Function at 0x447690
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x14c]
cmp eax, dword [ecx + 8]
jbe 0x448d41
sub esp, 0x1cc
mov eax, dword [esp + 0x1e0]
test eax, eax
jle 0x448b15
mov ecx, dword [esp + 0x1ec]
test ecx, ecx
jne 0x448d2a
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [esp + 0x1dc]
cmp edx, ebx
jne 0x4476f5
mov ebp, dword [edx + 0x18]
cmp dword [ebp + 0x4c], edx
je 0x448d14
call fcn.00438630
mov eax, dword [esp]
cmp eax, 2
mov ecx, dword [esp + 0x1d0]
cmp ecx, 0xffffffff
jne 0x448b0c
mov edx, dword [esp + 0x1d4]
cmp edx, 0xffffffff
jne 0x448af7
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x38]
test edx, edx
je 0x448ae9
mov ebx, dword [ecx + 0x3c]
xor ebp, ebp
mov dword [esp + 0x78], eax
lea edi, [esp + 0x1a0]
mov esi, eax
xor eax, eax
call fcn.00452855
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b4], edx
mov ecx, dword [esp + 0x1dc]
mov edi, esi
mov esi, dword [ecx + 0xbc]
mov ecx, dword [ecx + 0xb8]
mov dword [esp + 0x190], ecx
mov ecx, dword [esp + 0x1e4]
test ecx, ecx
je 0x448ac6
xor eax, eax
mov byte [esp + 0x1f], al
xor eax, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x18c], ebp
test ebx, ebx
jne 0x4477b0
mov ebx, edx
mov edx, dword [edx]
mov dword [esp + 0x1a8], edx
lea edx, [ebx + 4]
mov dword [esp + 0x1b4], edx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call fcn.00443050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x448a16
mov dword [esp + 0x1a0], ecx
mov dword [esp + 0x1a4], eax
lea edi, [esp + 0x9c]
xor eax, eax
call fcn.00452830
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [esp + 0x1e0]
mov esi, dword [esp + 0x190]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18c]
xor edi, edi
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1c], al
xchg edi, eax
xor edi, edi
xchg edi, eax
mov byte [esp + 0x1d], al
xchg edi, eax
xor edi, edi
mov dword [esp + 0x2c], edi
jmp 0x4478b3
mov dword [esp + 0x1a0], ebx
mov ebx, dword [esp + 0x174]
mov dword [esp + 0x1a4], ebx
mov ebx, dword [esp + 0x1b0]
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1b0], 0
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], 0
mov dword [esp + 0x1c8], 0
xchg ebp, eax
cmp al, 9
xchg ebp, eax
sete bl
mov ebp, dword [esp + 0x1dc]
mov edi, eax
mov byte [esp + 0x1c], bl
mov eax, esi
mov esi, dword [esp + 0x19c]
mov ebp, dword [esp + 0x1e0]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x1dc]
xor edx, edx
cmp edi, ecx
jge 0x448a0b
mov dword [esp + 0x38], edi
mov dword [esp + 0x1e0], ebp
mov ebp, dword [esp + 0x1a0]
mov edi, dword [esp + 0x1a4]
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x4489fe
mov dword [esp + 0x18c], edx
mov ebx, dword [esp + 0x1b8]
test ebx, ebx
je 0x4488a8
mov dword [esp + 0x178], edi
mov ebx, dword [esp + 0x1dc]
mov edi, dword [ebx + 0x18]
test edi, edi
je 0x4488a1
cmp dword [edi], ebx
xchg edi, ebx
sete bl
xchg edi, ebx
movzx ebx, byte [ebp + 0x20]
cmp bl, 2
jne 0x44885c
mov ebx, 1
mov dword [esp + 0x5c], eax
mov dword [esp + 0x19c], esi
mov dword [esp + 0x180], ebp
test bl, bl
je 0x448673
mov dword [esp + 0x1b0], 0
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x174], ebx
mov dword [esp + 0x184], edi
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 0x1bc], ebx
add ebx, 0xfffffffc
mov dword [esp + 0x1bc], ebx
mov ebx, dword [esp + 0x1ec]
test ebx, ebx
je 0x448656
mov edi, dword [esp + 0x1b8]
mov dword [esp + 0x1c0], edi
je 0x44864f
cmp dword [ebp + 8], 0x80000000
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [ebp + 8]
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c8], 0
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4485ea
mov esi, dword [esp + 0x1a8]
mov dword [esp + 0x1ac], esi
movzx esi, byte [esp + 0x1c]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4485e1
mov edi, dword [esp + 0x1a0]
mov edx, esi
mov esi, dword [edi + 0xc]
test esi, esi
je 0x4485cf
mov edi, dword [edi]
lea esi, [esi + edi + 1]
mov dword [esp + 0x1ac], esi
test ebx, ebx
jne 0x44856d
mov esi, dword [esp + 0x1e4]
