Function at 0x44d240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x60]
cmp eax, dword [ecx + 8]
jbe 0x44e4d6
sub esp, 0xe0
mov ebp, dword [esp + 0xe4]
test byte [ebp], al
mov esi, dword [esp + 0xf0]
mov edi, dword [esp + 0xf4]
lea edx, [edi + esi]
cmp edx, 0x10000
ja 0x44e4cb
mov eax, ebp
mov ebp, dword [esp + 0xe8]
test byte [ebp], al
mov ecx, edx
shl edx, 1
lea ebx, [edi + esi - 0x20000]
neg ebx
mov edi, ebx
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edx, edi
lea edi, [ebp + edx]
cmp ebx, ecx
jb 0x44e4c4
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], edx
mov dword [esp + 0x9c], edi
mov ebx, dword [0x9aee68]
mov esi, dword [0x9aee6c]
test esi, esi
xchg esi, ebx
seta bl
xchg esi, ebx
sete dl
test ebx, ebx
seta bl
and edx, ebx
or edx, esi
test dl, dl
jne 0x44d2f7
xor edx, edx
xor ebx, ebx
jmp 0x44d323
call fcn.0046c700
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 0xe8]
mov edi, dword [esp + 0x9c]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ebx
xor esi, esi
xor esi, esi
mov dword [esp + 0x2c], esi
jmp 0x44d342
inc esi
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x24]
cmp esi, ecx
jge 0x44d421
lea edx, [eax + esi*8]
mov edx, dword [edx]
test edx, edx
je 0x44d3f4
mov dword [esp + 0x40], esi
mov ebx, dword [esp + 0x2c]
lea edx, [ebx + 1]
mov dword [esp + 0x84], edx
mov edi, dword [0x9aee30]
mov edi, dword fs:[edi]
mov edi, dword [edi]
mov edi, dword [edi + 0x18]
mov eax, dword [edi + 0x4a4]
mov dword [esp + 0x28], eax
mov esi, dword [edi + 0x4a8]
shl eax, 0x11
mov ebx, dword [esp + 0x28]
xor eax, ebx
mov ebx, esi
xor esi, eax
shr eax, 7
xor eax, esi
mov esi, ebx
shr ebx, 0x10
xor ebx, eax
lea eax, [esi + ebx]
mul edx
mov dword [edi + 0x4a4], esi
mov dword [edi + 0x4a8], ebx
cmp edx, ecx
jae 0x44e4bd
movzx ebx, word [ebp + edx*2]
mov eax, dword [esp + 0x2c]
cmp eax, ecx
jae 0x44e4b8
mov word [ebp + eax*2], bx
mov ebx, dword [esp + 0x40]
mov word [ebp + edx*2], bx
mov eax, dword [esp + 0xe4]
mov esi, ebx
mov edi, dword [esp + 0x9c]
mov edx, dword [esp + 0x84]
jmp 0x44d335
mov edx, dword [0x9aef70]
lea ebx, [eax + esi*8 + 4]
test edx, edx
je 0x44d412
mov edx, dword [ebx]
call fcn.0046c890
mov dword [edi], edx
mov edi, dword [esp + 0x9c]
mov dword [ebx], 0
mov edx, dword [esp + 0x2c]
jmp 0x44d335
mov esi, dword [esp + 0x2c]
cmp esi, ecx
ja 0x44e4af
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
jmp 0x44d45e
mov word [edi + edx*2], ax
lea eax, [ebx + 1]
mov edx, dword [esp + 0xe4]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0x3c]
cmp edx, esi
jge 0x44d49d
movzx ebx, word [ebp + edx*2]
cmp ebx, ecx
jae 0x44e4a8
lea ebx, [eax + ebx*8]
mov ebx, dword [ebx]
mov dword [esp + 0xb8], ebx
jmp 0x44e443
mov ebp, dword [esp + 0xe8]
mov ebx, dword [esp + 0x3c]
movzx eax, word [ebp + ebx*2]
cmp edx, esi
jb 0x44d43d
jmp 0x44e486
lea edx, [esi - 1]
jmp 0x44d4c9
movzx esi, word [esp + 0x1c]
mov word [edi + ebx*2], si
dec edx
mov ebx, dword [esp + 0xe8]
mov esi, dword [esp + 0x88]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0xe8]
mov esi, dword [esp + 0x2c]
test edx, edx
jl 0x44d535
cmp edx, esi
jae 0x44e41c
movzx ebx, word [edi + edx*2]
mov word [esp + 0x1c], bx
movzx ebx, bx
