Function at 0x433810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe4]
cmp eax, dword [ecx + 8]
jbe 0x435413
sub esp, 0x164
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov eax, dword [esp + 0x168]
test byte [eax], al
lea ecx, [eax + 0xc]
mov dword [esp + 0xec], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0xf0], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0x58], ecx
mov dword [esp + 0xf4], ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x24], edx
mov ebx, dword [esp + 0xec]
mov dword [esp + 0x9c], ebx
mov ebp, dword [0x8845f0]
mov esi, dword [0x8845f4]
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and ebp, edi
test esi, esi
xchg esi, ebx
seta bl
xchg esi, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4353aa
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], esi
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov edi, dword [eax + 4]
mov dword [esp + 0xf8], edi
movzx edi, word [eax + 2]
mov dword [esp + 0xfc], edi
movzx edi, word [eax + 2]
mov dword [esp + 0x100], edi
mov edi, dword [esp + 0xfc]
mov dword [esp + 0x28], edi
mov esi, dword [esp + 0xf8]
mov dword [esp + 0xa8], esi
mov dword [esp + 0x64], eax
mov eax, 1
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x64]
movzx ebp, word [eax + 2]
mov ecx, dword [esp + 0x40]
cmp ecx, ebp
jge 0x4339dc
call fcn.0044a220
mov eax, dword [esp]
mov ecx, dword [esp + 0x40]
cmp ecx, 0xffffffff
je 0x4353a3
lea edx, [ecx + 1]
mov ebx, edx
cmp ebx, 0xffffffff
je 0x43539c
cdq
idiv ebx
mov ebp, dword [esp + 0x28]
cmp edx, ebp
jae 0x435395
mov eax, dword [esp + 0xa8]
movzx esi, word [eax + edx*2]
cmp ecx, ebp
jae 0x435395
mov word [eax + ecx*2], si
mov word [eax + edx*2], cx
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x9c]
movzx ebp, word [eax + 2]
mov ecx, dword [esp + 0x40]
cmp ecx, ebp
jl 0x433956
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov ecx, dword [eax + 8]
mov dword [esp + 0x104], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0x108], ecx
movzx ecx, word [eax + 2]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x10c], ecx
mov ebp, dword [esp + 0x108]
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x104]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x5c]
movzx eax, word [eax + 2]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jge 0x433b3f
cmp ecx, edi
jae 0x43538e
movzx eax, word [esi + ecx*2]
cmp eax, edx
jae 0x43538e
imul eax, eax, 0x1c
mov eax, dword [ebx + eax + 4]
mov dword [esp + 0xc0], eax
test ecx, ecx
jle 0x433aed
lea edi, [ecx - 1]
mov dword [esp + 0x50], edi
sar edi, 0x1f
mov esi, dword [esp + 0x50]
sub esi, edi
sar esi, 1
mov dword [esp + 0x50], esi
cmp esi, ebp
jae 0x435387
mov edi, dword [esp + 0xb0]
movzx esi, word [edi + esi*2]
mov word [esp + 0x1a], si
movzx esi, si
cmp esi, edx
jae 0x435387
imul esi, esi, 0x1c
mov esi, dword [ebx + esi + 4]
cmp esi, eax
jae 0x433af4
cmp ecx, ebp
jae 0x435380
movzx eax, word [esp + 0x1a]
mov word [edi + ecx*2], ax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x28]
test ecx, ecx
jg 0x433a7e
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0xa8]
movzx ebx, word [esi + eax*2]
cmp ecx, ebp
jae 0x435379
mov word [edi + ecx*2], bx
inc eax
mov ecx, dword [esp + 0x168]
mov ebx, dword [esp + 0x9c]
mov ecx, edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x168]
movzx eax, word [eax + 2]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jl 0x433a58
dec eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x44], eax
test eax, eax
jl 0x433c87
cmp eax, ebp
jae 0x435372
movzx esi, word [ecx + eax*2]
mov word [esp + 0x18], si
movzx edi, si
cmp edi, edx
jae 0x43536b
imul edi, edi, 0x1c
mov edi, dword [ebx + edi + 4]
mov dword [esp + 0xc4], edi
test ebp, ebp
jbe 0x435364