test esi, esi
je 0x448558
mov edi, dword [esp + 0x1a8]
mov dword [esp + 0x20], edi
mov ebx, dword [esp + 0x38]
test ebx, ebx
jle 0x448531
cmp dword [ebp], edi
jae 0x447a41
test dl, dl
je 0x448522
cmp byte [ebp + 0x23], 4
ja 0x448501
mov dword [esp + 0x94], eax
xor eax, eax
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x74], edi
mov edi, dword [esp + 0x198]
test edi, edi
jne 0x44838b
movzx edi, byte [esp + 0x1d]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x28], edi
movzx edi, byte [esp + 0x1d]
cmp byte [ebp + 0x20], 0x14
jne 0x447aa7
xchg edi, eax
cmp al, 0x12
xchg edi, eax
jne 0x44836f
mov edi, 1
xchg edi, eax
test al, al
xchg edi, eax
je 0x448363
mov edi, dword [esp + 0x1e0]
test edi, edi
jle 0x44833f
dec edi
movzx esi, byte [ebp + 0x20]
dec ebx
mov dword [esp + 0x1e0], edi
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x44832f
mov dword [esp + 0x70], ebx
mov edi, dword [esp + 0x1a8]
test ebx, ebx
jle 0x44830e
cmp dword [ebp], edi
jae 0x447af2
test dl, dl
je 0x448308
cmp byte [ebp + 0x23], 4
ja 0x4482f0
xor edx, edx
test edx, edx
jne 0x44806f
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x1f4]
test edi, 1
je 0x448009
mov esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x447c4d
movzx esi, byte [ebp + 0x20]
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
inc ebx
cmp byte [ebp + 0x20], 0xe
jne 0x447c3f
test eax, eax
jle 0x447c3f
mov edi, dword [esp + 0x19c]
mov esi, dword [edi + eax*4 - 4]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x1e0]
test esi, esi
jne 0x447c33
mov esi, dword [esp + 0x1ec]
test esi, esi
je 0x447bda
lea esi, [eax - 1]
movzx ebp, byte [ebp + 0x20]
xchg ebp, eax
cmp al, 9
xchg ebp, eax
mov eax, ebx
mov ebx, dword [esp + 0x184]
test ebx, ebx
jne 0x44782f
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x447bd6
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x447bc8
cmp edx, ecx
jge 0x447bc8
mov eax, dword [esp + 0x1b4]
mov ebx, dword [esp + 0x1dc]
mov ebp, dword [ebx + 0x40]
cmp eax, ebp
jne 0x448b21
mov dword [esp + 0x1f8], edx
add esp, 0x1cc
ret
mov edx, eax
jmp 0x447ba0
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x1e4]
mov dword [esp], eax
movzx edx, byte [esp + 0x1f]
mov byte [esp + 4], dl
mov ebp, dword [esp + 0x58]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.00448ed0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1ec]
mov edi, dword [esp + 0x19c]
jmp 0x447b7a
mov esi, dword [esp + 0x1ec]
jmp 0x447b7a
mov edi, dword [esp + 0x19c]
mov esi, eax
jmp 0x447b7d
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00443640
mov eax, dword [esp + 8]
mov dword [esp + 0x160], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [esp + 8], ebx
call fcn.004438c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x16c], edx
mov ebx, dword [esp + 0x30]
cmp ebx, 0xf
je 0x447fc3
mov ebp, dword [esp + 0x160]
mov dword [esp + 0x160], ebp
mov dword [esp + 0x30], ebx
call fcn.0042d270
mov eax, dword [esp + 0x160]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0042db10
lea eax, [0x9037ab]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042db10
call fcn.0042d2e0
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0x198], eax
xor ecx, ecx
jmp 0x447d4d
test byte [eax], al
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x74], edx
call fcn.0042d270
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
call fcn.0042d2e0
mov eax, dword [esp + 0x4c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x198]
mov edx, dword [esp + 0x1c4]
shr edx, 2
cmp ecx, edx
jae 0x447db5
cmp ecx, 0xa
jae 0x447d95
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x447d18
call fcn.0042d270
lea eax, [0x903812]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042db10
call fcn.0042d2e0
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x4c]
jmp 0x447d18
call fcn.0042d270
lea eax, [0x903f85]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042db10
call fcn.0042d2e0
call fcn.0042d270
lea eax, [0x903806]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042db10
