Function at 0x440210
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x11c]
cmp eax, dword [ecx + 8]
jbe 0x44190e
sub esp, 0x19c
mov eax, dword [0x884554]
test eax, eax
je 0x4418f6
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0x14c], eax
mov ecx, dword [esp + 0x1ac]
cmp ecx, eax
jne 0x44026e
mov edx, dword [eax + 0x18]
mov edx, dword [edx + 0x4c]
cmp eax, edx
je 0x4418de
call fcn.00431950
mov eax, dword [esp]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x1ac]
mov edx, dword [ecx + 0x50]
mov ebx, dword [ecx + 0x44]
mov dword [esp + 0x170], ebx
mov ebp, dword [ecx + 0x48]
mov esi, dword [ecx + 0x4c]
cmp edx, ebp
ja 0x4418d7
sub ebp, edx
mov dword [esp + 0x20], ebp
sub esi, edx
mov dword [esp + 0x24], esi
shl edx, 3
mov edi, ebp
lea ebp, [esi - 1]
sar ebp, 0x1f
xor ebp, 0xffffffff
and edx, ebp
mov dword [esp + 0x6c], edx
lea ebp, [edx + ebx]
mov dword [esp + 0x144], ebp
mov edx, dword [esp + 0x1a0]
cmp edx, 0xffffffff
jne 0x4418c9
mov ebx, dword [esp + 0x1a4]
cmp ebx, 0xffffffff
jne 0x4418bb
mov edx, dword [ecx + 0x3c]
test edx, edx
je 0x4418b0
mov ebx, dword [ecx + 0x40]
mov dword [esp + 0x1a4], edx
lea edi, [esp + 0x174]
xor eax, eax
call fcn.0044a376
mov dword [esp + 0x178], ebx
mov dword [esp + 0x184], edx
mov ecx, dword [esp + 0x1ac]
mov ebx, dword [ecx + 0xcc]
mov dword [esp + 0x15c], ebx
mov edi, ebx
mov ebx, dword [ecx + 0xd0]
mov dword [esp + 0x50], ebx
mov ebx, dword [ecx + 0xd4]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x1b4]
test ebx, ebx
je 0x441891
mov dword [esp + 0x78], eax
xor eax, eax
mov byte [esp + 0x1b], al
mov eax, dword [esp + 0x78]
mov ebx, dword [ecx + 0x14]
mov dword [esp + 0x160], ebx
test ebx, ebx
je 0x440389
mov ecx, dword [ebx + 8]
cmp ecx, 0xffffffff
jne 0x440389
mov ebx, dword [ebx + 0x18]
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 0x160], ebx
test ebx, ebx
jne 0x44036c
mov ecx, dword [esp + 0x178]
test ecx, ecx
jne 0x4403b0
mov ecx, edx
mov ecx, dword [ecx]
mov dword [esp + 0x178], ecx
mov ecx, dword [esp + 0x184]
add ecx, 4
mov dword [esp + 0x184], ecx
mov ecx, dword [esp + 0x178]
mov dword [esp], ecx
call fcn.0043c430
mov eax, dword [esp + 4]
test eax, eax
je 0x44187d
mov ecx, dword [eax]
mov ebx, dword [0x8845a4]
cmp ecx, ebx
je 0x4416e5
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x16c], ecx
test eax, eax
je 0x44165b
mov dword [esp + 0x174], eax
lea edi, [esp + 0x80]
xor eax, eax
call fcn.0044a350
xor eax, eax
xor ecx, ecx
mov ebp, dword [esp + 0x1b0]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
xor ebp, ebp
mov dword [esp + 0x2c], ebp
mov esi, dword [esp + 0x16c]
mov dword [esp + 0x168], esi
mov esi, dword [esp + 0x1ac]
mov dword [esp + 0x140], esi
mov esi, dword [esp + 0x15c]
mov dword [esp + 0x16c], esi
mov ebp, dword [esp + 0x1b0]
mov esi, dword [esp + 0x54]
mov dword [esp + 0x34], eax
mov byte [esp + 0x1a], cl
mov dword [esp + 0x1b0], ebp
mov ebp, dword [esp + 0x1b8]
cmp eax, ebp
jge 0x441640
mov ebp, dword [esp + 0x174]
mov dword [esp + 0x158], ebp
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x441625
mov eax, dword [esp + 0x188]
test eax, eax
je 0x441456
mov eax, dword [esp + 0x16c]
mov byte [esp + 0x70], cl
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x16c], ecx
movzx ecx, byte [esp + 0x70]
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], edi
mov dword [esp + 0x168], eax
mov dword [esp + 0x20], edx
mov esi, dword [ebp]
mov eax, dword [0x884554]
cmp esi, eax
jne 0x4413eb
mov eax, 1
test al, al
je 0x4411b7
mov dword [esp + 0x180], 0
xor eax, eax
mov esi, dword [esp + 0x16c]
mov dword [esp + 0x150], eax
mov dword [esp + 0x16c], esi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], edx
mov ebx, dword [esp + 0x188]
add ebx, 0xfffffffc
mov dword [esp + 0x18c], ebx
mov ebx, dword [esp + 0x1bc]
test ebx, ebx
xchg esi, ebx
setne bl
xchg esi, ebx
jne 0x4411b0
movzx eax, byte [esp + 0x1b]
test al, al
