Function at 0x446590
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x14c]
cmp eax, dword [ecx + 8]
jbe 0x447c41
sub esp, 0x1cc
mov eax, dword [esp + 0x1e0]
test eax, eax
jle 0x447a15
mov ecx, dword [esp + 0x1ec]
test ecx, ecx
jne 0x447c2a
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x1dc]
cmp edx, ebx
jne 0x4465f5
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x4c], edx
je 0x447c14
call fcn.004376d0
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x1d0]
cmp ecx, 0xffffffff
jne 0x447a0c
mov edx, dword [esp + 0x1d4]
cmp edx, 0xffffffff
jne 0x4479f7
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x4479e9
mov ebx, dword [ecx + 0x3c]
xor ebp, ebp
mov dword [esp + 0x78], eax
lea edi, [esp + 0x1a0]
mov esi, eax
xor eax, eax
call fcn.00451725
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b4], edx
mov ecx, dword [esp + 0x1dc]
mov edi, esi
mov esi, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0xb8]
mov dword [esp + 0x190], ecx
mov ecx, dword [esp + 0x1e4]
test ecx, ecx
je 0x4479c6
xor eax, eax
mov byte [esp + 0x1f], al
xor eax, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x18c], ebp
test ebx, ebx
jne 0x4466b0
mov ebx, edx
mov edx, dword [edx]
mov dword [esp + 0x1a8], edx
lea edx, [ebx + 4]
mov dword [esp + 0x1b4], edx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call fcn.00441f50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x447916
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x9c]
xor eax, eax
call fcn.00451700
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [esp + 0x1e0]
mov esi, dword [esp + 0x190]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18c]
xor edi, edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1c], al
xchg edi, eax
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1d], al
xchg edi, eax
xor edi, edi
mov dword [esp + 0x2c], edi
jmp 0x4467b3
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1a4], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b0], 0
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1c8], 0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
sete bl
mov ebp, dword [esp + 0x1dc]
mov edi, eax
mov byte [esp + 0x1c], bl
mov eax, esi
mov esi, dword [esp + 0x19c]
mov ebp, dword [esp + 0x1e0]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x1dc]
xor edx, edx
cmp edi, ecx
jge 0x44790b
mov dword [esp + 0x38], edi
mov dword [esp + 0x1e0], ebp
mov ebp, dword [esp + 0x1a0]
mov edi, dword [esp + 0x1a4]
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x4478fe
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x1b8]
test ebx, ebx
je 0x4477a8
mov dword [esp + 0x178], edi
mov ebx, dword [esp + 0x1dc]
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x4477a1
cmp dword [edi], ebx
xchg edi, ebx
sete bl
xchg edi, ebx
movzx ebx, byte [ebp + 0x20]
cmp bl, 2
jne 0x44775c
mov ebx, 1
mov dword [esp + 0x5c], eax
mov dword [esp + 0x19c], esi
mov dword [esp + 0x180], ebp
test bl, bl
je 0x447573
mov dword [esp + 0x1b0], 0
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x174], ebx
mov dword [esp + 0x184], edi
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1bc], ebx
add ebx, 0xfffffffc
mov dword [esp + 0x1bc], ebx
mov ebx, dword [esp + 0x1ec]
test ebx, ebx
je 0x447556
mov edi, dword [esp + 0x1b8]
mov dword [esp + 0x1c0], edi
je 0x44754f
cmp dword [ebp + 8], 0x80000000
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [ebp + 8]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c8], 0
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4474ea
mov esi, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], esi
movzx esi, byte [esp + 0x1c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4474e1
mov edi, dword [esp + 0x1a0]
mov edx, esi
mov esi, dword [edi + 0xc]
test esi, esi
je 0x4474cf
mov edi, dword [edi]
lea esi, [esi + edi + 1]
mov dword [esp + 0x1ac], esi
test ebx, ebx
jne 0x44746d
mov esi, dword [esp + 0x1e4]
test esi, esi
je 0x447458
mov edi, dword [esp + 0x1a8]
mov dword [esp + 0x20], edi
mov ebx, dword [esp + 0x38]
test ebx, ebx
jle 0x447431
cmp dword [ebp], edi
jae 0x446941
test dl, dl
je 0x447422
cmp byte [ebp + 0x23], 4
ja 0x447401
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x74], edi
mov edi, dword [esp + 0x198]
test edi, edi
jne 0x44728b
movzx edi, byte [esp + 0x1d]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x28], edi
movzx edi, byte [esp + 0x1d]
cmp byte [ebp + 0x20], 0x14
jne 0x4469a7
xchg edi, eax
cmp al, 0x12
xchg edi, eax
jne 0x44726f
mov edi, 1
xchg edi, eax
test al, al