call fcn.0042d2e0
call fcn.0042d270
lea eax, [0x9037d1]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042db10
mov eax, dword [esp + 0x16c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0042db10
lea eax, [0x9037ba]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042db10
mov eax, dword [esp + 0x44]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d950
call fcn.0042d2e0
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x180]
mov edx, dword [ecx]
cmp eax, edx
ja 0x447f75
mov eax, dword [esp + 0x1dc]
mov edx, dword [eax + 0x18]
test edx, edx
je 0x447f6c
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x447f63
cmp dword [edx + 0x4c], eax
jne 0x447f54
mov eax, dword [esp + 0x1b8]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x1b4]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x1a8]
mov dword [esp + 0x64], edx
call fcn.0042d270
lea eax, [0x903bab]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042db10
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
lea eax, [0x903bcb]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042db10
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
lea eax, [0x903bc3]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042db10
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
call fcn.0042d2e0
call fcn.0042d270
call fcn.0042d490
call fcn.0042d2e0
mov eax, dword [esp + 0x2c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x447b34
mov edx, dword [esp + 0x78]
cmp edx, 2
jge 0x447e73
jmp 0x447f1c
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x447f5b
mov edx, dword [esp + 0x78]
cmp edx, 2
jmp 0x447f5b
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], edx
call fcn.0042d270
lea eax, [0x9037e2]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042db10
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x68]
sub eax, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
call fcn.0042d2e0
mov ecx, dword [esp + 0x180]
jmp 0x447e4d
mov eax, dword [esp + 0x160]
mov dword [esp], eax
lea ecx, [0x90813e]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.00402840
movzx eax, byte [esp + 0xc]
test al, al
je 0x447ff9
lea ebp, [0x904160]
mov ebx, 5
jmp 0x447cc4
mov ebp, dword [esp + 0x160]
mov ebx, dword [esp + 0x30]
jmp 0x447cc4
movzx eax, byte [ebp + 0x20]
mov dword [esp], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x1dc]
mov dword [esp + 8], ebx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
xchg edi, eax
mov byte [esp + 0xc], al
xchg edi, eax
mov byte [esp + 0xd], al
xchg esi, eax
mov byte [esp + 0xe], al
xchg esi, eax
call fcn.00449c60
movzx esi, byte [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
mov edi, dword [esp + 0x1f4]
jmp 0x447b2a
mov dword [esp + 0x198], edx
jmp 0x4480a6
mov ebx, dword [esp + 0x1a0]
lea eax, [eax + eax*4]
mov ebp, eax
shl eax, 2
mov edx, dword [esp + 0x198]
movzx eax, byte [edx + eax + 2]
mov edi, dword [edx + ebp*4 + 0x10]
add edi, dword [ebx]
mov ebp, dword [esp + 0x180]
mov esi, eax
mov dword [esp + 0x2c], ecx
xchg esi, eax
mov byte [esp + 0x1d], al
xchg esi, eax
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
call fcn.00443a70
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4482c8
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x1f4]
test edx, 1
je 0x448251
mov ecx, 1
test cl, cl
jne 0x448117
mov ecx, dword [esp + 0x2c]
cmp eax, 0x100000
jb 0x448078
jmp 0x448caa
cmp eax, 0x100000
jae 0x448cb4
lea ecx, [eax + eax*4]
mov edx, dword [esp + 0x198]
mov ecx, dword [edx + ecx*4 + 0xc]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.004436c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x15c], ecx
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
call fcn.004438c0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
call fcn.0042d270
mov eax, dword [esp + 0x15c]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0042db10
lea eax, [0x904285]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0042db10
call fcn.0042d2e0
call fcn.0042d270
