Function at 0x43fea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x441249
sub esp, 0xc4
mov ebp, dword [esp + 0xc8]
test byte [ebp], al
mov edx, dword [esp + 0xd0]
cmp edx, 0x10000
ja 0x44123e
mov esi, dword [esp + 0xcc]
test byte [esi], al
mov ecx, edx
shl edx, 1
lea ebx, [ecx - 0x20000]
neg ebx
mov eax, ebx
neg ebx
sar ebx, 0x1f
and edx, ebx
mov ebx, esi
add esi, edx
cmp ecx, eax
ja 0x441235
mov dword [esp + 0x54], edx
mov dword [esp + 0x78], esi
xor eax, eax
jmp 0x43ff21
inc eax
mov edx, edi
mov ebx, dword [esp + 0xcc]
mov esi, dword [esp + 0x78]
cmp eax, ecx
jge 0x43ff97
jae 0x441230
mov edi, edx
lea edx, [eax + eax*2]
lea esi, [ebp + edx*8]
shl edx, 3
mov ebx, dword [ebp + edx]
test ebx, ebx
jne 0x43ff13
movzx edx, word [ebp + edx + 8]
cmp dx, 3
je 0x43ff13
mov edx, dword [0xc98a20]
test edx, edx
jne 0x43ff6e
mov edx, edi
mov edi, esi
mov ebx, eax
xor eax, eax
call fcn.00459c4a
mov eax, ebx
mov ecx, dword [esp + 0xd0]
mov edi, edx
jmp 0x43ff13
mov dword [esp + 0x44], eax
lea eax, [0x757620]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.00410f00
xor eax, eax
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0xc8]
jmp 0x43ff61
mov edi, dword [0xc98844]
test edi, edi
mov eax, edx
seta dl
mov esi, dword [0xc98840]
test esi, esi
xchg esi, ebx
seta bl
xchg esi, ebx
test edi, edi
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, esi
or edi, edx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4410d2
xor edx, edx
xor esi, esi
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], esi
mov edi, 1
jmp 0x43fffa
mov word [ebx + eax*2], bp
mov word [ebx + edx*2], ax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0xc8]
mov edi, esi
mov esi, dword [esp + 0x24]
cmp edi, ecx
jge 0x440077
mov dword [esp + 0x38], edi
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
lea esi, [edi + 1]
mov ebp, dword [edx + 0x90]
mov dword [esp + 0x28], ebp
mov edi, dword [edx + 0x94]
shl ebp, 0x11
mov ebx, dword [esp + 0x28]
xor ebp, ebx
mov ebx, edi
xor edi, ebp
shr ebp, 7
xor ebp, edi
mov edi, ebx
shr ebx, 0x10
xor ebx, ebp
lea ebp, [edi + ebx]
mov eax, ebp
mov ebp, edx
mul esi
mov dword [ebp + 0x90], edi
mov dword [ebp + 0x94], ebx
cmp edx, ecx
jae 0x441220
mov ebx, dword [esp + 0xcc]
movzx ebp, word [ebx + edx*2]
mov eax, dword [esp + 0x38]
cmp eax, ecx
jb 0x43ffdd
jmp 0x44121b
mov edi, dword [esp + 0x78]
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x58]
jmp 0x440130
movzx ebx, word [esp + 0x1e]
mov word [edi + edx*2], bx
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x54]
mov ebx, dword [esp + 0xcc]
mov esi, edx
mov edx, dword [esp + 0x54]
test edx, edx
jle 0x4400f6
lea ebx, [edx - 1]
shr ebx, 0x1f
lea ebx, [edx + ebx - 1]
sar ebx, 1
cmp ebx, ecx
jae 0x441206
mov dword [esp + 0x54], ebx
movzx ebx, word [edi + ebx*2]
mov word [esp + 0x1e], bx
movzx ebx, bx
cmp ebx, ecx
jae 0x4411ff
lea ebx, [ebx + ebx*2]
shl ebx, 3
mov ebx, dword [ebp + ebx]