movzx esi, word [ecx]
mov word [ecx + eax*2], si
xor esi, esi
mov dword [esp + 0x34], esi
shl esi, 1
lea edi, [esi + 1]
mov dword [esp + 0x30], edi
cmp edi, eax
jge 0x43535d
lea ebx, [esi + 2]
cmp ebx, eax
jge 0x435354
cmp edi, ebp
jae 0x43534d
movzx eax, word [ecx + esi*2 + 2]
cmp eax, edx
jae 0x43534d
imul eax, eax, 0x1c
mov edi, dword [esp + 0x9c]
mov eax, dword [edi + eax + 4]
cmp ebx, ebp
jae 0x43534d
movzx esi, word [ecx + esi*2 + 4]
cmp esi, edx
jae 0x43534d
imul esi, esi, 0x1c
mov esi, dword [edi + esi + 4]
cmp eax, esi
jae 0x435344
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0xc4]
mov esi, eax
cmp ebx, ebp
jae 0x43533d
movzx eax, word [ecx + ebx*2]
movzx ebx, ax
cmp ebx, edx
jae 0x43533d
imul ebx, ebx, 0x1c
mov ebx, dword [edi + ebx + 4]
cmp esi, ebx
jae 0x433c54
mov ebx, dword [esp + 0x34]
cmp ebx, ebp
jae 0x433c4d
mov word [ecx + ebx*2], ax
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0xc4]
mov esi, dword [esp + 0x30]
mov ebx, edi
mov edi, dword [esp + 0xc4]
jmp 0x433b8e
call fcn.00424680
ud2
mov eax, dword [esp + 0x34]
cmp eax, ebp
jae 0x435336
movzx ebx, word [esp + 0x18]
mov word [ecx + eax*2], bx
mov eax, dword [esp + 0x44]
dec eax
mov ebx, edi
mov esi, dword [esp + 0xa8]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x44], eax
test eax, eax
jge 0x433b53
mov dword [esp], ebx
mov dword [esp + 4], edx
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.004335b0
mov dword [esp + 0x48], 0
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0xb8], ecx
mov edx, dword [esp + 0x168]
movzx ebx, word [edx + 2]
cmp eax, ebx
jge 0x434211
mov ebx, dword [esp + 0x28]
cmp eax, ebx
jae 0x43420a
mov ebp, dword [esp + 0xa8]
movzx esi, word [ebp + eax*2]
mov edi, dword [esp + 0x24]
cmp esi, edi
jae 0x43420a
imul esi, esi, 0x1c
mov dword [esp + 0x50], esi
mov edi, dword [esp + 0x9c]
lea ebp, [edi + esi]
mov dword [esp + 0xe0], ebp
mov ebx, dword [edi + esi + 4]
mov dword [esp + 0xc8], ebx
movzx esi, word [edi + esi + 0xc]
cmp si, 1
je 0x433fb4
cmp si, 2
je 0x433d43
cmp si, 3
jne 0x433d3f
inc eax
mov ecx, ebp
jmp 0x433cb7
mov ebp, ecx
jmp 0x433d37
mov esi, dword [ebx + 0x10]
test esi, esi
jne 0x433f3a
lea esi, [ebx + 0x20]
mov dword [esp], esi
call fcn.00404dc0
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x433e9b
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
cmp ecx, edx
jb 0x433d97
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x168]
mov edi, dword [esp + 0x9c]
mov ebp, dword [esp + 0xb8]
jmp 0x433d37
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x9c]
mov ecx, dword [edx + ecx]
movzx ebx, word [eax + 0xc]
mov ebp, dword [eax + 0x18]
imul ebx, ebp
mov ebp, dword [eax + 8]
add ebx, ebp
mov ebp, dword [eax + 0x14]
mov dword [esp + 8], ecx
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040d6b0
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x18]
inc ecx
mov dword [eax + 0x18], ecx
mov edx, dword [eax + 4]
cmp ecx, edx
jne 0x433de3
mov dword [eax + 0x18], 0
mov ecx, dword [eax]
inc ecx
mov dword [eax], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.00433640
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb8], eax
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
test ecx, ecx
seta bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebx, ebp
test edx, edx
xchg ebp, ebx
setg bl
xchg ebp, ebx
or ebx, ebp
test bl, bl
jne 0x433e72
mov ecx, dword [eax + 8]
movzx eax, word [eax + 0xe]
mov dword [esp + 0x16c], ecx
mov word [esp + 0x170], ax
add esp, 0x164
ret
mov ebx, dword [esp + 0x1c]
sub ecx, ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
sbb edx, ecx
mov dword [esp + 4], edx
mov dword [esp + 8], 2
call fcn.0041fbb0
mov eax, dword [esp + 0xb8]
jmp 0x433e55
lea edi, [esp + 0x110]
xor eax, eax
call fcn.0044a379