cmp ebx, ecx
jae 0x44e415
mov dword [esp + 0x38], edx
lea ebx, [eax + ebx*8]
mov esi, dword [esp + 0x88]
movzx ebp, word [ebp + esi]
mov ebx, dword [ebx]
mov dword [esp + 0xb4], ebx
mov word [edi + edx*2], bp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x58]
jmp 0x44e333
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
cmp ebx, ebp
jb 0x44d4a2
jmp 0x44e3d3
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
call fcn.0044d070
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe8]
xor esi, esi
jmp 0x44d59f
mov edi, dword [esp + 0x84]
lea esi, [edi + 1]
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe8]
cmp esi, edx
jge 0x44d983
movzx edi, word [ebp + esi*2]
cmp edi, ecx
jae 0x44e2fc
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], esi
lea ebp, [ebx + edi*8]
mov ebp, dword [ebp]
mov dword [esp + 0xac], ebp
cmp eax, edi
jle 0x44d609
mov edi, dword [ebp + 0x10]
test edi, edi
jne 0x44e2ef
lea eax, [ebp + 0x20]
mov dword [esp], eax
call fcn.00406f40
mov eax, dword [esp + 4]
test eax, eax
jne 0x44d6e0
mov edx, dword [esp + 0xac]
mov ebx, dword [edx]
cmp dword [edx + 4], ebx
jbe 0x44d575
jmp 0x44d644
test byte [ebp], al
lea eax, [ebp + 0x28]
mov dword [esp], eax
call fcn.00406f40
mov eax, dword [esp + 4]
test eax, eax
jne 0x44d8d1
mov edx, dword [esp + 0xac]
mov ebx, dword [edx]
test ebx, ebx
ja 0x44d80a
mov ebx, dword [edx + 0x10]
test ebx, ebx
je 0x44d575
jmp 0x44d78f
mov eax, dword [edx + 0x14]
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 0xe4]
lea ebp, [ebx + ecx*8 + 4]
mov ebp, dword [ebp]
movzx esi, word [edx + 0xc]
imul esi, dword [edx + 0x18]
add esi, dword [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.00412760
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x18]
inc ecx
mov dword [eax + 0x18], ecx
cmp dword [eax + 4], ecx
jne 0x44d691
mov dword [eax + 0x18], 0
inc dword [eax]
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0044d100
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x88]
xor ebx, ebx
jmp 0x44da0a
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0xe4]
lea ebx, [edx + ecx*8 + 4]
lea edi, [esp + 0xc4]
mov ebp, eax
xor eax, eax
call fcn.0046cb29
lea ecx, [0x44e4e0]
mov dword [esp + 0xc4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0xd4], ecx
mov ecx, dword [ebx]
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
lea ecx, [esp + 0xc4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00406190
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x88]
xor ebx, ebx
jmp 0x44da0a
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0044d100
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xe4]
lea ecx, [ecx + eax*8 + 4]
mov ecx, dword [ecx]
test ecx, ecx
je 0x44d7f9
mov eax, dword [esp + 0xac]
mov eax, dword [eax + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00412950
mov eax, dword [esp + 0x88]
mov ecx, 0xffffffff
mov edx, 0xffffffff
xor ebx, ebx
jmp 0x44da0a
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xe4]
lea ebx, [ecx + eax*8 + 4]
mov ebx, dword [ebx]
movzx ebp, word [edx + 0xc]
imul ebp, dword [edx + 0x1c]
nop
add ebp, dword [edx + 8]
test ebx, ebx
je 0x44d856
mov dword [esp + 0x94], ebp