cmp ebx, esi
jae 0x4400f6
cmp edx, ecx
jb 0x44008e
jmp 0x4411f8
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0xcc]
movzx ebp, word [esi + ebx*2]
cmp edx, ecx
jae 0x4411f1
mov word [edi + edx*2], bp
lea edx, [ebx + 1]
mov ebx, dword [esp + 0xc8]
mov ebx, esi
mov ebp, dword [esp + 0xc8]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x20]
mov edx, dword [esp + 0x34]
cmp edx, ecx
jge 0x440160
jae 0x441214
movzx esi, word [ebx + edx*2]
cmp esi, ecx
jae 0x44120d
lea esi, [esi + esi*2]
shl esi, 3
mov esi, dword [ebp + esi]
mov dword [esp + 0x90], esi
jmp 0x4400af
lea edx, [ecx - 1]
jmp 0x440256
mov word [edi + edx*2], bx
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x2c]
mov ebp, esi
mov esi, ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x30], ebx
shl ebx, 1
lea esi, [ebx + 1]
cmp esi, edx
jge 0x4402ac
mov dword [esp + 0x2c], esi
lea ebp, [ebx + 2]
cmp ebp, edx
jge 0x4402a3
cmp esi, ecx
jae 0x4411dc
movzx edx, word [edi + ebx*2 + 2]
cmp edx, ecx
jae 0x4411d5
lea edx, [edx + edx*2]
shl edx, 3
mov esi, dword [esp + 0xc8]
mov edx, dword [edx + esi]
cmp ebp, ecx
jae 0x4411ce
movzx ebx, word [edi + ebx*2 + 4]
cmp ebx, ecx
jae 0x4411c7
lea ebx, [ebx + ebx*2]
shl ebx, 3
mov ebx, dword [ebx + esi]
cmp edx, ebx
jae 0x44029a
mov edx, dword [esp + 0x84]
cmp ebp, ecx
jae 0x4411c0
mov dword [esp + 0x2c], ebp
movzx ebx, word [edi + ebp*2]
movzx ebp, bx
cmp ebp, ecx
jae 0x4411b9
lea ebp, [ebp + ebp*2]
shl ebp, 3
mov ebp, dword [esi + ebp]
cmp edx, ebp
jae 0x44022f
mov edx, dword [esp + 0x30]
cmp edx, ecx
jb 0x440168
jmp 0x4411b2
mov edx, dword [esp + 0x30]
cmp edx, ecx
jae 0x4411ab
movzx ebx, word [esp + 0x1c]
mov word [edi + edx*2], bx
mov edx, dword [esp + 0x40]
dec edx
mov ebx, dword [esp + 0xcc]
mov ebp, esi
mov esi, dword [esp + 0x24]
test edx, edx
jl 0x4402b3
cmp edx, ecx
jae 0x4411ea
movzx esi, word [edi + edx*2]
mov word [esp + 0x1c], si
movzx esi, si
cmp esi, ecx
jae 0x4411e3
mov dword [esp + 0x40], edx
lea esi, [esi + esi*2]
shl esi, 3
mov esi, dword [ebp + esi]
mov dword [esp + 0x84], esi
movzx ebx, word [ebx + eax]
mov word [edi + edx*2], bx
xor ebx, ebx
jmp 0x440183
mov ebp, dword [esp + 0x2c]
jmp 0x4401ee
mov esi, dword [esp + 0xc8]
jmp 0x44029a
mov esi, ebp
jmp 0x44022f
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
call fcn.0043fcd0
jmp 0x441003
inc eax
mov edx, dword [esp + 0xd0]
mov ebp, edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x80], ecx
cmp eax, edx
jge 0x44075e
jae 0x4411a4
mov edi, ebp
movzx ebp, word [ebp + eax*2]
cmp ebp, edx
jae 0x44119b
mov dword [esp + 0x3c], eax
mov dword [esp + 0x54], ebp
lea edx, [ebp + ebp*2]
lea ebp, [ebx + edx*8]
mov dword [esp + 0xa4], ebp
shl edx, 3
mov dword [esp + 0x50], edx
mov ebp, dword [ebx + edx]
mov dword [esp + 0x8c], ebp
movzx edx, word [ebx + edx + 8]
cmp dx, 1
ja 0x4405cd
test dx, dx
je 0x4402d4
test byte [ebp], al
lea eax, [ebp + 0x28]
mov dword [esp], eax
call fcn.004059e0
