0xcb8], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x78], ebx
add edi, 0x10
jmp 0x44ce93
test eax, eax
jne 0x44e691
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x24], eax
mov edi, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x20]
add edi, 0x10
jmp 0x44ce93
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
push edx
jmp 0x44e8ea
mov eax, dword [ebp + 0x10]
cmp dword [eax], 1
je 0x44e6b9
mov dword [ebp - 0x34], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x68]
test eax, eax
je case.default.0x44e7fd
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
push eax
call fcn.004670b0
add esp, 0xc
jmp case.default.0x44e7fd
mov esi, dword [esi + 0xc]
test esi, esi
je 0x44e6f1
push esi
call 0x4785bf
add esp, 4
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
call fcn.0044f1d0
jmp case.default.0x44e7fd
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp + 8]
push 0
push str.Out_of_memory.__The_current_thread_will_exit.
call fcn.004296d0
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
call fcn.0044f1d0
jmp 0x44e8f9
mov edx, dword [ebp - 0x40]
mov eax, dword [edx]
push eax
jmp 0x44e70b
mov ecx, dword [ebp + 8]
mov cl, byte [ecx]
cmp cl, 3
je case.default.0x44e7fd
cmp dword [ebp - 0x20], 1
jne 0x44d042
cmp dword [ebp - 0x54], 0
mov eax, dword [ebp - 0xcb4]
mov edi, eax
je 0x44e769
mov edi, dword [ebp - 0x54]
call fcn.004662d0
jmp case.default.0x44e7fd
cmp cl, 0x12
je 0x44e9cc
cmp cl, 0x6a
je 0x44e9cc
mov edx, dword [ebp + 0x14]
test edx, edx
je 0x44e7e9
mov ecx, dword [eax + 8]
cmp ecx, 1
je 0x44e7d2
cmp ecx, 2
je 0x44e7d2
cmp ecx, 5
je 0x44e7d2
cmp ecx, 3
jne 0x44e7e9
mov ecx, dword [eax]
cmp byte [ecx + 0x17], 0
jne 0x44e7a4
mov ecx, dword [ecx + 0xc]
test byte [ecx + 0x15], 2
je 0x44e7e9
mov dword [edx + 8], 5
mov eax, dword [eax]
cmp byte [eax + 0x17], 0
jne 0x44e7bc
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov dword [edx], eax
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 0x49588a
jmp 0x44ea3f
mov dword [edx + 8], ecx
mov ecx, dword [eax]
mov dword [edx], ecx
mov eax, dword [eax + 4]
mov dword [edx + 4], eax
mov eax, 0x49588a
jmp 0x44ea3f
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x34], edx
cmp ecx, 5
ja case.default.0x44e7fd
jmp dword [ecx*4 + 0x44ec24]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov edi, dword [ebp - 0x34]
push ecx
push edx
call fcn.00401050
add esp, 8
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44e820
sub eax, edx
lea ecx, [eax + 1]
mov eax, dword [ebp + 0x18]
add dword [eax], ecx
jmp case.default.0x44e7fd
mov edx, dword [0x49d3c8]
fld qword [eax]
mov edi, dword [ebp - 0x34]
sub esp, 8
add edx, 0x74
fstp qword [esp]
push edx
mov esi, 0x100
call fcn.00463ff0
lea ecx, [eax + 1]
mov eax, dword [ebp + 0x18]
add esp, 0xc
add dword [eax], ecx
jmp case.default.0x44e7fd
cmp ecx, 3
jne 0x44e881
mov ecx, dword [eax]
push 1
call fcn.00401230
mov esi, eax
mov eax, dword [edi]
mov dword [ebp + 0x14], esi
call 0x412120
jmp 0x44e89c
mov eax, dword [eax]
mov dword [ebp + 0x14], eax
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44e890
mov esi, dword [ebp + 0x14]
sub eax, edx
mov edx, dword [ebp + 0xc]
lea ebx, [eax + 1]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
add edx, edx
movzx eax, word [ecx + edx*8 + 2]
mov edx, 0xff
cmp ax, dx
jae 0x44e8bb
mov eax, edx
mov ecx, dword [ebp + 0x28]
lea eax, [eax + ecx + 1]
cmp ebx, eax
jbe 0x44e9b4
mov edx, dword [ebp + 0x20]
mov esi, dword [edx]
sub esi, eax
add esi, ebx
push esi
mov dword [ebp + 0x28], esi
call 0x476de3
mov edi, eax
add esp, 4
test edi, edi
jne 0x44e90e
push 0x49588a
mov ecx, dword [ebp + 8]
push 0
push str.Out_of_memory.__The_current_thread_will_exit.