xchg edi, eax
je 0x447263
mov edi, dword [esp + 0x1e0]
test edi, edi
jle 0x44723f
dec edi
movzx esi, byte [ebp + 0x20]
dec ebx
mov dword [esp + 0x1e0], edi
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x44722f
mov dword [esp + 0x70], ebx
mov edi, dword [esp + 0x1a8]
test ebx, ebx
jle 0x44720e
cmp dword [ebp], edi
jae 0x4469f2
test dl, dl
je 0x447208
cmp byte [ebp + 0x23], 4
ja 0x4471f0
xor edx, edx
test edx, edx
jne 0x446f6f
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x1f4]
test edi, 1
je 0x446f09
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x446b4d
movzx esi, byte [ebp + 0x20]
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
inc ebx
cmp byte [ebp + 0x20], 0xe
jne 0x446b3f
test eax, eax
jle 0x446b3f
mov edi, dword [esp + 0x19c]
mov esi, dword [edi + eax*4 - 4]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x1e0]
test esi, esi
jne 0x446b33
mov esi, dword [esp + 0x1ec]
test esi, esi
je 0x446ada
lea esi, [eax - 1]
movzx ebp, byte [ebp + 0x20]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
mov eax, ebx
mov ebx, dword [esp + 0x184]
test ebx, ebx
jne 0x44672f
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x446ad6
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x446ac8
cmp edx, ecx
jge 0x446ac8
mov eax, dword [esp + 0x1b4]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [ebx + 0x40]
cmp eax, ebp
jne 0x447a21
mov dword [esp + 0x1f8], edx
add esp, 0x1cc
ret
mov edx, eax
jmp 0x446aa0
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
movzx edx, byte [esp + 0x1f]
mov byte [esp + 4], dl
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00447dd0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1ec]
mov edi, dword [esp + 0x19c]
jmp 0x446a7a
mov esi, dword [esp + 0x1ec]
jmp 0x446a7a
mov edi, dword [esp + 0x19c]
mov esi, eax
jmp 0x446a7d
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00442540
mov eax, dword [esp + 8]
mov dword [esp + 0x160], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
call fcn.004427c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x16c], edx
mov ebx, dword [esp + 0x30]
cmp ebx, 0xf
je 0x446ec3
mov ebp, dword [esp + 0x160]
mov dword [esp + 0x160], ebp
mov dword [esp + 0x30], ebx
call fcn.0042c290
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0042cb30
lea eax, [0x7a536a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042cb30
call fcn.0042c300
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x198], eax
xor ecx, ecx
jmp 0x446c4d
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x74], edx
call fcn.0042c290
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
call fcn.0042c300
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x198]
mov edx, dword [esp + 0x1c4]
shr edx, 2
cmp ecx, edx
jae 0x446cb5
cmp ecx, 0xa
jae 0x446c95
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x446c18
call fcn.0042c290
lea eax, [0x7a53c3]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042cb30
call fcn.0042c300
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x4c]
jmp 0x446c18
call fcn.0042c290
lea eax, [0x7a5dfd]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042cb30
call fcn.0042c300
call fcn.0042c290
lea eax, [0x7a53bb]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042cb30
call fcn.0042c300
call fcn.0042c290
lea eax, [0x7a538d]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042cb30
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0042cb30
lea eax, [0x7a5376]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042cb30
mov eax, dword [esp + 0x44]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042c970
call fcn.0042c300
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x180]
mov edx, dword [ecx]
cmp eax, edx
ja 0x446e75
mov eax, dword [esp + 0x1dc]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x446e6c
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x446e63
cmp dword [edx + 0x4c], eax
jne 0x446e54
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 0x64], edx
call fcn.0042c290
lea eax, [0x7a59b7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042cb30
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
lea eax, [0x7a59d7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042cb30
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
lea eax, [0x7a59cf]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042cb30
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
call fcn.0042c300
call fcn.0042c290
call fcn.0042c4b0
call fcn.0042c300
mov eax, dword [esp + 0x2c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x446a34
