Function at 0x441fd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x442e93
sub esp, 0x110
mov esi, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
cmp ecx, esi
jne 0x442014
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
movzx ebp, byte [ecx + 0xf]
mov ebx, ebp
and ebx, 0x1f
mov edx, ebx
movzx ebp, byte [esi + 0xf]
mov ebx, ebp
and ebx, 0x1f
mov byte [esp + 0x17], dl
cmp bl, dl
je 0x44203f
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov dword [esp], ecx
call fcn.004409a0
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
call fcn.004409a0
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x442e84
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x442e84
mov ebx, dword [esp + 0x114]
mov dword [esp], ebx
call fcn.00440a40
mov ebx, dword [esp + 4]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
call fcn.00440a40
movzx edi, byte [esp + 0x17]
mov esi, dword [esp + 0x38]
mov edx, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
mov eax, dword [esp + 4]
xor ebp, ebp
cmp esi, ebp
jne 0x442d9a
xor ebp, ebp
cmp eax, ebp
jne 0x442d9a
xchg edi, eax
cmp al, 1
xchg edi, eax
jb 0x44212c
xchg edi, eax
cmp al, 0x10
xchg edi, eax
ja 0x44212c
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x15
xchg edi, eax
ja 0x442a5d
xchg edi, eax
cmp al, 0x12
xchg edi, eax
ja 0x44223e
xchg edi, eax
cmp al, 0x11
xchg edi, eax
jne 0x442198
mov dword [esp + 0x74], ecx
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov dword [esp + 0x68], edx
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x44218e
mov ebx, dword [esp + 0x74]
mov ecx, dword [ebx + 0x28]
mov ebx, dword [esp + 0x68]
mov ebp, dword [ebx + 0x28]
cmp ecx, ebp
jne 0x44218e
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
jmp 0x442187
xchg edi, eax
cmp al, 0x12
xchg edi, eax
jne 0x4421de
mov esi, dword [ecx + 0x24]
mov ebp, dword [edx + 0x24]
cmp esi, ebp
jne 0x4421d4
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x4421d4
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
jmp 0x4421cd
call fcn.00425780
mov ebx, 0x4876f3
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.00426190
call fcn.00425990
movzx ebx, byte [esp + 0x17]
xor ecx, ecx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00425fa0
call fcn.004259d0
call fcn.00425800
mov ebx, 0x4876f3
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.00424fa0
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x13
xchg edi, eax
jne 0x44268d
mov dword [esp + 0x64], ecx
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0x64]
movzx ebp, word [ebx + 0x22]
mov ecx, ebp
mov ebx, dword [esp + 0x60]
movzx ebp, word [ebx + 0x22]
cmp cx, bp
jne 0x44267e
mov ebx, dword [esp + 0x64]
movzx ebp, word [ebx + 0x20]
mov ecx, ebp
mov ebx, dword [esp + 0x60]
movzx ebp, word [ebx + 0x20]
cmp cx, bp
jne 0x44267e
mov ecx, dword [esp + 0x64]
xor ebx, ebx
mov eax, 0x24
movzx ebp, byte [ecx + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x4422a3
add eax, 0x10
mov edx, ecx
add edx, eax
movzx ebp, word [ecx + 0x20]
cmp ebp, 0x100000
ja 0x442677
mov esi, edx
cmp edx, 0
je 0x442670
mov edi, 0x100000
mov dword [esp + 0xa8], ebp
mov ecx, dword [esp + 0x60]
xor ebx, ebx
mov eax, 0x24
movzx ebp, byte [ecx + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x4422ea
add eax, 0x10
mov edx, ecx
add edx, eax
movzx ebp, word [ecx + 0x20]
mov eax, ebp
cmp ebp, 0x100000
ja 0x442669
mov ebp, edx
cmp edx, 0
je 0x442662
mov ecx, eax
mov eax, 0x100000
mov dword [esp + 0xa4], esi
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x108], ebx
mov dword [esp + 0xac], edi
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0x104], esi
mov dword [esp + 0xec], esi
mov edx, dword [esp + 0x108]
mov dword [esp + 0x10c], edi
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0xdc], eax
xor eax, eax
mov dword [esp + 0xf0], edx
cmp eax, edx
jge 0x442416
mov ebx, eax
cmp eax, edx
jae 0x44265b
mov ebp, dword [esp + 0xec]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 0x1c], eax