lea ecx, [0x447ee0]
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x118], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x120], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0x50]
mov ecx, dword [ecx + edx]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 0xc], ecx
call fcn.00403df0
mov eax, dword [esp + 0xe0]
jmp 0x433e29
mov dword [esp], edi
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.00433640
lea eax, [0x70bab7]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], 0x16
lea eax, [0x6c3c80]
mov dword [esp], eax
lea eax, [esp + 0xe4]
mov dword [esp + 4], eax
call fcn.0040a880
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004254e0
ud2
test byte [ebx], al
lea esi, [ebx + 0x28]
mov dword [esp], esi
call fcn.00404dc0
mov eax, dword [esp + 4]
mov dword [esp + 0x98], eax
test eax, eax
jne 0x434155
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
test ecx, ecx
ja 0x434085
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x43400a
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x168]
mov edi, dword [esp + 0x9c]
mov ebp, dword [esp + 0xb8]
jmp 0x433d37
mov ecx, dword [esp + 0x9c]
mov dword [esp], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 8], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x14], edx
call fcn.00433640
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x9c]
mov edx, dword [ecx + eax + 0x10]
test edx, edx
je 0x43405a
mov byte [edx], 0
mov eax, dword [ecx + eax]
test eax, eax
jne 0x43406d
mov eax, dword [esp + 0xe0]
jmp 0x433e29
mov ecx, dword [esp + 0xc8]
mov ecx, dword [ecx + 0x14]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0040db00
jmp 0x434061
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x9c]
mov ebx, dword [edx + ecx + 0x10]
test ebx, ebx
je 0x43409b
mov byte [ebx], 1
mov ebx, dword [eax + 0x1c]
movzx ebp, word [eax + 0xc]
imul ebx, ebp
mov ebp, dword [eax + 8]
add ebx, ebp
mov dword [esp + 0x6c], ebx
mov ecx, dword [edx + ecx]
test ecx, ecx
jne 0x43412b
mov ecx, dword [eax + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.0040db00
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax + 0x1c]
inc ecx
mov dword [eax + 0x1c], ecx
mov edx, dword [eax + 4]
cmp ecx, edx
jne 0x4340e0
mov dword [eax + 0x1c], 0
mov ecx, dword [eax]
dec ecx
mov dword [eax], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.00433640
mov eax, dword [esp + 0xe0]
jmp 0x433e29
mov ebp, dword [eax + 0x14]
mov dword [esp + 4], ecx
mov dword [esp], ebp
mov dword [esp + 8], ebx
call fcn.0040d6b0
mov eax, dword [esp + 0xc8]
mov edx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x6c]
jmp 0x4340b5
lea edi, [esp + 0x12c]
xor eax, eax
call fcn.0044a379
lea ecx, [0x447e90]
mov dword [esp + 0x12c], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x130], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x134], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x138], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x13c], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x140], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x144], edx
mov edx, dword [esp + 0x50]
mov ebx, dword [ecx + edx]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0xc8]
mov dword [esp], ebx
mov ebx, dword [esp + 0x98]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x12c]
mov dword [esp + 0xc], ebx
call fcn.00404b00
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x9c]
mov ecx, dword [edx + ecx + 0x10]
test ecx, ecx
je 0x4341fe
mov byte [ecx], 1
mov eax, dword [esp + 0xe0]
jmp 0x433e29
call fcn.00424680
ud2
test ecx, ecx
jne 0x4352f0
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0xb4], eax
mov dword [esp + 0x48], 0
mov ecx, dword [eax + 0xc8]
test ecx, ecx
jne 0x4352d8
lea ecx, [eax + 0xc8]
mov dword [esp + 0xac], ecx