mov eax, dword [edx + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
call fcn.00412760
mov edx, dword [esp + 0xac]
mov ebp, dword [esp + 0x94]
mov eax, dword [edx + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00412950
mov eax, dword [esp + 0xac]
mov ecx, dword [eax + 0x1c]
inc ecx
mov dword [eax + 0x1c], ecx
cmp dword [eax + 4], ecx
jne 0x44d87f
mov dword [eax + 0x1c], 0
dec dword [eax]
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0044d100
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x88]
mov ebx, 1
jmp 0x44da0a
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0xe4]
lea ebx, [edx + ecx*8 + 4]
lea edi, [esp + 0xc4]
mov ebp, eax
xor eax, eax
call fcn.0046cb29
lea ecx, [0x44e530]
mov dword [esp + 0xc4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0xd4], ecx
mov ecx, dword [ebx]
mov edx, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
lea ecx, [esp + 0xc4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.00406c80
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, dword [esp + 0x88]
mov ebx, 1
jmp 0x44da0a
movzx ebp, byte [esp + 0xf8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x44d9d6
mov ebp, dword [0x9aee30]
mov ebp, dword fs:[ebp]
mov ebp, dword [ebp]
mov esi, dword [ebp + 0xbc]
test esi, esi
jne 0x44e2d9
mov dword [esp + 0xa4], ebp
lea esi, [ebp + 0xbc]
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x70]
jmp 0x44dab0
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
call fcn.0044d100
mov ecx, 0xffffffff
mov edx, 0xffffffff
mov eax, 0xffffffff
xor ebx, ebx
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
test edx, edx
xchg edi, ebx
seta bl
xchg edi, ebx
and ebp, edi
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x44da5e
mov byte [esp + 0x1a], bl
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
sub edx, eax
mov dword [esp], edx
mov eax, dword [esp + 0x24]
sbb ecx, eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
call fcn.00431970
mov eax, dword [esp + 0x44]
movzx ebx, byte [esp + 0x1a]
mov dword [esp + 0xfc], eax
mov byte [esp + 0x100], bl
add esp, 0xe0
ret
mov ecx, dword [esp + 0x88]
inc ecx
add eax, 0x2c
mov edi, dword [esp + 0x9c]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x2c]
mov edx, ebp
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x88], ecx
mov esi, eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x88]
cmp esi, edx
jge 0x44dd01
movzx edi, word [edi + esi*2]
cmp edi, ecx
jae 0x44e2d2
mov dword [esp + 0x84], edi
lea eax, [ebx + edi*8]
mov eax, dword [eax]
mov dword [esp + 0xb0], eax
call fcn.0043d300
mov eax, dword [esp]
test byte [eax], al
mov ecx, dword [0x9aef70]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0xe4]
lea ebp, [ebx + edx*8 + 4]
mov esi, dword [esp + 0x20]
test esi, esi
xchg edi, ebx
setne bl
xchg edi, ebx
mov esi, dword [esp + 0x24]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, edi
test ecx, ecx
je 0x44db41
call fcn.0046c8a0
mov ebx, dword [esp + 0xa4]
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov ebx, dword [esp + 0xe4]
mov edi, dword [esp + 0xa4]
mov dword [eax], edi
mov byte [eax + 0x24], 1
mov ecx, dword [0x9aef70]
mov ebp, dword [ebp]
test ecx, ecx
je 0x44db6f
call fcn.0046c8a0
mov dword [edi], ebp