jne 0x441146
mov esi, dword [esp + 0x178]
mov dword [esp + 0x17c], esi
test cl, cl
je 0x44113a
mov esi, dword [esp + 0x160]
test esi, esi
je 0x44112a
mov ecx, dword [esi + 8]
mov eax, dword [esp + 0x184]
cmp ecx, eax
jne 0x44112a
mov eax, dword [esi + 0xc]
mov dword [esp + 0x17c], eax
mov dword [esp + 0x160], esi
test esi, esi
je 0x4405bb
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x184]
cmp eax, ecx
jne 0x44111c
mov esi, dword [esi + 0x18]
mov dword [esp + 0x160], esi
test esi, esi
jne 0x44059b
mov eax, dword [esp + 0x1b0]
test eax, eax
jle 0x440c1a
dec eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp]
mov esi, dword [0x884500]
cmp ecx, esi
jne 0x440c06
test edi, edi
jle 0x440c06
lea ecx, [edi - 1]
mov dword [esp + 0x50], ecx
cmp ecx, edi
jae 0x440bff
mov esi, dword [esp + 0x168]
mov edi, dword [esi + edi*4 - 4]
mov dword [esp + 0x4c], edi
mov edi, dword [esp + 0x54]
cmp ecx, edi
ja 0x440bf8
test eax, eax
jne 0x440629
test ebx, ebx
je 0x440b90
mov ebp, dword [ebp]
mov ebx, dword [0x8845a0]
mov eax, dword [esp + 0x150]
test eax, eax
je 0x4406c8
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x180]
mov dword [esp + 0x178], eax
mov dword [esp + 0x180], 0
mov eax, dword [esp + 0x188]
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], 0
mov dword [esp + 0x198], 0
cmp ebp, ebx
sete al
mov ebp, dword [esp + 0x1b0]
mov esi, edi
mov edi, ecx
mov ebx, dword [esp + 0x24]
mov ecx, eax
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x16c]
mov ebx, dword [esp + 0x168]
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x24]
jmp 0x44045c
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x160]
mov ebx, dword [esp + 0x140]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x20], edx
mov dword [esp + 0x140], ebx
movzx esi, byte [esp + 0x1b]
xchg esi, eax
test al, al
xchg esi, eax
je 0x440b89
mov dword [esp + 0x34], eax
mov ebp, dword [esp + 0x1bc]
test ebp, ebp
je 0x440b7d
mov esi, dword [esp + 0x1b8]
cmp eax, esi
jge 0x440b76
test ecx, ecx
je 0x4408d4
mov eax, dword [esp + 0x1ac]
mov edx, dword [eax + 0x68]
mov dword [esp + 0x68], edx
mov ebx, dword [ecx + 8]
mov dword [esp + 0x64], ebx
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x60], ecx
mov ebp, dword [eax + 0x64]
mov dword [esp + 0x5c], ebp
call fcn.004264d0
lea eax, [0x706899]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00426d40
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00426b80
lea eax, [0x70a3d8]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x7046cf]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00426d40
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x1ac]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x160], eax
test eax, eax
je 0x4408bc
mov ecx, dword [eax + 8]
mov dword [esp + 0x64], ecx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x60], edx
call fcn.004264d0
lea eax, [0x705772]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00426d40
mov eax, dword [esp + 0x160]
mov dword [esp], eax
call fcn.00426d00
lea eax, [0x7046d7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x7046cf]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00426d40
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x160]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x160], eax
test eax, eax
jne 0x4407fc
lea eax, [0x70f29a]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00425c90
ud2
test ebp, ebp
je 0x4408ea
cmp eax, esi
jge 0x440b6f
test edx, edx
jg 0x440abc
test ebp, ebp
je 0x44090d
cmp eax, esi
jge 0x44090d
mov ecx, dword [esp + 0x184]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x1ac]
mov ebx, dword [edx + 0x54]
mov dword [esp + 0x60], ebx
cmp ecx, ebx
jne 0x44091b
mov dword [esp + 0x1c8], eax
add esp, 0x19c
ret
mov ebp, dword [edx + 0x68]
mov dword [esp + 0x68], ebp
mov edi, dword [edx + 0x64]
mov dword [esp + 0x5c], edi
call fcn.004264d0