mov ebx, ecx
xor ebp, ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 0x50], ebp
mov dword [esp + 0xdc], esi
mov dword [esp + 0xd8], ecx
mov edi, dword [esp + 0x2c]
cmp ebp, edi
jge 0x43484a
movzx edx, word [esi]
mov ebx, dword [esp + 0x24]
cmp edx, ebx
jae 0x434843
imul edx, edx, 0x1c
mov dword [esp + 0x4c], edx
mov ebx, dword [esp + 0x9c]
mov edi, dword [ebx + edx + 4]
mov dword [esp + 0xbc], edi
call fcn.004275b0
mov eax, dword [esp]
mov dword [esp + 0x88], eax
test byte [eax], al
mov ecx, dword [0x884700]
test ecx, ecx
jne 0x43481d
mov ecx, dword [esp + 0xb4]
mov dword [eax], ecx
mov edx, dword [0x884700]
lea ebx, [eax + 4]
test edx, edx
jne 0x4347f6
lea edx, [esp + 0x48]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [ebp + ebx]
mov edi, dword [0x884700]
lea edx, [eax + 0x10]
test edi, edi
jne 0x4347cc
mov dword [eax + 0x10], esi
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov edx, dword [esp + 0x1c]
test edx, edx
xchg esi, ebx
setne bl
xchg esi, ebx
mov edi, dword [esp + 0x20]
test edi, edi
xchg edi, ebx
setne bl
xchg edi, ebx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
je 0x434342
mov dword [eax + 0x1c], 0xffffffff
mov dword [eax + 0x20], 0xffffffff
mov esi, dword [0x884700]
lea edi, [eax + 0x2c]
test esi, esi
jne 0x434790
mov esi, dword [esp + 0xbc]
mov dword [eax + 0x2c], esi
mov edi, dword [esp + 0xd8]
test byte [edi], al
mov edx, dword [0x884700]
test edx, edx
jne 0x43475f
mov dword [edi], eax
movzx edx, word [ebp + ebx + 0xc]
cmp dx, 1
jne 0x434586
test byte [esi], al
mov edx, dword [0x884700]
lea ebx, [eax + 8]
test edx, edx
jne 0x434555
mov dword [eax + 8], 0
lea edx, [esi + 0x20]
test byte [edx], al
mov edx, dword [esi + 0x24]
mov dword [esp + 0x84], edx
test edx, edx
je 0x43449b
mov ebx, dword [0x884700]
lea edi, [eax + 0xc]
test ebx, ebx
jne 0x434467
mov dword [eax + 0xc], edx
mov ebx, dword [0x884700]
lea edi, [edx + 8]
test ebx, ebx
jne 0x43443a
mov dword [edx + 8], eax
mov edx, dword [0x884700]
lea ebx, [esi + 0x24]
test edx, edx
jne 0x434417
mov dword [esi + 0x24], eax
mov edi, dword [esp + 0xdc]
lea esi, [edi + 2]
mov edi, dword [esp + 0x50]
inc edi
mov edx, edi
lea edi, [eax + 0x28]
mov eax, ecx
mov ebx, dword [esp + 0xac]
mov ebp, edx
mov ecx, edi
mov edx, dword [esp + 0x168]
jmp 0x43425b
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x4343ea
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4343da
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4343ca
mov edx, dword [0x884700]
lea ebx, [eax + 0xc]
test edx, edx
jne 0x434524
mov dword [eax + 0xc], 0
mov edx, dword [0x884700]
lea ebx, [esi + 0x20]
test edx, edx
jne 0x4344fa
mov dword [esi + 0x20], eax
mov edx, dword [0x884700]
lea ebx, [esi + 0x24]
test edx, edx
jne 0x4344d4
mov dword [esi + 0x24], eax
jmp 0x4343ea
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x4343ea
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4344bf
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4344af
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43439f
cmp dx, 2
jne 0x4343ea
test byte [esi], al
mov edx, dword [0x884700]
lea ebx, [eax + 8]
test edx, edx
jne 0x43472e
mov dword [eax + 8], 0
lea edx, [esi + 0x28]
test byte [edx], al
mov edx, dword [esi + 0x2c]
mov dword [esp + 0x78], edx
test edx, edx
je 0x434674
mov ebx, dword [0x884700]
lea edi, [eax + 0xc]
test ebx, ebx
jne 0x434643
mov dword [eax + 0xc], edx
mov ebx, dword [0x884700]
lea edi, [edx + 8]
test ebx, ebx
jne 0x434619
mov dword [edx + 8], eax
mov edx, dword [0x884700]
lea ebx, [esi + 0x2c]
test edx, edx
jne 0x4345f3
mov dword [esi + 0x2c], eax
jmp 0x4343ea
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x4343ea
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4345de