mov ecx, dword [eax + 0xc]
mov dword [edi + 4], ecx
mov edi, dword [esp + 0xa4]
mov dword [eax + 0xc], ebp
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
xchg esi, eax
test al, al
xchg esi, eax
je 0x44db94
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x1c], 0xffffffff
mov ebp, dword [0x9aef70]
test ebp, ebp
jne 0x44dbae
mov ebp, dword [esp + 0xb0]
mov esi, dword [esp + 0x98]
jmp 0x44dbd1
call fcn.0046c8c0
mov ebp, dword [esp + 0xb0]
mov dword [edi], ebp
mov esi, dword [eax + 0x34]
mov dword [edi + 4], esi
mov dword [edi + 8], eax
mov esi, dword [esp + 0x98]
mov ecx, dword [esi]
mov dword [edi + 0xc], ecx
mov dword [eax + 0x34], ebp
mov dword [esi], eax
mov esi, dword [esp + 0xf0]
cmp esi, edx
jle 0x44dc73
test byte [ebp], al
mov edx, dword [0x9aef70]
test edx, edx
je 0x44dbfc
mov edx, dword [eax + 4]
call fcn.0046c890
mov dword [edi], edx
mov dword [eax + 4], 0
mov edx, dword [ebp + 0x2c]
test edx, edx
je 0x44dc3e
mov edi, dword [0x9aef70]
test edi, edi
je 0x44dc30
call fcn.0046c8d0
mov dword [edi], edx
mov ecx, dword [eax + 8]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov ecx, dword [edx + 4]
mov dword [edi + 0xc], ecx
mov ecx, dword [ebp + 0x2c]
mov dword [edi + 0x10], ecx
mov dword [eax + 8], edx
mov dword [edx + 4], eax
mov dword [ebp + 0x2c], eax
jmp 0x44da73
mov edx, dword [0x9aef70]
test edx, edx
je 0x44dc61
mov edx, dword [eax + 8]
call fcn.0046c8c0
mov dword [edi], edx
mov dword [edi + 4], eax
mov edx, dword [ebp + 0x28]
mov dword [edi + 8], edx
mov edx, dword [ebp + 0x2c]
mov dword [edi + 0xc], edx
mov dword [eax + 8], 0
mov dword [ebp + 0x28], eax
mov dword [ebp + 0x2c], eax
jmp 0x44da73
test byte [ebp], al
mov edx, dword [0x9aef70]
test edx, edx
je 0x44dc8a
mov edx, dword [eax + 4]
call fcn.0046c890
mov dword [edi], edx
mov dword [eax + 4], 0
mov edx, dword [ebp + 0x24]
test edx, edx
je 0x44dccc
mov edi, dword [0x9aef70]
test edi, edi
je 0x44dcbe
call fcn.0046c8d0
mov dword [edi], edx
mov ecx, dword [eax + 8]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov ecx, dword [edx + 4]
mov dword [edi + 0xc], ecx
mov ecx, dword [ebp + 0x24]
mov dword [edi + 0x10], ecx
mov dword [eax + 8], edx
mov dword [edx + 4], eax
mov dword [ebp + 0x24], eax
jmp 0x44da73
mov edx, dword [0x9aef70]
test edx, edx
je 0x44dcef
mov edx, dword [eax + 8]
call fcn.0046c8c0
mov dword [edi], edx
mov dword [edi + 4], eax
mov edx, dword [ebp + 0x20]
mov dword [edi + 8], edx
mov edx, dword [ebp + 0x24]
mov dword [edi + 0xc], edx
mov dword [eax + 8], 0
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x24], eax
jmp 0x44da73
test byte [ebp], al
mov esi, dword [0x9aef70]
test esi, esi
je 0x44dd18
mov esi, dword [ebp + 0x44]
call fcn.0046c890
mov dword [edi], esi
mov dword [ebp + 0x44], 0
lea eax, [ebp + 0xd4]
mov dword [esp + 0xc0], eax
lea ecx, [ebp + 0x6d]
nop
nop
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.00402f30
lea eax, [0x6fa2d8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov word [esp + 8], 0x309
mov dword [esp + 0xc], 1
call fcn.0043d1d0
mov eax, dword [esp + 0xa4]
mov byte [eax + 0x6c], 0
mov ecx, dword [esp + 0xe4]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edx
call fcn.0044d070
nop