call fcn.004296d0
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x34], 0
mov dword [eax], 0
jmp case.default.0x44e7fd
cmp esi, 0x400000
jbe 0x44e91c
inc dword [0x4a2b58]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x18]
mov eax, dword [ecx]
mov esi, dword [edx]
sub esi, eax
je 0x44e935
push esi
push eax
push edi
call fcn.0047b470
add esp, 0xc
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x18]
lea eax, [esi + edi]
push ebx
push edx
push eax
mov dword [ecx], eax
mov dword [ebp - 0x34], eax
call fcn.0047b470
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
add esp, 0xc
push ecx
call 0x4785bf
mov edx, dword [ebp + 0x20]
mov eax, dword [edx]
add esp, 4
cmp eax, 0x400000
jbe 0x44e96e
dec dword [0x4a2b58]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
add eax, edx
mov dword [ebp + 8], eax
xor eax, eax
cmp dword [ebp + 0xc], eax
jle 0x44e9a0
mov ecx, dword [ebp + 0x24]
mov ecx, dword [ecx + eax*4]
cmp ecx, edx
jb 0x44e99a
cmp ecx, dword [ebp + 8]
jae 0x44e99a
mov esi, edi
sub esi, edx
add esi, ecx
mov ecx, dword [ebp + 0x24]
mov dword [ecx + eax*4], esi
inc eax
cmp eax, dword [ebp + 0xc]
jl 0x44e97f
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x20]
mov dword [edx], edi
mov edi, dword [ebp + 0x18]
add dword [edi], ebx
mov dword [ecx], eax
jmp case.default.0x44e7fd
mov edi, dword [ebp + 0x18]
mov eax, dword [edi]
cmp eax, esi
je 0x44e9c8
push ebx
push esi
push eax
call 0x4777f0
add esp, 0xc
add dword [edi], ebx
jmp case.default.0x44e7fd
mov ecx, dword [eax + 8]
cmp ecx, 5
ja case.default.0x44e9d8
jmp dword [ecx*4 + 0x44ec3c]
mov edx, dword [eax]
or edx, dword [eax + 4]
jne case.0x44e9d8.5
mov dword [ebp - 0x34], 0x49588a
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x44ea15
jmp 0x44ea00
mov ecx, dword [ebp + esi*4 - 0x4b8]
dec esi
push ecx
call 0x4785bf
add esp, 4
test esi, esi
jne 0x44ea00
mov esi, dword [ebp - 0x78]
test esi, esi
je 0x44ea3c
mov edi, 5
mov eax, dword [ebp + esi*4 - 0xcb8]
dec esi
cmp dword [eax + 8], edi
jne 0x44ea38
mov eax, dword [eax]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
test esi, esi
jne 0x44ea21
mov eax, dword [ebp - 0x34]
lea esp, [ebp - 0xdc4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
fld qword [eax]
fldz
fucompp
fnstsw ax
test ah, 0x44
jp case.0x44e9d8.5
jmp case.0x44e7fd.5
mov ecx, dword [eax + 4]
test ecx, ecx
je case.0x44e9d8.0
mov eax, dword [ecx]
or eax, dword [ecx + 4]
jmp 0x44e9e4
mov eax, dword [eax]
call fcn.004456b0
jmp 0x44ea8d
mov esi, dword [eax]
call fcn.00445710
jmp 0x44ea8d
mov eax, dword [ebp + 8]
test eax, eax
je case.0x44e7fd.5
mov dword [ebp - 0x34], 0x4916f4
jmp case.default.0x44e7fd