mov eax, dword [esp + 4]
test eax, eax
jne 0x440527
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx]
test ebx, ebx
ja 0x440473
mov ebx, dword [edx + 0x10]
test ebx, ebx
jne 0x440399
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0xc8]
mov edi, dword [esp + 0xcc]
mov esi, ecx
mov ecx, eax
mov eax, dword [esp + 0x3c]
jmp 0x4402d4
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov ecx, dword [esp + 0xd0]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
call fcn.0043fd60
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xc8]
mov eax, dword [ecx + eax + 4]
test eax, eax
jne 0x440458
mov eax, dword [esp + 0xa4]
xor ecx, ecx
mov edx, dword [esp + 0x54]
mov ebx, dword [eax + 0x10]
test ebx, ebx
xchg ebp, ebx
seta bl
xchg ebp, ebx
mov eax, dword [eax + 0x14]
test eax, eax
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
setg bl
xchg edi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x440425
mov dword [esp + 0xd4], edx
mov byte [esp + 0xd8], cl
add esp, 0xc4
ret
mov byte [esp + 0x1b], cl
mov dword [esp + 0x48], edx
mov ecx, dword [esp + 0x20]
sub ebx, ecx
mov dword [esp], ebx
mov ecx, dword [esp + 0x24]
sbb eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
call fcn.00429090
movzx ecx, byte [esp + 0x1b]
mov edx, dword [esp + 0x48]
jmp 0x440410
mov ecx, dword [esp + 0x8c]
mov ecx, dword [ecx + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00410f00
jmp 0x4403da
nop
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0xc8]
mov eax, dword [ecx + eax + 4]
movzx ebx, word [edx + 0xc]
imul ebx, dword [edx + 0x1c]
add ebx, dword [edx + 8]
test eax, eax
jne 0x440500
mov eax, dword [edx + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00410f00
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 0x1c]
inc ecx
mov dword [eax + 0x1c], ecx
cmp dword [eax + 4], ecx
jne 0x4404bb
mov dword [eax + 0x1c], 0
dec dword [eax]
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call fcn.0043fd60
mov eax, dword [esp + 0xa4]
mov ecx, 1
mov edx, dword [esp + 0x54]
jmp 0x4403e7
mov dword [esp + 0x60], ebx
mov ecx, dword [edx + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00410ad0
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x60]
jmp 0x440492
mov dword [esp + 0x70], eax
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.00459c49
lea ecx, [0x4579d0]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0xd0]
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x50]
mov ecx, dword [ecx + edx + 4]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.004055d0
mov eax, dword [esp + 0xa4]
mov ecx, 1
mov edx, dword [esp + 0x54]
jmp 0x4403e7
cmp dx, 2
je 0x4405f2
cmp dx, 3
jne 0x4405e9
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x54]
jmp 0x44037e
mov eax, ecx
mov ecx, esi
jmp 0x44037e
mov edx, dword [ebp + 0x10]
test edx, edx
jne 0x44115c
lea eax, [ebp + 0x20]
mov dword [esp], eax
call fcn.004059e0
mov eax, dword [esp + 4]
test eax, eax