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00402e90
mov eax, dword [0x9aef70]
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx + 0x44]
test eax, eax
je 0x44ddd9
mov ebx, dword [ecx + 0x44]
call fcn.0046c890
mov dword [edi], ebx
mov dword [ecx + 0x44], 0
mov ebx, dword [ecx + 0xbc]
mov eax, ebx
jmp 0x44ddfb
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x34], 0
mov ebx, dword [ebx + 0x2c]
test ebx, ebx
je 0x44de1f
mov byte [ebx + 0x24], 0
mov ebp, dword [0x9aef70]
test ebp, ebp
je 0x44ddea
mov ebp, dword [ebx + 0xc]
call fcn.0046c8a0
mov dword [edi], ebp
mov ebp, dword [ebx + 0x34]
mov dword [edi + 4], ebp
jmp 0x44ddea
mov ebx, dword [0x9aef70]
test ebx, ebx
je 0x44de36
mov ebx, dword [ecx + 0xbc]
call fcn.0046c890
mov dword [edi], ebx
mov dword [esp + 0xbc], edx
mov dword [ecx + 0xbc], 0
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xf0]
mov ecx, dword [esp + 0x8c]
mov edi, dword [esp + 0x2c]
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0x68], eax
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x60], eax
xor eax, eax
mov dword [esp + 0xa8], eax
mov eax, 0xffffffff
mov dword [esp + 0x44], eax
xor eax, eax
mov byte [esp + 0x1b], al
mov eax, 0xffffffff
mov dword [esp + 0x4c], eax
mov eax, 0xffffffff
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x68]
jmp 0x44df10
mov dword [eax + 0x2c], 0
mov dword [esp], eax
call fcn.0043d5e0
mov eax, dword [esp + 0x88]
inc eax
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0xf0]
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0xbc]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x9c]
mov ecx, ebx
mov edx, ebp
mov ebx, edi
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xf0]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x90]
mov esi, dword [esp + 0x88]
cmp esi, edi
jge 0x44e21b
movzx ebx, word [ebx + esi*2]
cmp ebx, ecx
jae 0x44e2cb
lea ecx, [ebp + ebx*8]
cmp eax, edx
jne 0x44df77
mov dword [esp + 0xa0], ecx
mov edx, dword [eax + 0x18]
mov ebp, dword [eax + 0x1c]
test ebp, ebp
xchg edi, ebx
setg bl
xchg edi, ebx
xchg esi, ebx
sete bl
xchg esi, ebx
test edx, edx
seta cl
and esi, ecx
or esi, edi
xchg esi, eax
test al, al
xchg esi, eax
jne 0x44df67
mov ebp, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
movzx esi, byte [eax + 0x25]
mov ecx, dword [esp + 0xa0]
jmp 0x44e1cd
lea ecx, [ebp + ebx*8]
mov ecx, dword [ecx]
mov edx, dword [esp + 0xf0]
cmp edx, ebx
jle 0x44e0a8
test byte [ecx], al
mov ebx, dword [eax + 8]
mov edx, dword [eax + 4]
test ebx, ebx
je 0x44e02d
test edx, edx
je 0x44dff0
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x44dfd7
mov ecx, edi
call fcn.0046c8e0
mov dword [edi], edx
mov ebp, dword [ebx + 4]
mov dword [edi + 4], ebp
mov dword [edi + 8], ebx
mov ebp, dword [edx + 8]
mov dword [edi + 0xc], ebp
mov ebp, dword [eax + 4]
mov dword [edi + 0x10], ebp
mov ebp, dword [eax + 8]
mov dword [edi + 0x14], ebp
mov ebp, dword [esp + 0xe4]
mov edi, ecx
mov dword [ebx + 4], edx
mov dword [edx + 8], ebx
mov dword [eax + 4], 0
mov dword [eax + 8], 0
jmp 0x44e1b5
mov edx, dword [0x9aef70]
test edx, edx
je 0x44e017
mov edx, dword [ebx + 4]
call fcn.0046c8c0
mov dword [edi], edx
mov dword [edi + 4], ebx