mov edx, dword [esp + 0x78]
cmp edx, 2
jge 0x446d73
jmp 0x446e1c
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x446e5b
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x446e5b
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], edx
call fcn.0042c290
lea eax, [0x7a5399]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042cb30
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x68]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
call fcn.0042c300
mov ecx, dword [esp + 0x180]
jmp 0x446d4d
mov eax, dword [esp + 0x160]
mov dword [esp], eax
lea ecx, [0x7a96f4]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00402300
movzx eax, byte [esp + 0xc]
test al, al
je 0x446ef9
lea ebp, [0x7a60cd]
mov ebx, 5
jmp 0x446bc4
mov ebp, dword [esp + 0x160]
mov ebx, dword [esp + 0x30]
jmp 0x446bc4
movzx eax, byte [ebp + 0x20]
mov dword [esp], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1dc]
mov dword [esp + 8], ebx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0xc], al
xchg edi, eax
mov byte [esp + 0xd], al
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.00448b60
movzx esi, byte [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x446a2a
mov dword [esp + 0x198], edx
jmp 0x446fa6
mov ebx, dword [esp + 0x1a0]
lea eax, [eax + eax*4]
mov ebp, eax
shl eax, 2
mov edx, dword [esp + 0x198]
movzx eax, byte [edx + eax + 2]
mov edi, dword [edx + ebp*4 + 0x10]
add edi, dword [ebx]
mov ebp, dword [esp + 0x180]
mov esi, eax
mov dword [esp + 0x2c], ecx
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
call fcn.00442970
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4471c8
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x1f4]
test edx, 1
je 0x447151
mov ecx, 1
test cl, cl
jne 0x447017
mov ecx, dword [esp + 0x2c]
cmp eax, 0x100000
jb 0x446f78
jmp 0x447baa
cmp eax, 0x100000
jae 0x447bb4
lea ecx, [eax + eax*4]
mov edx, dword [esp + 0x198]
mov ecx, dword [edx + ecx*4 + 0xc]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.004425c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x15c], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.004427c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
call fcn.0042c290
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0042cb30
lea eax, [0x7a6212]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0042cb30
call fcn.0042c300
call fcn.0042c290
lea eax, [0x7a538d]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042cb30
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0042cb30
lea eax, [0x7a5376]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042cb30
mov eax, dword [esp + 0x40]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042c970
call fcn.0042c4b0
call fcn.0042c300
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x447007
cmp eax, 0x100000
jae 0x447bbe
lea ecx, [eax + eax*4]
shl ecx, 2
mov edx, dword [esp + 0x198]
movzx ecx, byte [edx + ecx + 2]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1dc]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov byte [esp + 0xd], cl
movzx ecx, byte [esp + 0x1d]
mov byte [esp + 0xe], cl
call fcn.00448b60
movzx ecx, byte [esp + 0x10]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x446fff
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
jmp 0x446a0a
lea edx, [ebp + 0x23]
mov ecx, dword [ebp + 0x1c]
lea ecx, [edx + ecx*4 + 0x11]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x1e8]
jmp 0x4469fe
dec edi
jmp 0x4469f2
mov ebx, dword [esp + 0x1f4]
test ebx, 2
jne 0x447226
mov ebx, dword [esp + 0x70]
jmp 0x4469e5
mov ebx, dword [esp + 0x70]
jmp 0x4469f2
mov edi, dword [esp + 0x1f4]
mov edx, dword [esp + 0x2c]
jmp 0x446a38
cmp ebx, ecx
jge 0x447257
cmp ebx, 0x100000
jae 0x447bc8
mov ebp, dword [esp + 0x28]
mov dword [esi + ebx*4], ebp
inc ebx
mov ebp, dword [esp + 0x180]
jmp 0x4469b7
mov edi, dword [esp + 0x1e0]
jmp 0x4469b7
xchg edi, eax
cmp al, 9
xchg edi, eax
je 0x446998
xchg edi, eax
cmp al, 0x13
xchg edi, eax
xchg edi, ebx
sete bl
xchg edi, ebx
jmp 0x44699d
mov dword [esp + 0x8c], eax
movzx eax, byte [esp + 0x1d]
mov byte [esp + 0x1e], al
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov byte [esp + 0x7c], dl
mov edx, dword [esp + 0x74]
mov dword [esp + 0x20], edx
jmp 0x4472e9
mov esi, dword [esp + 0x1a0]
movzx edx, byte [ebp + edx + 2]
mov edi, dword [ebp + ebx*4 + 0x10]
add edi, dword [esi]
lea esi, [edi + 1]
mov ebp, dword [esp + 0x180]
mov dword [esp + 0x20], edi
mov byte [esp + 0x1e], dl
mov ebx, ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x70], ebx