jne 0x4406bb
mov edx, dword [esp + 0x8c]
mov ebx, dword [edx + 4]
cmp dword [edx], ebx
jb 0x440632
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x48]
jmp 0x44037e
mov eax, dword [edx + 0x14]
mov ecx, dword [esp + 0x50]
mov ebx, dword [esp + 0xc8]
mov ecx, dword [ebx + ecx + 4]
movzx ebp, word [edx + 0xc]
imul ebp, dword [edx + 0x18]
add ebp, dword [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00410ad0
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 0x18]
inc ecx
mov dword [eax + 0x18], ecx
cmp dword [eax + 4], ecx
jne 0x440679
mov dword [eax + 0x18], 0
inc dword [eax]
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call fcn.0043fd60
mov eax, dword [esp + 0xa4]
xor ecx, ecx
mov edx, dword [esp + 0x54]
jmp 0x4403e7
mov dword [esp + 0x70], eax
lea edi, [esp + 0xa8]
xor eax, eax
call fcn.00459c49
lea ecx, [0x457a20]
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0xac], ecx
mov edx, dword [esp + 0xd0]
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x50]
mov ecx, dword [ecx + edx + 4]
mov edx, dword [esp + 0x8c]
mov dword [esp], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00404b80
mov eax, dword [esp + 0xa4]
xor ecx, ecx
mov edx, dword [esp + 0x54]
jmp 0x4403e7
test ecx, ecx
jne 0x4410a0
mov esi, dword fs:[0x14]
mov esi, dword [esi]
mov eax, ebp
mov ebp, dword [esi + 0xb4]
test ebp, ebp
jne 0x441146
mov dword [esp + 0x7c], esi
lea ebp, [esi + 0xb4]
mov dword [esp + 0xa0], ebp
mov ecx, dword [esp + 0x78]
mov edi, ebp
xor ebp, ebp
mov dword [esp + 0x54], ebp
mov ebp, edi
jmp 0x4407b1
mov esi, dword [esp + 0x54]
inc esi
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x7c]
mov esi, dword [esp + 0x54]
cmp esi, edx
jge 0x440ac7
movzx esi, word [ecx + esi*2]
cmp esi, edx
jae 0x44113d
lea esi, [esi + esi*2]
shl esi, 3
mov dword [esp + 0x50], esi
movzx esi, word [ebx + esi + 8]
test si, si
je 0x4407a4
mov dword [esp + 0x74], ebp
mov eax, dword [esp + 0x50]
mov ecx, dword [ebx + eax]
mov dword [esp + 0x88], ecx
call fcn.00433940
mov eax, dword [esp]
test byte [eax], al
mov ecx, dword [esp + 0x24]
test ecx, ecx
setne dl
mov ebx, dword [esp + 0x20]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
mov esi, dword [0xc98a20]
or edx, ebp
test esi, esi
jne 0x440ab1
mov ebp, dword [esp + 0x7c]
mov dword [eax], ebp
mov dword [esp + 0x68], eax
mov byte [eax + 4], 1
mov esi, dword [0xc98a20]
mov edi, ebx
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0xc8]
mov ebx, dword [ebp + ebx + 4]
test esi, esi
jne 0x440a98
mov dword [eax + 0x10], ebx
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
test dl, dl
je 0x44086f
mov dword [eax + 0x1c], 0xffffffff
mov dword [eax + 0x20], 0xffffffff
mov edx, dword [0xc98a20]
test edx, edx
jne 0x440a78
mov edx, dword [esp + 0x88]
mov dword [eax + 0x34], edx
mov ebx, dword [esp + 0x74]
test byte [ebx], al
mov esi, dword [0xc98a20]
test esi, esi
jne 0x440a68
mov dword [ebx], eax
mov ebx, dword [esp + 0x50]