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4345ce
mov edx, dword [0x884700]
lea ebx, [eax + 0xc]
test edx, edx
jne 0x4346fd
mov dword [eax + 0xc], 0
mov edx, dword [0x884700]
lea ebx, [esi + 0x28]
test edx, edx
jne 0x4346d3
mov dword [esi + 0x28], eax
mov edx, dword [0x884700]
lea ebx, [esi + 0x2c]
test edx, edx
jne 0x4346ad
mov dword [esi + 0x2c], eax
jmp 0x4343ea
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
jmp 0x4343ea
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x434698
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x434688
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x4345aa
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x434376
mov dword [esp], edi
mov esi, dword [esp + 0xbc]
mov dword [esp + 4], esi
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0xbc]
jmp 0x43435d
mov dword [esp], edx
mov dword [esp + 4], esi
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x9c]
jmp 0x434304
mov dword [esp], ebx
lea edx, [esp + 0x48]
mov dword [esp + 4], edx
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
lea edx, [esp + 0x48]
jmp 0x4342e1
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
call fcn.0040d5a0
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
jmp 0x4342c9
call fcn.00424680
ud2
mov ecx, dword [0x884700]
lea ebp, [eax + 0x58]
mov dword [esp + 0xd4], ebp
test ecx, ecx
jne 0x4352a3
mov dword [eax + 0x58], 0
lea ecx, [0x719b58]
mov dword [esp], ecx
mov dword [esp + 4], 0
lea esi, [0x7053fe]
mov dword [esp + 8], esi
mov dword [esp + 0xc], 6
mov byte [esp + 0x10], 0x18
mov dword [esp + 0x14], 2
call fcn.00427380
lea edi, [esp + 0x148]
xor eax, eax
call fcn.0044a379
lea ecx, [0x447e40]
mov dword [esp + 0x148], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x14c], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x150], ebx
mov ebp, dword [esp + 0x58]
mov dword [esp + 0x154], ebp
mov esi, dword [esp + 0xb0]
mov dword [esp + 0x158], esi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x15c], edi
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x160], ecx
lea eax, [esp + 0x148]
mov dword [esp], eax
call fcn.00448590
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xd0], ecx
mov edx, dword [0x884700]
test edx, edx
jne 0x435279
mov dword [eax + 0x58], 0
mov edx, dword [eax + 0xc8]
mov dword [esp + 0x94], edx
mov ebx, edx
mov dword [esp + 0xcc], edx
test edx, edx
je 0x4349a6
mov ebp, dword [0x884700]
lea esi, [edx + 4]
test ebp, ebp
jne 0x435248
mov dword [edx + 4], 0
mov ebp, dword [0x884700]
lea esi, [edx + 0x10]
test ebp, ebp
jne 0x435217
mov dword [edx + 0x10], 0
mov ebp, dword [0x884700]
lea esi, [edx + 0x2c]
test ebp, ebp
jne 0x4351e6
mov dword [edx + 0x2c], 0
mov edx, dword [edx + 0x28]
mov dword [esp + 0xcc], edx
test edx, edx
jne 0x434950
mov edx, dword [0x884700]
test edx, edx
jne 0x4351bc
mov dword [eax + 0xc8], 0
xor eax, eax
mov edx, dword [esp + 0xb0]
xor ebp, ebp
mov dword [esp + 0x50], eax
mov dword [esp + 0xdc], edx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0xb8], ebp
mov esi, dword [esp + 0x2c]
cmp eax, esi
jge 0x43515d
movzx edi, word [edx]
mov esi, dword [esp + 0x24]
cmp edi, esi
jae 0x435156
imul edi, edi, 0x1c
mov esi, dword [esp + 0x9c]
lea eax, [esi + edi]
mov dword [esp + 0xe0], eax
mov edx, dword [ebx + 0x1c]
mov ebp, dword [ebx + 0x20]
test edx, edx
seta al
test ebp, ebp
sete cl
and eax, ecx
test ebp, ebp
setg cl
or eax, ecx
test al, al
je 0x434a36
mov dword [esi + edi + 0x14], edx
mov dword [esi + edi + 0x18], ebp
mov eax, dword [esp + 0xd0]
cmp eax, ebx
jne 0x434ad7
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0xb8], ecx
mov edx, dword [ebx + 0x28]
mov dword [esp + 0x90], edx
mov ebp, dword [0x884700]
lea edi, [ebx + 0x28]
test ebp, ebp
jne 0x434aa2
mov dword [ebx + 0x28], 0
