Function at 0x44f400
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8c8600]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x45023f
sub esp, 0xc4
mov eax, dword [esp + 0xcc]
test byte [eax], al
mov ecx, dword [esp + 0xc8]
test byte [ecx], al
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
lea ebp, [ebx + edx]
mov dword [esp + 0x2c], ebp
lea ebx, [ebx + edx - 0x20000]
neg ebx
neg ebx
mov esi, ebp
shl ebp, 1
sar ebx, 0x1f
and ebx, ebp
mov dword [esp + 0x6c], ebx
mov ebp, dword [0x8c8628]
mov edi, dword [0x8c862c]
lea edx, [eax + ebx]
mov dword [esp + 0x80], edx
test edi, edi
xchg edi, ebx
sete bl
xchg edi, ebx
seta bl
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
and ebp, edi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x44f498
xor ebx, ebx
xor ebp, ebp
jmp 0x44f4c1
call fcn.00477150
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x80]
mov esi, dword [esp + 0x2c]
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebx
xor edi, edi
xor edi, edi
mov dword [esp + 0x28], edi
jmp 0x44f4e0
inc edi
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x24]
cmp edi, esi
jge 0x44f57d
mov dword [esp + 0x44], edi
lea ebp, [ecx + edi*8]
mov ebp, dword [ebp]
test ebp, ebp
jne 0x44f51d
mov ebp, dword [0x8c88d8]
lea ebx, [ecx + edi*8 + 4]
test ebp, ebp
je 0x44f511
mov ebp, dword [ebx]
call fcn.004772e0
mov dword [edi], ebp
mov edi, dword [esp + 0x44]
mov dword [ebx], 0
mov ebx, dword [esp + 0x28]
jmp 0x44f4d3
mov ebp, dword [ebp + 0x14]
test ebp, ebp
je 0x44f52c
mov dword [esp], ebp
call fcn.0045bc50
mov eax, dword [esp + 0x28]
lea ecx, [eax + 1]
mov dword [esp + 0x68], ecx
mov dword [esp], ecx
call fcn.00471780
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xcc]
movzx edx, word [ecx + eax*2]
mov ebx, dword [esp + 0x28]
mov word [ecx + ebx*2], dx
mov edx, dword [esp + 0x44]
mov word [ecx + eax*2], dx
mov eax, ecx
mov ecx, dword [esp + 0xc8]
mov esi, dword [esp + 0x2c]
mov edi, edx
mov ebx, dword [esp + 0x68]
mov edx, dword [esp + 0x80]
jmp 0x44f4d3
mov edi, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x5c]
jmp 0x44f5ae
mov ebx, dword [esp + 0x40]
movzx esi, word [eax + ebx*2]
mov word [edx + ebp*2], si
inc ebx
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x40]
cmp ebp, edi
jge 0x44f5cb
movzx ebx, word [eax + ebp*2]
lea ebx, [ecx + ebx*8]
mov ebx, dword [ebx]
mov dword [esp + 0x98], ebx
jmp 0x4501a7
lea ebp, [edi - 1]
jmp 0x44f5f0
mov eax, dword [esp + 0x34]
mov word [edx + eax*2], bx
dec ebp
mov eax, dword [esp + 0xcc]
mov ebx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
test ebp, ebp
jl 0x44f63c
mov dword [esp + 0x3c], ebp
movzx ebx, word [edx + ebp*2]
mov word [esp + 0x1e], bx
movzx edi, bx
lea edi, [ecx + edi*8]
mov esi, dword [esp + 0x6c]
movzx eax, word [eax + esi]
mov edi, dword [edi]
mov dword [esp + 0x94], edi
mov word [edx + ebp*2], ax
xor eax, eax
jmp 0x4500b2
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x80]
movzx ebx, word [esp + 0x1e]
mov ebp, dword [esp + 0x3c]
jmp 0x44f5d0
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
call fcn.0044f240
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xcc]
xor ebp, ebp
jmp 0x44f695
mov esi, dword [esp + 0x6c]
lea ebp, [esi + 1]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xcc]
cmp ebp, ecx
jge 0x44fa46
mov dword [esp + 0x6c], ebp
movzx esi, word [ebx + ebp*2]
mov dword [esp + 0x68], esi
lea edi, [edx + esi*8]
mov edi, dword [edi]
mov dword [esp + 0x90], edi
cmp eax, esi
jle 0x44f6eb
mov esi, dword [edi + 0x10]
test esi, esi
jne 0x45007c
lea eax, [edi + 0x24]
mov dword [esp], eax
call fcn.00407c50
mov eax, dword [esp + 4]
test eax, eax
jne 0x44f7c6
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
cmp dword [eax + 4], ecx
jbe 0x44f675
jmp 0x44f725
test byte [edi], al
lea eax, [edi + 0x2c]
mov dword [esp], eax
call fcn.00407c50
mov eax, dword [esp + 4]
test eax, eax
jne 0x44f9a0
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
test ecx, ecx
ja 0x44f8de
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x44f675
jmp 0x44f86c
mov ecx, dword [eax + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0046b470
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x18]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0xc8]