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0x10], ecx
call fcn.00442970
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4473d5
cmp eax, 0x100000
jae 0x447bde
lea edx, [eax + eax*4]
mov ebx, edx
shl edx, 2
mov ebp, dword [esp + 0x198]
movzx esi, byte [ebp + edx + 2]
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x447362
movzx esi, byte [esp + 0x1e]
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x4473c4
mov eax, 1
test al, al
je 0x4473b4
mov esi, dword [esp + 0x1e0]
test esi, esi
jle 0x447379
lea eax, [esi - 1]
mov ecx, dword [esp + 0x70]
jmp 0x4472b8
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x1e8]
cmp eax, edi
jge 0x4473ab
cmp eax, 0x100000
jae 0x447bd4
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x1e4]
mov dword [edi + eax*4], ecx
inc eax
mov ecx, eax
mov eax, esi
jmp 0x4472b8
mov edi, dword [esp + 0x1e4]
jmp 0x4473a2
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1e0]
jmp 0x4472b8
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x447359
xchg esi, eax
cmp al, 0x13
xchg esi, eax
sete al
jmp 0x44735e
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1e4]
movzx edi, byte [esp + 0x1e]
mov ebx, dword [esp + 0x70]
jmp 0x446987
lea edx, [ebp + 0x23]
mov eax, dword [ebp + 0x1c]
lea eax, [edx + eax*4 + 0x11]
mov eax, dword [eax]
movzx edx, byte [esp + 0x1c]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x5c]
jmp 0x446962
lea edx, [edi - 1]
mov edi, edx
movzx edx, byte [esp + 0x1c]
jmp 0x446941
mov esi, dword [esp + 0x1f4]
test esi, 2
jne 0x44744c
mov esi, dword [esp + 0x1e4]
jmp 0x446934
mov esi, dword [esp + 0x1e4]
jmp 0x446941
mov ebx, dword [esp + 0x38]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x1e0]
jmp 0x4469bc
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1f0]
mov dword [esp + 4], ecx
mov ebp, dword [ebx]
mov edx, ebx
call ebp
movzx eax, byte [esp + 8]
test al, al
je 0x4474bd
mov esi, dword [esp + 0x1e4]
test esi, esi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x446917
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1f8], eax
add esp, 0x1cc
ret
mov dword [esp + 0x1ac], 0
test ebx, ebx
jmp 0x446908
test ebx, ebx
mov edx, esi
jmp 0x446908
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 8], ecx
test ebx, ebx
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov dword [esp + 0x10], edx
call fcn.00447c50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x4468c8
xor edi, edi
jmp 0x4468a9
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x4468c8
test ebx, ebx
mov edi, dword [esp + 0x184]
jmp 0x446887
mov ebx, dword [esp + 0x1b0]
test ebx, ebx
jne 0x447755
mov ebx, dword [esp + 0x1b8]
add ebx, 0xfffffffc
mov edi, ebx
mov ebx, dword [ebx]
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
call fcn.00441f50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4475df
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x19c]
mov ebx, eax
mov edi, ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
jmp 0x446852
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x447745
mov ebp, dword [esp + 0x1dc]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x88]
xchg esi, eax
test al, al
xchg esi, eax
je 0x44773c
mov esi, dword [esp + 0x180]
cmp byte [esi + 0x20], 9
jne 0x447735
xor edx, edx
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ecx
mov edi, dword [esp + 0x1ec]
test edi, edi
jne 0x447644
test dl, dl
jne 0x447644
test edi, edi
je 0x4475b6
jmp 0x447be8
mov dword [esp], esi
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00442540
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x194], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 0x74], edx
call fcn.0042c290
lea eax, [0x7b307d]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0042cb30
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.0042cb30
lea eax, [0x7a86ad]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.0042cb30
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
call fcn.0042c4b0
call fcn.0042c300
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1a0]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
call fcn.00449320
mov edi, dword [esp + 0x1ec]
test edi, edi
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx ebx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x447639
mov edx, ebx
jmp 0x44761a
mov esi, dword [esp + 0x180]
jmp 0x447735
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x447735
xor edi, edi
jmp 0x447597
cmp bl, 6
je 0x446824
cmp bl, 4
je 0x446824
cmp bl, 5
je 0x446824
cmp bl, 7
je 0x446824
cmp bl, 0x10