mov dword [esp], ebx
call fcn.00427940
mov eax, dword [esp + 0xdc]
lea edx, [eax + 2]
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xb8]
jmp 0x4349c9
mov dword [esp], edi
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434a71
mov ecx, dword [esi + edi + 4]
mov dword [esp + 0xbc], ecx
movzx edx, word [esi + edi + 0xc]
cmp dx, 2
jne 0x434e21
test byte [ecx], al
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x7c], edx
mov ebp, dword [ebx + 8]
mov dword [esp + 0x74], ebp
lea edi, [ecx + 0x28]
mov dword [esp + 0xa0], edi
test edx, edx
je 0x434cd0
test ebp, ebp
je 0x434c19
mov ecx, dword [0x884700]
lea edi, [edx + 8]
test ecx, ecx
jne 0x434beb
mov dword [edx + 8], ebp
mov ecx, dword [0x884700]
lea edi, [ebp + 0xc]
test ecx, ecx
jne 0x434bc5
mov dword [ebp + 0xc], edx
mov ecx, dword [0x884700]
lea edx, [ebx + 8]
test ecx, ecx
jne 0x434b9e
mov dword [ebx + 8], 0
mov ecx, dword [0x884700]
lea edx, [ebx + 0xc]
test ecx, ecx
jne 0x434b77
mov dword [ebx + 0xc], 0
mov ecx, dword [esp + 0xb8]
jmp 0x434a4c
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434b6b
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434b57
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434b43
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x9c]
jmp 0x434b2f
mov ebp, dword [0x884700]
lea eax, [edx + 8]
test ebp, ebp
jne 0x434c9b
mov dword [edx + 8], 0
test byte [edi], al
mov eax, dword [0x884700]
lea ebp, [ecx + 0x2c]
test eax, eax
jne 0x434c7f
mov dword [ecx + 0x2c], edx
mov eax, dword [0x884700]
lea ecx, [ebx + 0xc]
test eax, eax
jne 0x434c5f
mov dword [ebx + 0xc], 0
mov eax, dword [esp + 0xd0]
jmp 0x434b6b
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434c53
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434c3f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
jmp 0x434c2d
test ebp, ebp
je 0x434d8f
mov edx, dword [0x884700]
lea eax, [ebp + 0xc]
test edx, edx
jne 0x434d5a
mov dword [ebp + 0xc], 0
test byte [edi], al
mov eax, dword [0x884700]
lea edx, [ecx + 0x28]
test eax, eax
jne 0x434d3e
mov dword [ecx + 0x28], ebp
mov eax, dword [0x884700]
lea ecx, [ebx + 8]
test eax, eax
jne 0x434d1e
mov dword [ebx + 8], 0
mov eax, dword [esp + 0xd0]
jmp 0x434b6b
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434d12
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434cfe
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa0]
jmp 0x434cec
test byte [edi], al
mov edx, dword [ecx + 0x28]
cmp edx, ebx
jne 0x434b6b
mov edx, dword [0x884700]
lea ebp, [ecx + 0x28]
test edx, edx
jne 0x434df3
mov dword [ecx + 0x28], 0
mov edx, dword [0x884700]
lea ebp, [ecx + 0x2c]
test edx, edx
jne 0x434dc9
mov dword [ecx + 0x2c], 0
jmp 0x434b6b
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434b6b
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434db0
test byte [ecx], al
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x80], edx
mov ebp, dword [ebx + 8]
mov dword [esp + 0x70], ebp
lea edi, [ecx + 0x20]
mov dword [esp + 0xa4], edi
test edx, edx
je 0x435005
test ebp, ebp
je 0x434f4b
mov ecx, dword [0x884700]
lea edi, [edx + 8]
test ecx, ecx
jne 0x434f1a
mov dword [edx + 8], ebp
mov ecx, dword [0x884700]
lea edi, [ebp + 0xc]
test ecx, ecx
jne 0x434ef4
mov dword [ebp + 0xc], edx
mov ecx, dword [0x884700]
lea edx, [ebx + 8]
test ecx, ecx
jne 0x434ecd
mov dword [ebx + 8], 0
mov ecx, dword [0x884700]
lea edx, [ebx + 0xc]
test ecx, ecx
jne 0x434ea3
mov dword [ebx + 0xc], 0
jmp 0x434b6b
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434b6b
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434e8a
mov dword [esp], edi
mov dword [esp + 4], edx
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434e76
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
jmp 0x434e62