lea eax, [0x706899]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00426d40
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00426b80
lea eax, [0x706a51]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704bd0]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00426d40
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x1ac]
mov ecx, dword [eax + 4]
mov dword [esp + 0x64], ecx
mov eax, dword [eax]
mov dword [esp + 0x60], eax
call fcn.004264d0
lea eax, [0x705c83]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00426d40
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x70400e]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704977]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00426d40
mov eax, dword [esp + 0x34]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00426b80
lea eax, [0x704bbc]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00426d40
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00426b80
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
lea eax, [0x711964]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00425c90
ud2
mov eax, dword [esp + 0x1ac]
mov ecx, dword [eax + 0x64]
mov dword [esp + 0x5c], ecx
mov eax, dword [eax + 0x68]
mov dword [esp + 0x68], eax
call fcn.004264d0
lea eax, [0x706899]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00426d40
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.00426b80
lea eax, [0x70d3a3]
mov dword [esp], eax
mov dword [esp + 4], 0x1a
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x140]
mov ecx, dword [eax + 0x48]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
sub ecx, eax
mov dword [esp + 4], ecx
call fcn.00420d20
call fcn.004264d0
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
lea eax, [0x712373]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00425c90
ud2
test ebp, ebp
jmp 0x4408ea
test ebp, ebp
jmp 0x4408d6
mov esi, dword [esp + 0x1b8]
jmp 0x4408d6
mov eax, ebp
jmp 0x4406f8
mov ebx, dword [esp + 0x1b4]
mov dword [esp], ebx
movzx ebx, byte [esp + 0x1b]
mov byte [esp + 4], bl
mov ebx, dword [esp + 0x4c]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x10], ebx
call fcn.00441ac0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x158]
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x1b0]
jmp 0x440629
call fcn.004246e0
ud2
call fcn.00424680
ud2
mov esi, dword [esp + 0x168]
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
jmp 0x440629
mov ecx, dword [esp + 0x1b4]
test ecx, ecx
je 0x441111
mov esi, dword [esp + 0x178]
mov edi, dword [esp + 0x34]
cmp edi, 0x100000
jae 0x44110a
mov dword [ecx + edi*4], esi
test ebx, ebx
jne 0x4410ab
movzx esi, byte [esp + 0x1b]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x440c6f
inc edi
mov esi, dword [esp + 0x160]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x34], edi
mov edi, dword [esp + 0x50]
jmp 0x4405cf
mov esi, dword [esp + 0x1c4]
test esi, 1
je 0x441043
mov ecx, dword [esp + 0x178]
test edi, edi
jle 0x441032
mov esi, dword [ebp]
cmp ecx, esi
jbe 0x440ca7
movzx esi, byte [esp + 0x1a]
xchg esi, eax
test al, al
xchg esi, eax
je 0x44102c
mov dword [esp + 0x1c], ecx
mov dword [esp], ebp
call fcn.0043cb00
mov eax, dword [esp + 4]
mov dword [esp + 0x148], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x30], ecx
cmp ecx, 0xf
je 0x440fe5
mov dword [esp + 0x148], eax
mov dword [esp + 0x30], ecx
call fcn.004264d0
mov eax, dword [esp + 0x148]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.00426d40
lea eax, [0x704009]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x190]
mov dword [esp + 0x164], eax
xor ecx, ecx
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x194]
shr edx, 2
cmp ecx, edx
jae 0x440dc4
cmp ecx, 0xa
jae 0x440da4
test ecx, ecx
jne 0x440d77
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x64], edx
call fcn.004264d0
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
call fcn.00426540