lea esi, [ebp + ebx*8 + 4]
mov esi, dword [esi]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.0046f590
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x1c]
inc ecx
mov dword [eax + 0x1c], ecx
cmp dword [eax + 4], ecx
jne 0x44f77d
mov dword [eax + 0x1c], 0
inc dword [eax]
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0044f2b0
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x68]
xor ebx, ebx
jmp 0x44fab7
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xc8]
lea ebx, [edx + ecx*8 + 4]
lea edi, [esp + 0x9c]
mov ebp, eax
xor eax, eax
call fcn.004773d9
lea ecx, [0x450250]
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xac], ecx
mov ecx, dword [ebx]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00406dc0
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x68]
xor ebx, ebx
jmp 0x44fab7
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0044f2b0
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xc8]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
test ecx, ecx
je 0x44f8cd
mov eax, dword [esp + 0x90]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00412190
mov eax, dword [esp + 0x68]
mov ecx, 0xffffffff
mov edx, 0xffffffff
xor ebx, ebx
jmp 0x44fab7
mov ecx, dword [eax + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0046b470
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xc8]
lea edx, [ecx + eax*8 + 4]
mov edx, dword [edx]
mov ebx, dword [esp + 8]
test edx, edx
je 0x44f924
mov dword [esp + 0x78], ebx
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0046f590
mov ebx, dword [esp + 0x78]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00412190
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x20]
inc ecx
mov dword [eax + 0x20], ecx
cmp dword [eax + 4], ecx
jne 0x44f954
mov dword [eax + 0x20], 0
dec dword [eax]
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0044f2b0
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x68]
mov ebx, 1
jmp 0x44fab7
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xc8]
lea ebx, [edx + ecx*8 + 4]
lea edi, [esp + 0x9c]
mov ebp, eax
xor eax, eax
call fcn.004773d9
lea ecx, [0x4502a0]
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xac], ecx
mov ecx, dword [ebx]
mov edx, dword [esp + 0x90]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004078b0
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x68]
mov ebx, 1
jmp 0x44fab7
movzx ebx, byte [esp + 0xdc]
test bl, bl
je 0x44fa7f
mov ebx, dword [0x8c8600]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0xc0]
test ebp, ebp
jne 0x450066
mov dword [esp + 0x88], ebx
lea ebp, [ebx + 0xc0]
xor esi, esi
jmp 0x44fb47
mov dword [esp], edx
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov edx, dword [esp + 0x80]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0044f2b0
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, 0xffffffff
xor ebx, ebx
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
test edx, edx
xchg edi, ebx
seta bl
xchg edi, ebx
and ebp, edi
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x44fb0b
mov byte [esp + 0x1b], bl
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x20]
sub edx, eax
mov dword [esp], edx
mov eax, dword [esp + 0x24]
sbb ecx, eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.0046fd50
mov eax, dword [esp + 0x48]
movzx ebx, byte [esp + 0x1b]
mov dword [esp + 0xe0], eax
mov byte [esp + 0xe4], bl
add esp, 0xc4
ret
mov edi, dword [esp + 0x6c]
lea esi, [edi + 1]
mov edi, dword [esp + 0x74]
lea ebp, [edi + 0x2c]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0x88]
cmp esi, ecx
jge 0x44fcb6
mov dword [esp + 0x6c], esi
mov dword [esp + 0x7c], ebp
mov eax, dword [esp + 0x80]
movzx ecx, word [eax + esi*2]
mov dword [esp + 0x68], ecx
lea ebx, [edx + ecx*8]
mov ebx, dword [ebx]
mov dword [esp + 0x90], ebx
call fcn.0043e5a0
mov eax, dword [esp]
test byte [eax], al
mov ecx, dword [0x8c88d8]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0xc8]
lea ebp, [ebx + edx*8 + 4]
mov esi, dword [esp + 0x24]
test esi, esi
xchg edi, ebx
setne bl
xchg edi, ebx
mov esi, dword [esp + 0x20]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or edi, esi