movzx ebx, word [ebp + ebx + 8]
cmp bx, 1
jne 0x440994
test byte [edx], al
mov ebx, dword [0xc98a20]
test ebx, ebx
jne 0x44097b
mov dword [eax + 8], 0
lea ebx, [edx + 0x24]
mov esi, dword [edx + 0x24]
test esi, esi
je 0x44093a
mov dword [esp + 0x9c], ebx
mov ebx, dword [0xc98a20]
test ebx, ebx
jne 0x440910
mov dword [eax + 0xc], esi
mov dword [esi + 8], eax
mov dword [edx + 0x24], eax
lea esi, [eax + 0x2c]
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xd0]
mov ebx, ebp
mov edi, dword [esp + 0xa0]
mov ebp, esi
jmp 0x4407a4
lea edx, [eax + 0xc]
mov ebx, edi
mov edi, edx
mov eax, esi
call fcn.004599b0
lea edi, [eax + 8]
mov eax, dword [esp + 0x68]
call fcn.004599b0
mov edi, dword [esp + 0x9c]
call fcn.004599b0
mov edi, ebx
jmp 0x4408eb
mov esi, dword [0xc98a20]
test esi, esi
jne 0x440953
mov dword [eax + 0xc], 0
mov dword [edx + 0x20], eax
mov dword [edx + 0x24], eax
jmp 0x4408eb
lea esi, [eax + 0xc]
mov edi, esi
xor eax, eax
call fcn.004599b0
lea edi, [edx + 0x20]
mov eax, dword [esp + 0x68]
call fcn.004599b0
mov edi, ebx
call fcn.004599b0
mov edi, dword [esp + 0x20]
jmp 0x4408eb
lea ebx, [eax + 8]
mov esi, edi
mov edi, ebx
xor eax, eax
call fcn.004599b0
mov eax, dword [esp + 0x68]
mov edi, esi
jmp 0x4408c7
cmp bx, 2
jne 0x4408eb
test byte [edx], al
mov ebx, dword [0xc98a20]
test ebx, ebx
jne 0x440a4f
mov dword [eax + 8], 0
lea ebx, [edx + 0x2c]
mov esi, dword [edx + 0x2c]
test esi, esi
je 0x440a0b
mov dword [esp + 0x9c], ebx
mov ebx, dword [0xc98a20]
test ebx, ebx
jne 0x4409de
mov dword [eax + 0xc], esi
mov dword [esi + 8], eax
mov dword [edx + 0x2c], eax
jmp 0x4408eb
lea edx, [eax + 0xc]
mov ebx, edi
mov edi, edx
mov eax, esi
call fcn.004599b0
lea edi, [eax + 8]
mov eax, dword [esp + 0x68]
call fcn.004599b0
mov edi, dword [esp + 0x9c]
call fcn.004599b0
mov edi, ebx
jmp 0x4408eb
mov esi, dword [0xc98a20]
test esi, esi
jne 0x440a27
mov dword [eax + 0xc], 0
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], eax
jmp 0x4408eb
lea esi, [eax + 0xc]
mov edi, esi
xor eax, eax
call fcn.004599b0
lea edi, [edx + 0x28]
mov eax, dword [esp + 0x68]
call fcn.004599b0
mov edi, ebx
call fcn.004599b0
mov edi, dword [esp + 0x20]
jmp 0x4408eb
lea ebx, [eax + 8]
mov esi, edi
mov edi, ebx
xor eax, eax
call fcn.004599b0
mov eax, dword [esp + 0x68]
mov edi, esi
jmp 0x4409b5
mov esi, edi
mov edi, ebx
call fcn.004599b0
mov edi, esi
jmp 0x44089d
lea ebx, [eax + 0x34]
mov edi, ebx
mov esi, eax
mov eax, dword [esp + 0x88]
call fcn.004599b0
mov edx, eax
mov edi, dword [esp + 0x20]
mov eax, esi
jmp 0x440887
lea esi, [eax + 0x10]
mov edi, esi
mov eax, ebx
call fcn.004599b0
mov eax, dword [esp + 0x68]
mov edi, dword [esp + 0x20]
jmp 0x44084f
mov edi, eax
mov eax, dword [esp + 0x7c]
call fcn.004599b0
mov eax, edi
mov ebp, dword [esp + 0x7c]
jmp 0x440825
mov ebp, dword [esp + 0x7c]
test byte [ebp], al
lea esi, [ebp + 0x44]
mov dword [esp + 0x98], esi
mov ecx, dword [0xc98a20]