mov ebx, eax
mov ebp, dword [esp + 0xd8]
cmp eax, ebp
jae 0x442654
mov ebp, dword [esp + 0xd4]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp + 4], ebx
call fcn.00441fd0
mov edx, dword [esp + 0xf0]
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x442406
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0xf0], edx
cmp eax, edx
jl 0x44239d
mov eax, dword [esp + 0x64]
xor ebx, ebx
mov ecx, 0x24
movzx ebp, byte [eax + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x442432
add ecx, 0x10
movzx ebp, word [eax + 0x22]
mov ebx, ebp
and ebx, 0x7fff
mov edi, ebx
mov esi, eax
add esi, ecx
movzx ebp, word [eax + 0x20]
mov ecx, ebp
movzx ebp, word [eax + 0x20]
mov ebx, ebp
add ebx, edi
mov edx, ebx
movzx ebx, cx
mov eax, ebx
movzx ebx, dx
cmp ebx, 0x100000
ja 0x44264d
cmp eax, ebx
ja 0x44264d
mov edx, ebx
sub edx, eax
mov ecx, 0x100000
sub ecx, eax
mov ebx, esi
cmp esi, 0
je 0x442646
cmp ecx, 0
je 0x442492
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], edx
mov edi, ecx
mov eax, dword [esp + 0x60]
xor ebx, ebx
mov ecx, 0x24
movzx ebp, byte [eax + 0xc]
mov ebx, ebp
and ebx, 1
cmp bl, 0
je 0x4424be
add ecx, 0x10
movzx ebp, word [eax + 0x22]
mov ebx, ebp
and ebx, 0x7fff
mov esi, ebx
mov edx, eax
add edx, ecx
movzx ebp, word [eax + 0x20]
mov ecx, ebp
movzx ebp, word [eax + 0x20]
mov ebx, ebp
add ebx, esi
mov ebp, ebx
movzx ebx, cx
mov eax, ebx
movzx ebx, bp
cmp ebx, 0x100000
ja 0x44263f
cmp eax, ebx
ja 0x44263f
mov esi, ebx
sub esi, eax
mov ecx, 0x100000
sub ecx, eax
mov ebx, edx
cmp edx, 0
je 0x442638
cmp ecx, 0
je 0x44251e
mov ebp, eax
imul ebp, ebp, 4
add ebx, ebp
mov ebp, ebx
mov edx, esi
mov eax, ecx
mov esi, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x108], ebx
mov dword [esp + 0xb8], edi
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], edx
mov ecx, edx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x104], esi
mov dword [esp + 0xe0], esi
mov edx, dword [esp + 0x108]
mov dword [esp + 0x10c], edi
mov dword [esp + 0xe8], edi
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0xd0], eax
xor eax, eax
cmp eax, edx
jge 0x44261b
mov ebx, eax
mov dword [esp + 0xe4], edx
cmp eax, edx
jae 0x442631
mov ebp, dword [esp + 0xe0]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp], ebx
mov dword [esp + 0x18], eax
mov ebx, eax
mov ebp, dword [esp + 0xcc]
cmp eax, ebp
jae 0x44262a
mov ebp, dword [esp + 0xc8]
shl ebx, 2
add ebp, ebx
mov ebx, dword [ebp]
mov dword [esp + 4], ebx
call fcn.00441fd0
mov edx, dword [esp + 0xe4]
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x442612
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x18]
inc eax
cmp eax, edx
jl 0x4425aa
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
call fcn.00423330
ud2
call fcn.00423330
ud2
mov dword [edx], eax
jmp 0x442512
call fcn.004233a0
ud2
mov dword [esi], eax
jmp 0x442486
call fcn.004233a0
ud2
call fcn.00423330
ud2
call fcn.00423330
ud2
mov dword [edx], eax
jmp 0x44230b
call fcn.004233a0
ud2
mov dword [edx], eax
jmp 0x4422c2
call fcn.004233a0
ud2
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x14
xchg edi, eax
jne 0x4429f1
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], ecx
mov eax, ecx
cmp ecx, 0
je 0x4429ea
add eax, 0x20
cld
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.00441650
mov ebx, dword [esp + 4]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x58]
cmp eax, 0
je 0x4429e3
add eax, 0x20
cld
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.00441650
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x4429d4
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x90], edi
mov dword [esp + 8], edi
mov dword [esp + 0x94], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4429d4
mov ecx, dword [edx + 0x28]
mov ebx, dword [esp + 0x58]
mov ebp, dword [ebx + 0x28]
cmp ecx, ebp
je 0x442759
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xor eax, eax