test ecx, ecx
je 0x44fbcf
mov ecx, edi
call fcn.004772f0
mov esi, dword [esp + 0x88]
mov dword [edi], esi
mov ebx, dword [eax]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0xc8]
mov edi, ecx
mov ecx, dword [esp + 0x88]
mov dword [eax], ecx
mov byte [eax + 0x24], 1
mov esi, dword [0x8c88d8]
mov ebp, dword [ebp]
test esi, esi
je 0x44fc01
mov esi, edi
call fcn.004772f0
mov dword [edi], ebp
mov ecx, dword [eax + 0xc]
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x88]
mov edi, esi
mov dword [eax + 0xc], ebp
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
xchg edi, eax
test al, al
xchg edi, eax
je 0x44fc26
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x1c], 0xffffffff
mov ebp, dword [0x8c88d8]
test ebp, ebp
jne 0x44fc3d
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x7c]
jmp 0x44fc5d
call fcn.00477310
mov ebp, dword [esp + 0x90]
mov dword [edi], ebp
mov esi, dword [eax + 0x34]
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov esi, dword [esp + 0x7c]
mov ecx, dword [esi]
mov dword [edi + 0xc], ecx
mov dword [esp + 0x74], eax
mov dword [eax + 0x34], ebp
mov dword [esi], eax
mov ecx, dword [esp + 0xd4]
cmp ecx, edx
jle 0x44fc85
test byte [ebp], al
lea ecx, [ebp + 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00407ba0
jmp 0x44fc97
test byte [ebp], al
lea ecx, [ebp + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00407ba0
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x44fb20
mov dword [esp], eax
call fcn.0045bdb0
jmp 0x44fb20
test byte [ebx], al
mov ebp, dword [0x8c88d8]
test ebp, ebp
je 0x44fccc
mov ebp, dword [ebx + 0x48]
call fcn.004772e0
mov dword [edi], ebp
mov dword [ebx + 0x48], 0
lea eax, [ebx + 0x71]
mov dword [esp], eax
mov byte [esp + 4], 1
call fcn.0047c120
lea eax, [0x7203c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov word [esp + 8], 0x309
mov dword [esp + 0xc], 1
call fcn.00470e40
mov eax, dword [esp + 0x88]
mov byte [eax + 0x70], 0
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov edx, dword [esp + 0x2c]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.0044f240
mov eax, dword [esp + 0x88]
lea ecx, [eax + 0xe0]
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0047c160
mov eax, dword [0x8c88d8]
mov ecx, dword [esp + 0x88]
mov edx, dword [ecx + 0x48]
test eax, eax
je 0x44fd80
mov eax, dword [ecx + 0x48]
call fcn.004772e0
mov dword [edi], eax
mov dword [ecx + 0x48], 0
mov eax, dword [ecx + 0xc0]
mov ebx, eax
jmp 0x44fda2
mov dword [eax + 0xc], 0
mov dword [eax + 0x34], 0
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x44fdc6
mov byte [eax + 0x24], 0
mov ebp, dword [0x8c88d8]
test ebp, ebp
je 0x44fd91
mov ebp, dword [eax + 0xc]
call fcn.004772f0
mov dword [edi], ebp
mov ebp, dword [eax + 0x34]
mov dword [edi + 4], ebp
jmp 0x44fd91
mov eax, dword [0x8c88d8]
test eax, eax
je 0x44fddd
mov eax, dword [ecx + 0xc0]
call fcn.004772e0
mov dword [edi], eax
mov dword [esp + 0xc0], edx
mov dword [ecx + 0xc0], 0
xor eax, eax
xor ecx, ecx
mov ebp, 0xffffffff
xor esi, esi
mov edi, 0xffffffff
mov eax, 0xffffffff
mov dword [esp + 0x4c], eax
xor eax, eax
jmp 0x44fe3e
mov dword [ebx + 0x2c], 0
mov dword [esp], ebx
call fcn.0043e820
mov eax, dword [esp + 0x6c]
inc eax
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x70]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x48]
movzx esi, byte [esp + 0x1c]
mov edi, dword [esp + 0x50]
xchg esi, eax
mov byte [esp + 0x1b], al
xchg esi, eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], edi
mov esi, dword [esp + 0x28]
cmp eax, esi
jge 0x44ff9d
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ebx
mov dword [esp + 0x8c], ecx
mov esi, dword [esp + 0x80]
movzx esi, word [esi + eax*2]
mov dword [esp + 0x68], esi
mov eax, dword [esp + 0xc8]
lea ecx, [eax + esi*8]
mov ebp, dword [ecx]
mov dword [esp + 0xbc], ebp
mov ebp, dword [ebp + 0x14]
lea eax, [eax + esi*8]
mov dword [esp + 0x84], eax
test ebp, ebp
je 0x44fed1
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.0045beb0
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x50]
cmp ebx, edx
jne 0x44ff0b
mov ecx, dword [ebx + 0x18]
mov ebp, dword [ebx + 0x1c]
test ebp, ebp
sete dl
setg al
test ecx, ecx
xchg esi, ebx
seta bl