test ecx, ecx
jne 0x441092
mov dword [ebp + 0x44], 0
lea eax, [0x79750c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov word [esp + 8], 0x1809
mov dword [esp + 0xc], 1
call fcn.004337b0
mov eax, dword [esp + 0x7c]
mov byte [eax + 0x6c], 0
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov edx, dword [esp + 0xd0]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edx
call fcn.0043fcd0
mov eax, dword [esp + 0x7c]
mov dword [eax + 0xcc], 0
mov ecx, dword [eax + 0x44]
mov edx, dword [0xc98a20]
test edx, edx
jne 0x44107b
mov dword [eax + 0x44], 0
mov edx, dword [eax + 0xb4]
mov ebx, edx
jmp 0x440b7b
mov edx, dword [edx + 0x2c]
test edx, edx
je 0x440bb7
mov byte [edx + 4], 0
mov ebp, dword [0xc98a20]
test ebp, ebp
jne 0x440b9d
mov dword [edx + 0x10], 0
mov dword [edx + 0x34], 0
jmp 0x440b78
lea edi, [edx + 0x10]
mov ebp, eax
xor eax, eax
call fcn.004599b0
lea edi, [edx + 0x34]
xor eax, eax
call fcn.004599b0
mov eax, ebp
jmp 0x440b78
mov edx, dword [0xc98a20]
test edx, edx
jne 0x441068
mov dword [eax + 0xb4], 0
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0xc8]
xor eax, eax
xor edi, edi
mov eax, 0xffffffff
mov dword [esp + 0x48], eax
xor eax, eax
jmp 0x440c0d
inc eax
mov ebp, dword [esp + 0x78]
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x80], edi
cmp eax, ebp
jge 0x440fff
movzx edx, word [edx + eax*2]
cmp edx, ebp
jae 0x441134
mov dword [esp + 0x54], edx
lea edx, [edx + edx*2]
lea ebp, [esi + edx*8]
mov dword [esp + 0xa4], ebp
shl edx, 3
movzx ebp, word [esi + edx + 8]
test bp, bp
jne 0x440c4c
mov edx, dword [esp + 0x48]
jmp 0x440bf9
mov dword [esp + 0x50], edx
mov dword [esp + 0x64], ebx
mov ebp, dword [ebx + 0x1c]
test ebp, ebp
seta cl
mov ebx, dword [ebx + 0x20]
mov dword [esp + 0x4c], ebx
test ebx, ebx
setg bl
sete dl
and edx, ecx
or ebx, edx
test bl, bl
je 0x440ff6
mov ecx, dword [esp + 0x50]
mov dword [esi + ecx + 0x10], ebp
mov edx, dword [esp + 0x4c]
mov dword [esi + ecx + 0x14], edx
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x94]
cmp edx, ebx
jne 0x440d04
mov ecx, dword [esp + 0xa4]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x48], ebp
mov dword [esp + 0x80], ecx
mov ebx, dword [edx + 0x2c]
mov dword [esp + 0x6c], ebx
mov esi, dword [0xc98a20]
test esi, esi
jne 0x440cf6
mov dword [edx + 0x2c], 0
mov dword [esp], edx
call fcn.00433c50
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x94]
mov esi, dword [esp + 0xc8]
mov ebx, dword [esp + 0x6c]
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
jmp 0x440bf9
lea esi, [edx + 0x2c]
mov edi, esi
xor eax, eax
call fcn.004599b0
jmp 0x440cc8
mov ebp, dword [esi + ecx]
movzx ecx, word [esi + ecx + 8]
cmp cx, 2
jne 0x440e8d
test byte [ebp], al
mov ecx, dword [edx + 0xc]
lea ebx, [edx + 8]
mov esi, dword [edx + 8]
test ecx, ecx
je 0x440df3
mov dword [esp + 0xa0], ebx
lea ebx, [edx + 0xc]
test esi, esi
je 0x440da7
mov ebp, dword [0xc98a20]
test ebp, ebp
jne 0x440d6f