mov eax, dword [esp + 0x44]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x164]
jmp 0x440d21
call fcn.004264d0
lea eax, [0x70405d]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x44]
jmp 0x440d40
call fcn.004264d0
lea eax, [0x704c16]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00426d40
call fcn.00426540
call fcn.004264d0
lea eax, [0x704059]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
call fcn.0043cc90
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x154], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x48], edx
call fcn.004264d0
lea eax, [0x70402a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
call fcn.00426d40
lea eax, [0x704014]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00426b80
call fcn.00426540
mov eax, dword [esp + 0x178]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x158]
mov edx, dword [ecx]
mov dword [esp + 0x60], edx
cmp eax, edx
ja 0x440f9f
mov eax, dword [esp + 0x14c]
mov edx, dword [eax + 0x18]
mov ebx, dword [edx + 0x64]
test ebx, ebx
jle 0x440f96
mov edx, dword [edx + 0x4c]
mov ebx, dword [esp + 0x1ac]
cmp ebx, edx
jne 0x440f88
mov edx, dword [esp + 0x188]
mov dword [esp + 0x64], edx
mov ebp, dword [esp + 0x184]
mov dword [esp + 0x60], ebp
call fcn.004264d0
lea eax, [0x7046bb]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x7046d7]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.00426d40
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
call fcn.00426540
call fcn.004264d0
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x2c]
inc eax
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x158]
movzx esi, byte [esp + 0x1b]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1b0]
jmp 0x440c56
mov edx, dword [esp + 0x40]
cmp edx, 2
jl 0x440f31
jmp 0x440ebd
mov ebx, dword [esp + 0x1ac]
jmp 0x440f88
call fcn.004264d0
lea eax, [0x704043]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
call fcn.00426540
mov ecx, dword [esp + 0x158]
jmp 0x440e96
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x708686]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xf
call fcn.00449f40
movzx eax, byte [esp + 0x10]
test al, al
je 0x44101c
lea eax, [0x704eff]
mov ecx, 5
jmp 0x440ccf
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x30]
jmp 0x440ccf
dec ecx
jmp 0x440ca7
test esi, 2
jne 0x440ca7
jmp 0x440c91
mov dword [esp], ebp
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 8], al
xchg esi, eax
call fcn.00442310
movzx eax, byte [esp + 0xc]
test al, al
jne 0x44107b
mov eax, dword [esp + 0x2c]
jmp 0x440f56
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x158]
mov esi, dword [esp + 0x1c4]
mov edi, dword [esp + 0x34]
jmp 0x440c82
lea esi, [esp + 0x174]
mov dword [esp], esi
mov esi, dword [esp + 0x1c0]
mov dword [esp + 4], esi
mov esi, dword [ebx]
mov edx, ebx
call esi
movzx eax, byte [esp + 8]
test al, al
je 0x4410f8
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x158]
mov edi, dword [esp + 0x34]
jmp 0x440c4b
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c8], eax
add esp, 0x19c
ret
call fcn.00424680
ud2
test ebx, ebx
mov edi, dword [esp + 0x34]
jmp 0x440c45
cmp eax, 0xffffffff
jne 0x4405bb
jmp 0x4405ad
mov dword [esp + 0x17c], 0
jmp 0x440590
mov esi, dword [esp + 0x160]
jmp 0x440590
mov edx, dword [esp + 0x188]
mov dword [esp + 0x190], edx
lea edx, [esp + 0x174]
mov dword [esp], edx
mov dword [esp + 4], ebp
xchg esi, eax
mov byte [esp + 8], al
xchg esi, eax
mov dword [esp + 0xc], 0
call fcn.00441920
mov eax, dword [esp + 0x10]
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x198], eax
movzx eax, byte [esp + 0x1b]
movzx ecx, byte [esp + 0x1a]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1bc]
mov ebp, dword [esp + 0x158]
mov edi, dword [esp + 0x50]
jmp 0x44054f
movzx eax, byte [esp + 0x1b]
jmp 0x441146
mov eax, dword [esp + 0x180]
test eax, eax
jne 0x4413e4
mov eax, dword [esp + 0x188]
add eax, 0xfffffffc
mov esi, eax
mov esi, dword [esi]