xchg esi, ebx
and edx, esi
or eax, edx
test al, al
jne 0x44fefa
mov ebp, edi
mov ecx, dword [esp + 0x4c]
movzx esi, byte [ebx + 0x25]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x68]
jmp 0x44ff58
mov eax, dword [ecx]
mov ecx, dword [esp + 0xd4]
cmp ecx, esi
jle 0x44ff2b
test byte [eax], al
add eax, 0x2c
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00450310
jmp 0x44ff3c
test byte [eax], al
add eax, 0x24
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00450310
mov ebx, dword [esp + 0x70]
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x48]
movzx esi, byte [esp + 0x1b]
mov ebp, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
xchg esi, eax
mov byte [esp + 0x1c], al
xchg esi, eax
mov dword [esp + 0x48], edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ebp
mov edi, dword [0x8c88d8]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x70], eax
test edi, edi
je 0x44fe0b
mov edi, dword [ebx + 0x2c]
mov dword [esp + 0x64], edi
call fcn.004772e0
mov eax, dword [esp + 0x64]
mov dword [edi], eax
jmp 0x44fe0b
test ecx, ecx
je 0x450050
mov eax, dword [esp + 0xd4]
cmp eax, ebp
jle 0x44ffbd
movzx eax, byte [esp + 0x1b]
test al, al
je 0x45000a
xor eax, eax
jmp 0x44ffc2
movzx eax, byte [esp + 0x1b]
mov byte [esp + 0x1b], al
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x80]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.0044f2b0
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
movzx ebx, byte [esp + 0x1b]
jmp 0x44fab7
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
call fcn.0044f2b0
lea eax, [0x6ce200]
mov dword [esp], eax
lea eax, [0x733c18]
mov dword [esp + 4], eax
call fcn.00470a40
lea eax, [0x708640]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00470dd0
lea eax, [0x706c20]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00470dd0
mov esi, ecx
jmp 0x45000a
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x80]
movzx ecx, word [edx + eax*2]
mov ebx, dword [esp + 0x34]
mov word [edx + ebx*2], cx
mov ecx, dword [esp + 0xc8]
movzx ebx, word [esp + 0x1e]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x94]
mov dword [esp + 0x34], eax
shl eax, 1
lea esi, [eax + 1]
cmp ebp, esi
jle 0x44f5d0
add eax, 2
cmp ebp, eax
jle 0x45013b
mov dword [esp + 0x30], esi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x34]
lea ebx, [edx + eax*4 + 2]
movzx ebx, word [ebx]
lea ebx, [ecx + ebx*8]
mov ebx, dword [ebx]
mov dword [esp], ebx
call fcn.004502f0
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x80]
lea ebx, [edx + ecx*4 + 4]
movzx ebx, word [ebx]
mov ebp, dword [esp + 0xc8]
lea ebx, [ebp + ebx*8]
mov ebx, dword [ebx]
mov dword [esp], ebx
call fcn.004502f0
mov eax, dword [esp + 0x64]
cmp dword [esp + 4], eax
jbe 0x450130
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 0x68]
jmp 0x45013b
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x68], esi
mov dword [esp], edi
call fcn.004502f0
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x80]
movzx ebx, word [edx + ecx*2]
mov ebp, dword [esp + 0xc8]
lea ebx, [ebp + ebx*8]
mov ebx, dword [ebx]
mov dword [esp], ebx
call fcn.004502f0
mov eax, dword [esp + 0x64]
cmp dword [esp + 4], eax
ja 0x450080
jmp 0x44f623
lea esi, [ebp - 1]
shr esi, 0x1f
lea esi, [ebp + esi - 1]
sar esi, 1
movzx ebx, word [edx + esi*2]
mov word [edx + ebp*2], bx
mov ebx, dword [esp + 0x98]
mov ebp, esi
mov esi, dword [esp + 0x2c]
test ebp, ebp
jg 0x4501bb
mov dword [esp + 0x54], eax
xor eax, eax
mov byte [esp + 0x1d], al
mov eax, dword [esp + 0x54]
jmp 0x45022b
mov dword [esp + 0x38], ebp
lea eax, [ebp - 1]
shr eax, 0x1f
lea eax, [ebp + eax - 1]
and eax, 0xfffffffe
movzx eax, word [edx + eax]
lea eax, [ecx + eax*8]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.004502f0
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
call fcn.004502f0
mov eax, dword [esp + 0x64]
cmp dword [esp + 4], eax
seta al
mov ecx, dword [esp + 0xc8]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x98]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
mov byte [esp + 0x1d], al
mov eax, dword [esp + 0xcc]
movzx esi, byte [esp + 0x1d]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x450186
jmp 0x44f591
call fcn.00475ee0
jmp fcn.0044f400