mov dword [ecx + 8], esi
mov dword [esi + 0xc], ecx
mov dword [edx + 8], 0
mov dword [edx + 0xc], 0
mov ebx, dword [esp + 0x94]
mov esi, dword [esp + 0xc8]
mov ecx, edi
mov ebp, dword [esp + 0x48]
jmp 0x440ca5
lea ebp, [ecx + 8]
mov edi, ebp
mov eax, esi
call fcn.004599b0
lea edi, [eax + 0xc]
mov eax, ecx
call fcn.004599b0
mov edi, dword [esp + 0xa0]
xor eax, eax
call fcn.004599b0
mov edi, ebx
call fcn.004599b0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x80]
jmp 0x440d56
mov esi, dword [0xc98a20]
test esi, esi
jne 0x440dc4
mov dword [ecx + 8], 0
mov dword [ebp + 0x2c], ecx
mov dword [edx + 0xc], 0
jmp 0x440d56
lea esi, [ecx + 8]
mov edi, esi
xor eax, eax
call fcn.004599b0
lea edi, [ebp + 0x2c]
mov eax, ecx
call fcn.004599b0
mov edi, ebx
xor eax, eax
call fcn.004599b0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x80]
jmp 0x440d56
test esi, esi
je 0x440e46
mov ecx, dword [0xc98a20]
test ecx, ecx
jne 0x440e17
mov dword [esi + 0xc], 0
mov dword [ebp + 0x28], esi
mov dword [edx + 8], 0
jmp 0x440d56
lea ecx, [esi + 0xc]
mov edi, ecx
xor eax, eax
call fcn.004599b0
lea edi, [ebp + 0x28]
mov eax, esi
call fcn.004599b0
mov edi, ebx
xor eax, eax
call fcn.004599b0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x80]
jmp 0x440d56
cmp dword [ebp + 0x28], edx
jne 0x440d56
mov ecx, dword [0xc98a20]
test ecx, ecx
jne 0x440e6c
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0
jmp 0x440d56
lea ecx, [ebp + 0x28]
mov ebx, edi
mov edi, ecx
mov esi, eax
xor eax, eax
call fcn.004599b0
lea edi, [ebp + 0x2c]
call fcn.004599b0
mov eax, esi
mov edi, ebx
jmp 0x440d56
test byte [ebp], al
mov ecx, dword [edx + 0xc]
lea ebx, [edx + 8]
mov esi, dword [edx + 8]
test ecx, ecx
je 0x440f5c
mov dword [esp + 0xa0], ebx
lea ebx, [edx + 0xc]
test esi, esi
je 0x440f0d
mov ebp, dword [0xc98a20]
test ebp, ebp
jne 0x440ed2
mov dword [ecx + 8], esi
mov dword [esi + 0xc], ecx
mov dword [edx + 8], 0
mov dword [edx + 0xc], 0
jmp 0x440d56
lea ebp, [ecx + 8]
mov edi, ebp
mov eax, esi
call fcn.004599b0
lea edi, [eax + 0xc]
mov eax, ecx
call fcn.004599b0
mov edi, dword [esp + 0xa0]
xor eax, eax
call fcn.004599b0
mov edi, ebx
call fcn.004599b0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x80]
jmp 0x440d56
mov esi, dword [0xc98a20]
test esi, esi
jne 0x440f2d
mov dword [ecx + 8], 0
mov dword [ebp + 0x24], ecx
mov dword [edx + 0xc], 0
jmp 0x440d56
lea esi, [ecx + 8]
mov edi, esi
xor eax, eax
call fcn.004599b0
lea edi, [ebp + 0x24]
mov eax, ecx
call fcn.004599b0
mov edi, ebx
xor eax, eax
call fcn.004599b0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x80]
jmp 0x440d56
test esi, esi
je 0x440faf
mov ecx, dword [0xc98a20]
test ecx, ecx
jne 0x440f80
mov dword [esi + 0xc], 0
mov dword [ebp + 0x20], esi
mov dword [edx + 8], 0
jmp 0x440d56
lea ecx, [esi + 0xc]
mov edi, ecx
xor eax, eax
call fcn.004599b0
lea edi, [ebp + 0x20]
mov eax, esi
call fcn.004599b0
mov edi, ebx
xor eax, eax