mov edx, dword [ecx + 0x2c]
mov dword [edi + 8], edx
mov edx, dword [eax + 8]
mov dword [edi + 0xc], edx
mov edi, dword [esp + 0x2c]
mov dword [ebx + 4], 0
mov dword [ecx + 0x2c], ebx
mov dword [eax + 8], 0
jmp 0x44e1b5
test edx, edx
je 0x44e06e
mov ebx, dword [0x9aef70]
test ebx, ebx
je 0x44e058
mov ebx, dword [edx + 8]
call fcn.0046c8c0
mov dword [edi], ebx
mov dword [edi + 4], edx
mov ebx, dword [ecx + 0x28]
mov dword [edi + 8], ebx
mov ebx, dword [eax + 4]
mov dword [edi + 0xc], ebx
mov edi, dword [esp + 0x2c]
mov dword [edx + 8], 0
mov dword [ecx + 0x28], edx
mov dword [eax + 4], 0
jmp 0x44e1b5
cmp dword [ecx + 0x28], eax
jne 0x44e1b5
mov edx, dword [0x9aef70]
test edx, edx
je 0x44e095
mov edx, dword [ecx + 0x28]
mov ebx, edi
call fcn.0046c8a0
mov dword [edi], edx
mov edx, dword [ecx + 0x2c]
mov dword [edi + 4], edx
mov edi, ebx
mov dword [ecx + 0x28], 0
mov dword [ecx + 0x2c], 0
jmp 0x44e1b5
test byte [ecx], al
mov ebx, dword [eax + 8]
mov edx, dword [eax + 4]
test ebx, ebx
je 0x44e146
test edx, edx
je 0x44e10c
mov ecx, dword [0x9aef70]
test ecx, ecx
je 0x44e0f3
mov ecx, edi
call fcn.0046c8e0
mov dword [edi], edx
mov ebp, dword [ebx + 4]
mov dword [edi + 4], ebp
mov dword [edi + 8], ebx
mov ebp, dword [edx + 8]
mov dword [edi + 0xc], ebp
mov ebp, dword [eax + 4]
mov dword [edi + 0x10], ebp
mov ebp, dword [eax + 8]
mov dword [edi + 0x14], ebp
mov ebp, dword [esp + 0xe4]
mov edi, ecx
mov dword [ebx + 4], edx
mov dword [edx + 8], ebx
mov dword [eax + 4], 0
mov dword [eax + 8], 0
jmp 0x44e1b5
mov edx, dword [0x9aef70]
test edx, edx
je 0x44e133
mov edx, dword [ebx + 4]
call fcn.0046c8c0
mov dword [edi], edx
mov dword [edi + 4], ebx
mov edx, dword [ecx + 0x24]
mov dword [edi + 8], edx
mov edx, dword [eax + 8]
mov dword [edi + 0xc], edx
mov edi, dword [esp + 0x2c]
mov dword [ebx + 4], 0
mov dword [ecx + 0x24], ebx
mov dword [eax + 8], 0
jmp 0x44e1b5
test edx, edx
je 0x44e184
mov ebx, dword [0x9aef70]
test ebx, ebx
je 0x44e171
mov ebx, dword [edx + 8]
call fcn.0046c8c0
mov dword [edi], ebx
mov dword [edi + 4], edx
mov ebx, dword [ecx + 0x20]
mov dword [edi + 8], ebx
mov ebx, dword [eax + 4]
mov dword [edi + 0xc], ebx
mov edi, dword [esp + 0x2c]
mov dword [edx + 8], 0
mov dword [ecx + 0x20], edx
mov dword [eax + 4], 0
jmp 0x44e1b5
cmp dword [ecx + 0x20], eax
jne 0x44e1b5
mov edx, dword [0x9aef70]
test edx, edx
je 0x44e1a7
mov edx, dword [ecx + 0x20]
mov ebx, edi
call fcn.0046c8a0
mov dword [edi], edx
mov edx, dword [ecx + 0x24]
mov dword [edi + 4], edx
mov edi, ebx
mov dword [ecx + 0x20], 0
mov dword [ecx + 0x24], 0
mov ecx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x44]
movzx esi, byte [esp + 0x1b]
mov ebp, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ebp
xchg esi, eax
mov byte [esp + 0x1b], al
xchg esi, eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0xa8], ecx
mov edi, dword [0x9aef70]
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x90], ecx
test edi, edi
je 0x44deac
mov edi, dword [eax + 0x2c]
mov dword [esp + 0x80], edi
call fcn.0046c890
mov ecx, dword [esp + 0x80]
mov dword [edi], ecx
jmp 0x44deac
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x44e2b5
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0x44]