mov dword [esp + 0x180], esi
mov dword [esp + 0x38], eax
mov esi, dword [esp + 0x180]
mov edi, dword [0x8845a4]
cmp esi, edi
jne 0x4413d8
test edx, edx
je 0x44133a
mov esi, dword [esp + 0x16c]
mov edi, dword [esi]
cmp edi, eax
jne 0x44133a
mov eax, dword [esi + 4]
mov dword [esp + 0x180], eax
lea eax, [ebx - 2]
sar eax, 0x1f
xor eax, 0xffffffff
and eax, 8
add eax, esi
dec edx
dec ebx
mov dword [esp + 0x20], edx
mov dword [esp + 0x16c], eax
mov dword [esp + 0x24], ebx
mov esi, dword [esp + 0x180]
mov dword [esp], esi
call fcn.0043c430
mov eax, dword [esp + 4]
test eax, eax
je 0x441271
movzx ecx, byte [esp + 0x1a]
mov ebp, dword [esp + 0x158]
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x16c]
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
jmp 0x440505
mov edx, dword [esp + 0x1bc]
test edx, edx
jne 0x44127e
jmp 0x44124d
mov eax, dword [esp + 0x158]
mov dword [esp], eax
call fcn.0043cb00
mov eax, dword [esp + 0x180]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x16c], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x6c], edx
call fcn.004264d0
lea eax, [0x711300]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00426d40
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.00426d40
lea eax, [0x707685]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
lea eax, [0x709478]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00425c90
ud2
call fcn.004264d0
lea eax, [0x70e5d7]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.00426d40
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x706a67]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x140]
mov ecx, dword [eax + 0x48]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
sub ecx, eax
mov dword [esp + 4], ecx
call fcn.00420d20
call fcn.004264d0
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
lea eax, [0x70a98c]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00425c90
ud2
mov eax, dword [esp + 0x16c]
jmp 0x441227
xor eax, eax
jmp 0x4411db
mov eax, dword [0x884570]
cmp esi, eax
jne 0x4413ff
mov eax, 1
jmp 0x4404e9
mov eax, dword [0x884568]
cmp esi, eax
jne 0x441413
mov eax, 1
jmp 0x4404e9
mov eax, dword [0x88456c]
cmp esi, eax
jne 0x441427
mov eax, 1
jmp 0x4404e9
mov eax, dword [0x884598]
cmp esi, eax
jne 0x44143b
mov eax, 1
jmp 0x4404e9
mov eax, dword [0x884528]
test eax, eax
je 0x44144f
cmp esi, eax
sete al
jmp 0x4404e9
xor eax, eax
jmp 0x4404e9
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x1c4]
test ecx, 4
je 0x441601
mov ecx, dword [ebp]
mov ebp, dword [0x8845ac]
cmp ecx, ebp
jne 0x4415dd
mov ecx, dword [esp + 0x14c]
mov ebp, dword [ecx + 0x18]
mov ebp, dword [ebp]
mov ecx, dword [esp + 0x1ac]
cmp ecx, ebp
jne 0x4415b9
mov ebp, dword [ecx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
je 0x441595
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x28], eax
mov dword [esp + 0x184], eax
mov edx, dword [ecx + 0x18]
mov edx, dword [edx + 0x4c]
mov ebx, dword [edx + 0x4c]
mov ebp, dword [edx + 0x50]
mov esi, dword [edx + 0x44]
mov edi, dword [edx + 0x48]
cmp ebp, edi
ja 0x44158e
sub edi, ebp
sub ebx, ebp
shl ebp, 3
lea ecx, [ebx - 1]
sar ecx, 0x1f
xor ecx, 0xffffffff
and ebp, ecx
lea ecx, [ebp + esi]
mov ebp, dword [edx + 0xcc]
mov esi, dword [edx + 0xd0]
mov eax, dword [edx + 0xd4]
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x168], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x140], edx
mov eax, dword [esp + 0x158]
mov dword [esp], eax
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0043ccf0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
lea eax, [eax + ecx + 4]
mov dword [esp + 0x188], eax
movzx ecx, byte [esp + 0x1a]
mov ebp, dword [esp + 0x158]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0x16c]
mov edx, dword [esp + 0x168]
mov dword [esp + 0x16c], edx
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
jmp 0x4404c0
call fcn.004246e0
ud2
mov dword [esp + 0x28], eax