call fcn.004599b0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x80]
jmp 0x440d56
cmp dword [ebp + 0x20], edx
jne 0x440d56
mov ecx, dword [0xc98a20]
test ecx, ecx
jne 0x440fd5
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 0
jmp 0x440d56
lea ecx, [ebp + 0x20]
mov ebx, edi
mov edi, ecx
mov esi, eax
xor eax, eax
call fcn.004599b0
lea edi, [ebp + 0x24]
call fcn.004599b0
mov eax, esi
mov edi, ebx
jmp 0x440d56
mov ecx, dword [esp + 0x50]
jmp 0x440c87
test edi, edi
jne 0x441023
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0xc8]
mov ebp, dword [esp + 0xcc]
xor eax, eax
xor ecx, ecx
xor esi, esi
jmp 0x4402de
movzx eax, word [edi + 8]
mov word [esp + 0x1e], ax
cmp ax, 1
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebp
call fcn.0043fd60
movzx eax, word [esp + 0x1e]
cmp ax, 1
sete cl
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x48]
jmp 0x4403e7
mov edi, dword [esp + 0xa0]
xor eax, eax
call fcn.004599b0
jmp 0x440bcf
mov edi, dword [esp + 0x98]
mov edx, eax
xor eax, eax
call fcn.004599b0
mov eax, edx
jmp 0x440b6e
mov edi, esi
xor eax, eax
call fcn.004599b0
jmp 0x440aed
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], edx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edx
call fcn.0043fd60
mov eax, dword [esp + 0x80]
xor ecx, ecx
mov edx, dword [esp + 0x48]
jmp 0x4403e7
call fcn.004595a0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xd0]
xor ebp, ebp
jmp 0x44110c
lea esi, [ebp + ebp*2]
mov edi, esi
shl esi, 3
mov dword [edx + esi + 0x10], 0xffffffff
lea esi, [edx + edi*8]
mov dword [esi + 0x14], 0xffffffff
inc ebp
cmp ebp, ebx
jge 0x441117
jb 0x4410f0
jmp 0x441227
mov ebx, dword [esp + 0xcc]
mov ebp, edx
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xd0]
jmp 0x43ffce
mov eax, edx
mov ecx, ebp
call fcn.00459a30
mov eax, esi
mov ecx, edx
call fcn.00459a30
lea eax, [0x77eadf]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00430e00
mov dword [esp], ebx
mov eax, dword [esp + 0xd0]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call fcn.0043fd60
lea eax, [0x73aa20]
mov dword [esp], eax
lea eax, [0x7fb120]
mov dword [esp + 4], eax
call fcn.00430700
mov eax, ebp
mov ecx, edx
call fcn.00459a30
mov ecx, edx
call fcn.00459a30
mov eax, edx
call fcn.00459a30
mov eax, edx
call fcn.00459a30
mov eax, ebp
call fcn.00459a30
mov eax, ebp
call fcn.00459a30
mov eax, ebx
call fcn.00459a30
mov eax, ebp
call fcn.00459a30
mov eax, edx
call fcn.00459a30
mov eax, esi
call fcn.00459a30
mov eax, esi
call fcn.00459a30
mov eax, edx
call fcn.00459a30
mov eax, edx
call fcn.00459a30
mov eax, edx
call fcn.00459a30
mov eax, ebx
call fcn.00459a30
mov eax, ebx
call fcn.00459a30
mov eax, esi
call fcn.00459a30
mov eax, edx
call fcn.00459a30
call fcn.00459a30
mov eax, edx
call fcn.00459a40
mov eax, ebp
mov ecx, ebx
call fcn.00459a30
call fcn.00459a30
mov edx, ecx
mov ebx, eax
call fcn.00459ad0
mov ebx, 0x10000
call fcn.00459ab0
nop
call fcn.00458170
jmp fcn.0043fea0