lea eax, [0x9037d1]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042db10
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0042db10
lea eax, [0x9037ba]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042db10
mov eax, dword [esp + 0x40]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d950
call fcn.0042d490
call fcn.0042d2e0
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x448107
cmp eax, 0x100000
jae 0x448cbe
lea ecx, [eax + eax*4]
shl ecx, 2
mov edx, dword [esp + 0x198]
movzx ecx, byte [edx + ecx + 2]
mov ebx, dword [esp + 0x180]
mov dword [esp], ebx
mov ebp, dword [esp + 0x178]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x1dc]
mov dword [esp + 8], esi
mov edi, dword [esp + 0x2c]
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov byte [esp + 0xd], cl
movzx ecx, byte [esp + 0x1d]
mov byte [esp + 0xe], cl
call fcn.00449c60
movzx ecx, byte [esp + 0x10]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x1f4]
jmp 0x4480ff
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x180]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
jmp 0x447b0a
lea edx, [ebp + 0x23]
mov ecx, dword [ebp + 0x1c]
lea ecx, [edx + ecx*4 + 0x11]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x1e8]
jmp 0x447afe
dec edi
jmp 0x447af2
mov ebx, dword [esp + 0x1f4]
test ebx, 2
jne 0x448326
mov ebx, dword [esp + 0x70]
jmp 0x447ae5
mov ebx, dword [esp + 0x70]
jmp 0x447af2
mov edi, dword [esp + 0x1f4]
mov edx, dword [esp + 0x2c]
jmp 0x447b38
cmp ebx, ecx
jge 0x448357
cmp ebx, 0x100000
jae 0x448cc8
mov ebp, dword [esp + 0x28]
mov dword [esi + ebx*4], ebp
inc ebx
mov ebp, dword [esp + 0x180]
jmp 0x447ab7
mov edi, dword [esp + 0x1e0]
jmp 0x447ab7
xchg edi, eax
cmp al, 9
xchg edi, eax
je 0x447a98
xchg edi, eax
cmp al, 0x13
xchg edi, eax
xchg edi, ebx
sete bl
xchg edi, ebx
jmp 0x447a9d
mov dword [esp + 0x8c], eax
movzx eax, byte [esp + 0x1d]
mov byte [esp + 0x1e], al
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov byte [esp + 0x7c], dl
mov edx, dword [esp + 0x74]
mov dword [esp + 0x20], edx
jmp 0x4483e9
mov esi, dword [esp + 0x1a0]
movzx edx, byte [ebp + edx + 2]
mov edi, dword [ebp + ebx*4 + 0x10]
add edi, dword [esi]
lea esi, [edi + 1]
mov ebp, dword [esp + 0x180]
mov dword [esp + 0x20], edi
mov byte [esp + 0x1e], dl
mov ebx, ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x70], ebx
mov dword [esp], ebp
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0x10], ecx
call fcn.00443a70
mov eax, dword [esp + 0x14]
test eax, eax
jl 0x4484d5
cmp eax, 0x100000
jae 0x448cde
lea edx, [eax + eax*4]
mov ebx, edx
shl edx, 2
mov ebp, dword [esp + 0x198]
movzx esi, byte [ebp + edx + 2]
xchg esi, eax
cmp al, 0x14
xchg esi, eax
jne 0x448462
movzx esi, byte [esp + 0x1e]
xchg esi, eax
cmp al, 0x12
xchg esi, eax
jne 0x4484c4
mov eax, 1
test al, al
je 0x4484b4
mov esi, dword [esp + 0x1e0]
test esi, esi
jle 0x448479
lea eax, [esi - 1]
mov ecx, dword [esp + 0x70]
jmp 0x4483b8
mov eax, dword [esp + 0x70]
mov edi, dword [esp + 0x1e8]
cmp eax, edi
jge 0x4484ab
cmp eax, 0x100000
jae 0x448cd4
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x1e4]
mov dword [edi + eax*4], ecx
inc eax
mov ecx, eax
mov eax, esi
jmp 0x4483b8
mov edi, dword [esp + 0x1e4]
jmp 0x4484a2
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1e0]
jmp 0x4483b8
xchg esi, eax
cmp al, 9
xchg esi, eax
je 0x448459
xchg esi, eax
cmp al, 0x13
xchg esi, eax
sete al
jmp 0x44845e
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x1e4]
movzx edi, byte [esp + 0x1e]
mov ebx, dword [esp + 0x70]
jmp 0x447a87
lea edx, [ebp + 0x23]
mov eax, dword [ebp + 0x1c]
lea eax, [edx + eax*4 + 0x11]
mov eax, dword [eax]
movzx edx, byte [esp + 0x1c]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x5c]
jmp 0x447a62
lea edx, [edi - 1]
mov edi, edx
movzx edx, byte [esp + 0x1c]
jmp 0x447a41
mov esi, dword [esp + 0x1f4]
test esi, 2
jne 0x44854c
mov esi, dword [esp + 0x1e4]
jmp 0x447a34
mov esi, dword [esp + 0x1e4]
jmp 0x447a41
mov ebx, dword [esp + 0x38]
movzx esi, byte [esp + 0x1d]
mov edi, dword [esp + 0x1e0]