mov ebp, dword [edx + 0x28]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x20]
cmp eax, ebp
jge 0x442970
mov dword [esp + 0x24], eax
mov ebp, eax
mov esi, dword [edx + 0x28]
cmp eax, esi
jae 0x4429cd
mov ecx, dword [edx + 0x24]
shl ebp, 3
add ecx, ebp
mov ebx, dword [esp + 0x58]
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x4429c6
mov esi, dword [ebx + 0x24]
shl ebp, 3
add esi, ebp
mov dword [esp + 0x2c], esi
mov dword [esp], edx
cmp dword [esp], 0
je 0x4429bb
mov dword [esp + 0x40], ecx
mov ebp, dword [ecx]
mov dword [esp + 4], ebp
call fcn.00440ec0
mov ebx, dword [esp + 8]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x4429b0
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx]
mov dword [esp + 4], ebp
call fcn.00440ec0
mov ebx, dword [esp + 8]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp], ebx
call fcn.00441650
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp], ebx
call fcn.00441650
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x4429a1
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x4429a1
mov ebx, dword [esp + 0x3c]
mov dword [esp], ebx
call fcn.00441830
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x28]
mov dword [esp], ebx
call fcn.00441830
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x442992
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x442992
mov ebx, dword [esp + 0x5c]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x442987
mov ebx, dword [esp + 0x40]
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
call fcn.00440f10
mov ebx, dword [esp + 8]
mov dword [esp + 0x6c], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x44297f
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
call fcn.00440f10
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0x6c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00441fd0
mov edx, dword [esp + 0x5c]
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x44295f
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x24]
inc eax
mov ebp, dword [esp + 0x20]
cmp eax, ebp
jl 0x44276e
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov dword [0], eax
jmp 0x44291e
mov dword [0], eax
jmp 0x4428f9
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov dword [0], eax
jmp 0x4427d9
mov dword [0], eax
jmp 0x4427b1
call fcn.00423330
ud2
call fcn.00423330
ud2
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov dword [eax], eax
jmp 0x4426dc
mov dword [ecx], eax
jmp 0x4426ab
xchg edi, eax
cmp al, 0x15
xchg edi, eax
jne 0x4421de
mov dword [esp + 0x54], ecx
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov dword [esp + 0x50], edx
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x442a53
mov ebx, dword [esp + 0x54]
mov ebp, dword [ebx + 0x24]
mov dword [esp], ebp
mov ebx, dword [esp + 0x50]
mov ebp, dword [ebx + 0x24]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x442a53
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
jmp 0x442a4c
xchg edi, eax
cmp al, 0x17
xchg edi, eax
ja 0x442ac0
xchg edi, eax
cmp al, 0x16
xchg edi, eax
jne 0x442a90
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
mov byte [esp + 0x11c], bl
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x17
xchg edi, eax
jne 0x4421de
mov ebp, dword [ecx + 0x20]
mov dword [esp], ebp
mov ebp, dword [edx + 0x20]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
mov byte [esp + 0x11c], bl
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x18
xchg edi, eax
jne 0x442ad6
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
xchg edi, eax
cmp al, 0x19
xchg edi, eax
jne 0x442d8a
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x4c]
mov eax, dword [ebx + 0x28]
mov ebx, dword [esp + 0x48]
mov ebp, dword [ebx + 0x28]
cmp eax, ebp
je 0x442b0a
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
xor eax, eax
mov ebx, dword [esp + 0x4c]
mov ebp, dword [ebx + 0x28]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x24]
cmp eax, ebp
jge 0x442d40
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x4c]