je 0x446824
xchg edi, eax
test al, al
xchg edi, eax
je 0x44779a
cmp bl, 8
sete bl
jmp 0x446829
xor ebx, ebx
jmp 0x446829
xor edi, edi
jmp 0x446817
mov ebx, dword [esp + 0x1f4]
test ebx, 4
je 0x4478f5
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x18]
cmp dword [edx], ecx
jne 0x4478ec
mov edx, dword [edx + 0x4c]
test edx, edx
je 0x4478ec
movzx ebx, byte [ebp + 0x20]
cmp bl, 5
je 0x447896
cmp bl, 0xd
jne 0x44788d
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x17c], edi
mov dword [esp + 0x188], ebp
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0xc], ecx
call fcn.00442820
mov eax, dword [esp + 0x1b4]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1b8], eax
add eax, 4
mov dword [esp + 0x1b8], eax
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov edi, dword [esp + 0x17c]
mov ebp, dword [esp + 0x188]
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x19c]
jmp 0x4467f5
mov edx, eax
mov eax, esi
jmp 0x44780a
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp], eax
call fcn.00441f50
mov ebp, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esp + 0x1a0], ebp
mov dword [esp + 0x1a4], edi
mov ecx, dword [esp + 0x1dc]
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
jmp 0x44780a
mov edx, eax
mov eax, esi
jmp 0x44780a
mov ecx, dword [esp + 0x1dc]
jmp 0x4478ec
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
jmp 0x446a97
mov edx, dword [esp + 0x2c]
mov eax, edi
jmp 0x446a97
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x4479b5
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x74], eax
call fcn.0042c290
lea eax, [0x7abceb]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042cb30
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
call fcn.0042c4b0
call fcn.0042c300
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x1a0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00449320
mov eax, dword [esp + 0x1ec]
test eax, eax
jne 0x447bfe
mov dword [esp + 0x1f8], 0
add esp, 0x1cc
ret
movzx ecx, byte [esp + 0x1f]
test cl, cl
jne 0x447925
test eax, eax
jmp 0x44799d
mov edi, dword [esp + 0x1ec]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x78]
mov byte [esp + 0x1f], cl
mov ecx, dword [esp + 0x1e4]
jmp 0x44668c
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
jmp 0x446637
mov ecx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x1d0]
xor ebp, ebp
jmp 0x446637
mov edx, dword [esp + 0x1d4]
jmp 0x4479f7
mov ecx, dword [esp + 0x1ec]
jmp 0x4465d1
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x38], edx
mov eax, dword [ebx + 0x54]
mov dword [esp + 0x60], eax
mov ecx, dword [ebx + 0x50]
mov dword [esp + 0x78], ecx
call fcn.0042c290
lea eax, [0x7a79ad]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042cb30
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0042c970
lea eax, [0x7a7bc1]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0042cb30
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
lea eax, [0x7a5d8f]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042cb30
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
call fcn.0042c4b0
call fcn.0042c300
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax]
mov dword [esp + 0x74], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x68], eax
call fcn.0042c290
lea eax, [0x7a6d98]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.0042cb30
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
lea eax, [0x7a536f]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042cb30
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042ca00
lea eax, [0x7a5b3b]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042cb30
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042c970
lea eax, [0x7a5d7b]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042cb30
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042c970
call fcn.0042c4b0
call fcn.0042c300
lea eax, [0x7b3815]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0042b460
mov ecx, 0x100000
call fcn.00451500
mov ecx, 0x100000
call fcn.00451500
mov ecx, 0x100000
call fcn.00451500
mov eax, ebx
mov ecx, 0x100000
call fcn.00451500
mov ecx, 0x100000
call fcn.00451500
mov ecx, 0x100000
call fcn.00451500
lea eax, [0x7aa535]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0042b460
lea eax, [0x7a7a1b]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042b460
lea eax, [0x7ba9b4]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.0042b460
lea eax, [0x7ba39f]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.0042b460
nop
call fcn.0044fc40
jmp fcn.00446590