jmp 0x447abc
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov ecx, dword [esp + 0x1f0]
mov dword [esp + 4], ecx
mov ebp, dword [ebx]
mov edx, ebx
call ebp
movzx eax, byte [esp + 8]
test al, al
je 0x4485bd
mov esi, dword [esp + 0x1e4]
test esi, esi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
movzx edx, byte [esp + 0x1c]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x447a17
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1f8], eax
add esp, 0x1cc
ret
mov dword [esp + 0x1ac], 0
test ebx, ebx
jmp 0x447a08
test ebx, ebx
mov edx, esi
jmp 0x447a08
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x178]
mov dword [esp + 8], ecx
test ebx, ebx
xchg esi, ebx
setne bl
xchg esi, ebx
xchg esi, eax
mov byte [esp + 0xc], al
xchg esi, eax
mov dword [esp + 0x10], edx
call fcn.00448d50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
mov ebx, dword [esp + 0x1ec]
mov ebp, dword [esp + 0x180]
jmp 0x4479c8
xor edi, edi
jmp 0x4479a9
movzx edi, byte [esp + 0x1f]
xchg edi, eax
test al, al
xchg edi, eax
je 0x4479c8
test ebx, ebx
mov edi, dword [esp + 0x184]
jmp 0x447987
mov ebx, dword [esp + 0x1b0]
test ebx, ebx
jne 0x448855
mov ebx, dword [esp + 0x1b8]
add ebx, 0xfffffffc
mov edi, ebx
mov ebx, dword [ebx]
mov dword [esp + 0x1b0], ebx
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x1b0]
mov dword [esp], eax
call fcn.00443050
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4486df
mov edx, dword [esp + 0x18c]
mov ebp, dword [esp + 0x180]
mov esi, dword [esp + 0x19c]
mov ebx, eax
mov edi, ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x1e8]
jmp 0x447952
movzx ebx, byte [esp + 0x1f]
test bl, bl
je 0x448845
mov ebp, dword [esp + 0x1dc]
mov esi, dword [ebp + 0x18]
movzx esi, byte [esi + 0x88]
xchg esi, eax
test al, al
xchg esi, eax
je 0x44883c
mov esi, dword [esp + 0x180]
cmp byte [esi + 0x20], 9
jne 0x448835
xor edx, edx
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ecx
mov edi, dword [esp + 0x1ec]
test edi, edi
jne 0x448744
test dl, dl
jne 0x448744
test edi, edi
je 0x4486b6
jmp 0x448ce8
mov dword [esp], esi
mov eax, dword [esp + 0x178]
mov dword [esp + 4], eax
call fcn.00443640
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x194], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 0x74], edx
call fcn.0042d270
lea eax, [0x913669]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0042db10
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
call fcn.0042db10
lea eax, [0x906be8]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.0042db10
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
call fcn.0042d490
call fcn.0042d2e0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x1a0]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
call fcn.0044a420
mov edi, dword [esp + 0x1ec]
test edi, edi
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx ebx, byte [esp + 0x1f]
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x448739
mov edx, ebx
jmp 0x44871a
mov esi, dword [esp + 0x180]
jmp 0x448835
mov ebp, dword [esp + 0x1dc]
mov esi, dword [esp + 0x180]
jmp 0x448835
xor edi, edi
jmp 0x448697
cmp bl, 6
je 0x447924
cmp bl, 4
je 0x447924
cmp bl, 5
je 0x447924
cmp bl, 7
je 0x447924
cmp bl, 0x10
je 0x447924
xchg edi, eax
test al, al
xchg edi, eax
je 0x44889a
cmp bl, 8
sete bl
jmp 0x447929
xor ebx, ebx
jmp 0x447929
xor edi, edi
jmp 0x447917
mov ebx, dword [esp + 0x1f4]
test ebx, 4
je 0x4489f5
mov ecx, dword [esp + 0x1dc]
mov edx, dword [ecx + 0x18]
cmp dword [edx], ecx
jne 0x4489ec
mov edx, dword [edx + 0x4c]
test edx, edx
je 0x4489ec
movzx ebx, byte [ebp + 0x20]
cmp bl, 5
je 0x448996
cmp bl, 0xd
jne 0x44898d
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x19c], eax
mov dword [esp + 0x17c], edi
mov dword [esp + 0x188], ebp
mov dword [esp], ebp
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp + 0xc], ecx
call fcn.00443920
mov eax, dword [esp + 0x1b4]
add eax, dword [esp + 0x10]
mov dword [esp + 0x1b8], eax
add eax, 4
mov dword [esp + 0x1b8], eax