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x442d83
mov ecx, dword [ebx + 0x24]
imul ebp, ebp, 0xc
add ecx, ebp
mov ebx, dword [esp + 0x48]
mov ebp, eax
mov esi, dword [ebx + 0x28]
cmp eax, esi
jae 0x442d7c
mov esi, dword [ebx + 0x24]
imul ebp, ebp, 0xc
add esi, ebp
mov dword [esp + 0x30], esi
mov dword [esp + 0x44], ecx
cld
mov ecx, dword [ecx]
mov dword [esp], ecx
call fcn.00441650
mov ebx, dword [esp + 4]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0x30]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00441650
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x442d6d
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x90], edi
mov dword [esp + 8], edi
mov dword [esp + 0x94], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x442d6d
mov ebx, dword [esp + 0x44]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00441830
mov ebx, dword [esp + 4]
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x94], ebx
mov ebx, dword [esp + 0x30]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00441830
mov edi, dword [esp + 0x94]
mov esi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, edx
jne 0x442d5e
mov ebp, dword [esp + 0x90]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x88], esi
mov dword [esp + 8], esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x442d5e
mov ebx, dword [esp + 0x44]
mov ebp, dword [ebx + 4]
mov dword [esp], ebp
mov ebx, dword [esp + 0x30]
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
call fcn.00441fd0
movzx ebx, byte [esp + 8]
cmp bl, 0
jne 0x442c94
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov ebx, dword [esp + 0x44]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00441740
mov ebx, dword [esp + 4]
mov dword [esp + 0x88], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x8c], ebx
mov ebx, dword [esp + 0x30]
cld
mov ecx, dword [ebx]
mov dword [esp], ecx
call fcn.00441740
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 4]
mov edx, dword [esp + 8]
cmp esi, edx
jne 0x442d4f
mov ebp, dword [esp + 0x88]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x90], edi
mov dword [esp + 8], edi
mov dword [esp + 0x94], edx
mov dword [esp + 0xc], edx
call fcn.0044a460
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x442d4f
mov ebx, dword [esp + 0x44]
mov eax, dword [ebx + 8]
mov ebx, dword [esp + 0x30]
mov ebp, dword [ebx + 8]
cmp eax, ebp
je 0x442d2f
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov eax, dword [esp + 0x20]
inc eax
mov ebp, dword [esp + 0x24]
cmp eax, ebp
jl 0x442b23
mov byte [esp + 0x11c], 1
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
call fcn.00423330
ud2
call fcn.00423330
ud2
xchg edi, eax
cmp al, 0x1a
xchg edi, eax
je 0x442ac7
jmp 0x4421de
xor ebp, ebp
cmp esi, ebp
je 0x442e75
mov dword [esp + 0x34], eax
xor ebp, ebp
cmp eax, ebp
je 0x442e75
mov dword [esp], ecx
mov ebp, dword [esi]
mov dword [esp + 4], ebp
call fcn.00440ec0
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
mov dword [esp], eax
call fcn.00441650
mov ebx, dword [esp + 4]
mov dword [esp + 0x80], ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x84], ebx
mov ebx, dword [esp + 0x118]
mov dword [esp], ebx
mov ebx, dword [esp + 0x34]
mov ebp, dword [ebx]
mov dword [esp + 4], ebp
call fcn.00440ec0
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
mov dword [esp], eax
call fcn.00441650
mov edi, dword [esp + 0x84]
mov esi, dword [esp + 4]
mov eax, dword [esp + 8]
cmp edi, eax
jne 0x442e66
mov ebp, dword [esp + 0x80]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x78], esi
mov dword [esp + 8], esi
mov dword [esp + 0x7c], eax
mov dword [esp + 0xc], eax
call fcn.0044a460
movzx edi, byte [esp + 0x17]
mov edx, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
movzx ebx, byte [esp + 0x10]
cmp bl, 0
jne 0x44210f
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
mov byte [esp + 0x11c], 0
add esp, 0x110
ret
call fcn.00448770
jmp fcn.00441fd0