cmp eax, edx
jle 0x44e246
movzx eax, byte [esp + 0x1b]
test al, al
je 0x44e281
xor eax, eax
jmp 0x44e24b
movzx eax, byte [esp + 0x1b]
mov byte [esp + 0x1a], al
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
call fcn.0044d100
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
movzx ebx, byte [esp + 0x1a]
jmp 0x44da0a
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
call fcn.0044d100
lea eax, [0x69fca0]
mov dword [esp], eax
lea eax, [0x748cc8]
mov dword [esp + 4], eax
call fcn.00439660
lea eax, [0x6d6095]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0043a0d0
mov eax, ebx
call fcn.0046c910
mov eax, edi
call fcn.0046c910
lea eax, [0x6d4727]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0043a0d0
mov ebp, ebx
mov edi, edx
mov ebx, dword [esp + 0x9c]
jmp 0x44e281
mov eax, edi
call fcn.0046c910
mov word [edi + edx*2], si
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0xb4]
mov esi, dword [esp + 0x84]
mov esi, dword [esp + 0x88]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x34]
shl esi, 1
lea ebx, [esi + 1]
cmp edx, ebx
jle 0x44d524
add esi, 2
cmp edx, esi
jle 0x44e39b
cmp ebp, ebx
jbe 0x44e40c
mov dword [esp + 0x30], ebx
mov edx, dword [esp + 0x34]
lea ebx, [edi + edx*4 + 2]
movzx ebx, word [ebx]
cmp ebx, ecx
jae 0x44e405
lea ebx, [eax + ebx*8]
cmp ebp, esi
jbe 0x44e3fc
lea edx, [edi + edx*4 + 4]
movzx edx, word [edx]
cmp edx, ecx
jae 0x44e3f5
mov ebx, dword [ebx]
lea edx, [eax + edx*8]
mov edx, dword [edx]
cmp edx, ebx
jbe 0x44e393
mov edx, dword [esp + 0x38]
mov ebx, esi
jmp 0x44e39b
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x30]
cmp ebx, ebp
jae 0x44e3ec
movzx esi, word [edi + ebx*2]
movzx edx, si
cmp edx, ecx
jae 0x44e3e5
mov dword [esp + 0x84], ebx
lea edx, [eax + edx*8]
mov edx, dword [edx]
mov ebx, dword [esp + 0xb4]
cmp edx, ebx
jbe 0x44d520
mov edx, dword [esp + 0x34]
cmp edx, ebp
jb 0x44e303
jmp 0x44e3dc
mov eax, ebx
mov ecx, ebp
call fcn.0046c910
mov eax, edx
mov ecx, ebp
call fcn.0046c910
mov eax, edx
call fcn.0046c910
mov eax, ebx
mov ecx, ebp
call fcn.0046c910
mov eax, edx
call fcn.0046c910
mov eax, esi
mov ecx, ebp
call fcn.0046c910
mov eax, ebx
call fcn.0046c910
mov eax, ebx
mov ecx, ebp
call fcn.0046c910
mov eax, ebx
call fcn.0046c910
mov eax, edx
mov ecx, esi
call fcn.0046c910
movzx ebx, word [esp + 0x1e]
mov word [edi + edx*2], bx
mov ebx, dword [esp + 0xb8]
mov edx, dword [esp + 0x84]
mov ebp, dword [esp + 0xe8]
test edx, edx
jle 0x44d48b
lea ebp, [edx - 1]
shr ebp, 0x1f
lea ebp, [edx + ebp - 1]
sar ebp, 1
cmp esi, ebp
jbe 0x44e49f
mov dword [esp + 0x84], ebp
movzx ebp, word [edi + ebp*2]
mov word [esp + 0x1e], bp
movzx ebp, bp
cmp ebp, ecx
jae 0x44e498
lea ebp, [eax + ebp*8]
mov ebp, dword [ebp]
cmp ebx, ebp
jbe 0x44d484
cmp edx, esi
jb 0x44e425
jmp 0x44e48f
mov eax, edx
mov ecx, esi
call fcn.0046c910
mov eax, edx
mov ecx, esi
call fcn.0046c910
mov eax, ebp
call fcn.0046c910
mov eax, ebp
mov ecx, esi
call fcn.0046c910
mov eax, ebx
call fcn.0046c910
mov edx, ecx
mov ecx, esi
call fcn.0046c950
call fcn.0046c910
mov eax, edx
call fcn.0046c920
mov edx, ecx
call fcn.0046c9a0
mov ebx, 0x10000
call fcn.0046c990
nop
call fcn.0046b490
jmp fcn.0044d240