mov ebp, dword [0x884700]
lea eax, [edx + 8]
test ebp, ebp
jne 0x434fcd
mov dword [edx + 8], 0
test byte [edi], al
mov eax, dword [0x884700]
lea ebp, [ecx + 0x24]
test eax, eax
jne 0x434fb1
mov dword [ecx + 0x24], edx
mov eax, dword [0x884700]
lea ecx, [ebx + 0xc]
test eax, eax
jne 0x434f91
mov dword [ebx + 0xc], 0
mov eax, dword [esp + 0xd0]
jmp 0x434b6b
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434f85
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434f71
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa4]
jmp 0x434f5f
test ebp, ebp
je 0x4350c4
mov edx, dword [0x884700]
lea eax, [ebp + 0xc]
test edx, edx
jne 0x43508f
mov dword [ebp + 0xc], 0
test byte [edi], al
mov eax, dword [0x884700]
lea edx, [ecx + 0x20]
test eax, eax
jne 0x435073
mov dword [ecx + 0x20], ebp
mov eax, dword [0x884700]
lea ecx, [ebx + 8]
test eax, eax
jne 0x435053
mov dword [ebx + 8], 0
mov eax, dword [esp + 0xd0]
jmp 0x434b6b
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x435047
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.0040d5a0
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x435033
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x9c]
mov edi, dword [esp + 0xa4]
jmp 0x435021
test byte [edi], al
mov edx, dword [ecx + 0x20]
cmp edx, ebx
jne 0x434b6b
mov edx, dword [0x884700]
lea ebp, [ecx + 0x20]
test edx, edx
jne 0x435128
mov dword [ecx + 0x20], 0
mov edx, dword [0x884700]
lea ebp, [ecx + 0x24]
test edx, edx
jne 0x4350fe
mov dword [ecx + 0x24], 0
jmp 0x434b6b
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x434b6b
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x9c]
jmp 0x4350e5
call fcn.00424680
ud2
test ebp, ebp
jne 0x435166
jmp 0x433cb3
movzx eax, word [ebp + 0xc]
cmp ax, 1
jne 0x43517a
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x43517a
mov byte [eax], 1
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.00433640
mov eax, dword [esp + 0xb8]
jmp 0x433e29
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0040d5a0
mov ecx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x94]
jmp 0x4349be
mov dword [esp], esi
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
jmp 0x434998
mov dword [esp], esi
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
jmp 0x434980
mov dword [esp], esi
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
jmp 0x434968
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xd0]
jmp 0x434936
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xb4]
mov edx, dword [esp + 0x168]
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xd4]
mov edi, dword [esp + 0x2c]
jmp 0x434869
lea eax, [0x709247]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00425c90
ud2
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
call fcn.00433640
mov eax, dword [esp + 0xb8]
jmp 0x433e29
call fcn.00424680
ud2
call fcn.00424680
ud2
mov ebx, dword [esp + 0x30]
jmp 0x433bf5
call fcn.00424680
ud2
mov edi, dword [esp + 0x9c]
jmp 0x435344
mov edi, ebx
jmp 0x433c54
call fcn.00424680
ud2
call fcn.00424680
ud2
call fcn.00424680
ud2
call fcn.00424680
ud2
call fcn.00424680
ud2
call fcn.00424680
ud2
call fcn.00424680
ud2
call fcn.00424680
ud2
xor edx, edx
jmp 0x43397c
call fcn.00424740
ud2
call fcn.00449b30
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x168]
mov ebp, dword [esp + 0x9c]
xor esi, esi
movzx edi, word [ebx + 2]
cmp esi, edi
jge 0x4353f6
cmp esi, edx
jae 0x43540c
mov edi, esi
imul esi, esi, 0x1c
mov dword [ebp + esi + 0x14], 0xffffffff
mov dword [ebp + esi + 0x18], 0xffffffff
lea esi, [edi + 1]
movzx edi, word [ebx + 2]
cmp esi, edi
jl 0x4353d2
mov ebx, ebp
mov ebp, eax
mov esi, ecx
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x58]
jmp 0x4338d3
call fcn.00424680
ud2
call fcn.004486b0
jmp fcn.00433810