mov ebp, dword [esp + 0x16c]
mov eax, esi
mov ecx, dword [esp + 0x168]
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0x140]
jmp 0x4414fb
mov dword [esp + 0x28], eax
mov ebp, dword [esp + 0x16c]
mov eax, esi
mov ecx, dword [esp + 0x168]
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0x140]
jmp 0x4414fb
mov dword [esp + 0x28], eax
mov ebp, dword [esp + 0x16c]
mov eax, esi
mov ecx, dword [esp + 0x168]
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0x140]
jmp 0x4414fb
mov dword [esp + 0x28], eax
mov ebp, dword [esp + 0x16c]
mov eax, esi
mov ecx, dword [esp + 0x168]
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0x140]
jmp 0x4414fb
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x160]
mov ebx, dword [esp + 0x140]
mov ebp, dword [esp + 0x34]
jmp 0x4406de
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x160]
mov ebx, dword [esp + 0x140]
mov ebp, dword [esp + 0x34]
jmp 0x4406de
mov eax, dword [esp + 0x1bc]
test eax, eax
jne 0x441678
mov dword [esp + 0x1c8], 0
add esp, 0x19c
ret
mov eax, dword [esp + 0x178]
mov dword [esp + 0x64], eax
call fcn.004264d0
lea eax, [0x70aaa4]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00426d40
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
lea eax, [0x706943]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00425c90
ud2
mov eax, dword [esp + 0x20]
test eax, eax
jle 0x441871
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x170]
mov eax, dword [ecx + eax]
mov ecx, dword [esp + 0x1a4]
cmp eax, ecx
jae 0x441799
mov eax, dword [esp + 0x1ac]
mov ecx, dword [eax + 0x50]
mov edx, dword [eax + 0x48]
mov ebx, dword [eax + 0x44]
cmp ecx, edx
jae 0x441792
mov edx, ecx
shl ecx, 3
mov ecx, dword [ebx + ecx + 4]
mov dword [esp + 0x178], ecx
mov ebx, dword [eax + 0x4c]
mov dword [esp + 0x6c], ebx
mov ebp, dword [eax + 0x48]
mov dword [esp + 0x58], ebp
mov esi, dword [eax + 0x44]
mov dword [esp + 0x170], esi
inc edx
mov dword [esp + 0x64], edx
cmp edx, ebp
ja 0x44178b
mov dword [esp], ecx
call fcn.0043c430
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x64]
sub edx, eax
mov ebx, dword [esp + 0x6c]
sub ebx, eax
shl eax, 3
lea ecx, [ebx - 1]
sar ecx, 0x1f
xor ecx, 0xffffffff
and eax, ecx
mov ecx, dword [esp + 0x170]
add ecx, eax
mov eax, dword [esp + 4]
jmp 0x4403ea
call fcn.004246e0
ud2
call fcn.00424680
ud2
mov eax, dword [esp + 0x1ac]
mov edx, dword [eax + 0x50]
test edx, edx
jbe 0x4417ca
mov ebx, dword [eax + 0x48]
mov ebp, dword [eax + 0x44]
dec edx
cmp edx, ebx
jae 0x44186a
mov ebx, edx
shl edx, 3
mov edx, dword [ebp + edx]
cmp edx, ecx
jae 0x4417ca
mov ecx, ebx
jmp 0x441718
call fcn.004264d0
call fcn.004264d0
lea eax, [0x71615d]
mov dword [esp], eax
mov dword [esp + 4], 0x35
call fcn.00426d40
mov eax, dword [esp + 0x1a4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00426c10
lea eax, [0x704093]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00426d40
call fcn.00426540
mov eax, dword [esp + 0x1ac]
mov ecx, dword [eax + 0x50]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00420d20
call fcn.004264d0
lea eax, [0x704028]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00426d40
call fcn.00426540
lea eax, [0x711168]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.00425c90
ud2
call fcn.00424680
ud2
mov ecx, dword [esp + 0x1a4]
jmp 0x441799
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
jmp 0x4403ea
mov ebx, dword [esp + 0x1bc]
test ebx, ebx
setne bl
xor ebx, 1
mov byte [esp + 0x1b], bl
mov ebx, dword [esp + 0x1b4]
jmp 0x44035e
mov ebx, dword [ecx + 0x24]
mov edx, dword [ecx + 0x20]
jmp 0x4402f4
mov ebx, edx
mov edx, dword [esp + 0x1a4]
jmp 0x4402f4
mov ebx, edx
mov edx, dword [esp + 0x1a4]
jmp 0x4402f4
call fcn.004246e0
ud2
lea eax, [0x716c3b]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00425c90
ud2
lea eax, [0x713bc4]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00425c90
ud2
call fcn.004486b0
jmp fcn.00440210