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x18c]
mov edi, dword [esp + 0x17c]
mov ebp, dword [esp + 0x188]
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x19c]
jmp 0x4478f5
mov edx, eax
mov eax, esi
jmp 0x44890a
mov eax, dword [edx + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp], eax
call fcn.00443050
mov ebp, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esp + 0x1a0], ebp
mov dword [esp + 0x1a4], edi
mov ecx, dword [esp + 0x1dc]
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x1b4], eax
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x4c]
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xb8]
jmp 0x44890a
mov edx, eax
mov eax, esi
jmp 0x44890a
mov ecx, dword [esp + 0x1dc]
jmp 0x4489ec
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
jmp 0x447b97
mov edx, dword [esp + 0x2c]
mov eax, edi
jmp 0x447b97
mov eax, dword [esp + 0x1ec]
test eax, eax
je 0x448ab5
mov eax, dword [esp + 0x1a8]
mov dword [esp + 0x74], eax
call fcn.0042d270
lea eax, [0x90aeda]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042db10
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
call fcn.0042d490
call fcn.0042d2e0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [esp + 0x1a0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0044a420
mov eax, dword [esp + 0x1ec]
test eax, eax
jne 0x448cfe
mov dword [esp + 0x1f8], 0
add esp, 0x1cc
ret
movzx ecx, byte [esp + 0x1f]
test cl, cl
jne 0x448a25
test eax, eax
jmp 0x448a9d
mov edi, dword [esp + 0x1ec]
test edi, edi
setne cl
xor ecx, 1
mov edi, dword [esp + 0x78]
mov byte [esp + 0x1f], cl
mov ecx, dword [esp + 0x1e4]
jmp 0x44778c
mov ebx, dword [ecx + 0x20]
mov edx, dword [ecx + 0x1c]
mov ebp, dword [ecx + 0x28]
jmp 0x447737
mov ecx, dword [esp + 0x1dc]
mov ebx, dword [esp + 0x1d0]
xor ebp, ebp
jmp 0x447737
mov edx, dword [esp + 0x1d4]
jmp 0x448af7
mov ecx, dword [esp + 0x1ec]
jmp 0x4476d1
mov dword [esp + 0x74], eax
mov dword [esp + 0x68], ebp
mov dword [esp + 0x38], edx
mov eax, dword [ebx + 0x54]
mov dword [esp + 0x60], eax
mov ecx, dword [ebx + 0x50]
mov dword [esp + 0x78], ecx
call fcn.0042d270
lea eax, [0x905c1e]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042db10
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0042d950
lea eax, [0x905e48]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0042db10
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
lea eax, [0x903eef]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042db10
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
call fcn.0042d490
call fcn.0042d2e0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax]
mov dword [esp + 0x74], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x68], eax
call fcn.0042d270
lea eax, [0x904e6e]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.0042db10
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
lea eax, [0x9037b0]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042db10
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042d9e0
lea eax, [0x903d5f]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042db10
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d950
lea eax, [0x903edb]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042db10
mov eax, dword [esp + 0x1e8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0042d950
call fcn.0042d490
call fcn.0042d2e0
lea eax, [0x91402e]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0042c440
mov ecx, 0x100000
call fcn.00452630
mov ecx, 0x100000
call fcn.00452630
mov ecx, 0x100000
call fcn.00452630
mov eax, ebx
mov ecx, 0x100000
call fcn.00452630
mov ecx, 0x100000
call fcn.00452630
mov ecx, 0x100000
call fcn.00452630
lea eax, [0x9092b8]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0042c440
lea eax, [0x905c8c]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.0042c440
lea eax, [0x91b648]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.0042c440
lea eax, [0x91b033]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.0042c440
nop
call fcn.00450d20
jmp fcn.00447690