Function at 0x43dbef
Capabilities:
Get remote cert context via schannel
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xa8
mov esi, edx
mov dword [esp + 0x10], ecx
lea eax, [edx + 0x114]
mov dword [esp + 0x80], eax
lea eax, [edx + 8]
mov dword [esp + 0xa4], eax
lea eax, [edx + 0x128]
mov dword [esp + 0x64], eax
lea eax, [edx + 0x11c]
mov dword [esp + 0x9c], eax
lea eax, [edx + 4]
mov dword [esp + 0x84], eax
lea eax, [edx + 0x100]
mov dword [esp + 0x8c], eax
mov edi, dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov dword [esp + 4], edx
movzx eax, byte [esi + 0x110]
test eax, eax
jne 0x43e61b
mov bh, byte [esi + 0x111]
mov al, byte [esi + 0x112]
mov byte [esp + 0x68], al
mov al, byte [esi + 0x113]
mov byte [esp + 0xc], al
mov bl, byte [esi + 0x114]
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.0043e8c1
cmp byte [esp + 0x18], 4
jne 0x43dc95
mov eax, dword [esp + 0x1c]
jmp 0x43dca6
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
cmp cl, 4
jne 0x43e64c
test eax, eax
je 0x43dcbc
cmp byte [esi + 0x110], 0
jne 0x43dcc0
mov byte [esi + 0x111], 1
jmp 0x43dcc0
test bh, bh
je 0x43dcf3
lea ecx, [esp + 0x18]
mov edx, dword [esp + 0xa4]
call fcn.0043e9c9
cmp byte [esp + 0x18], 4
je 0x43dce3
mov eax, dword [esp + 0x18]
cmp al, 4
jne 0x43e683
cmp byte [esi + 0x110], 0
jne 0x43dcf3
mov byte [esi + 0x111], 0
or bl, byte [esp + 0xc]
mov dword [esp + 8], ebp
jne 0x43dd0a
cmp byte [esi + 0x15e], 0
je 0x43e15e
cmp byte [esp + 0x68], 0
je 0x43e253
cmp dword [esi + 0x154], 0
je 0x43dd4f
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.0043ea26
cmp byte [esp + 0x18], 4
jne 0x43dd36
mov eax, dword [esp + 0x1c]
jmp 0x43dd47
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
cmp cl, 4
jne 0x43e64c
test eax, eax
je 0x43e658
mov edi, esi
mov esi, dword [esi + 0xe0]
mov al, byte [0x530b2c]
xor ecx, ecx
mov edx, 0x18
call fcn.0049cbc0
test eax, eax
je 0x43e7e0
mov edx, dword [edi + 0xf0]
cmp edx, esi
jb 0x43e7d4
mov ebp, eax
mov eax, dword [edi + 0xec]
mov dword [ebp], esi
mov ebx, 2
mov dword [ebp + 4], ebx
mov dword [ebp + 8], eax
xor eax, eax
mov dword [ebp + 0xc], eax
mov dword [ebp + 0x10], eax
mov dword [ebp + 0x14], eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x5c], ebx
cmp dword [edi + 0x144], 0x80000000
mov esi, edi
jne 0x43ddc3
mov dword [esp + 0xc], 0
jmp 0x43de37
mov edx, dword [esi + 0x148]
lea ecx, [esp + 0x18]
mov edi, esi
push dword [esi + 0x14c]
call fcn.0048ddd8
add esp, 4
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
mov dword [esp + 0xc], eax
test eax, eax
mov dword [esp + 8], esi
je 0x43de2d
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x68], eax
lea ecx, [esp + 0x54]
mov edx, 2
call fcn.0048d7b4
mov ebp, dword [esp + 0x58]
mov ebx, dword [esp + 0x5c]
lea eax, [ebx + ebx*2]
mov ecx, dword [esp + 0x68]
mov dword [ebp + eax*4], ecx
mov dword [ebp + eax*4 + 4], 0x12
mov dword [ebp + eax*4 + 8], esi
inc ebx
mov dword [esp + 0x5c], ebx
jmp 0x43de35
mov dword [esp + 0xc], 0
mov esi, edi
xor edi, edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebp
movaps xmm0, xmmword [0x4d0750]
movups xmmword [esp + 0x18], xmm0
mov dword [esp + 0x28], 0x11
xorps xmm0, xmm0
lea eax, [esp + 0x1c]
movups xmmword [eax + 0x10], xmm0
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], 3
lea eax, [esp + 0x18]
mov dword [esp + 0x44], eax
mov dword [esp + 0x90], edi
cmp byte [esi + 0x15e], 0
je 0x43dedc
cmp byte [esi + 0x15f], 0
mov eax, 0
mov ecx, esi
mov esi, dword [esp + 0x64]
cmove eax, esi
mov ecx, dword [ecx + 0x150]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], ecx
push edi
lea ecx, [esp + 0x94]
push ecx
lea ecx, [esp + 0x44]
push ecx
push esi
push edi
push 0x1011c
lea ecx, [esp + 0x84]
push ecx
push eax
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.secur32.dll_AcceptSecurityContext]
jmp 0x43df45
xor ecx, ecx
cmp byte [esi + 0x15c], 0
mov eax, 0
je 0x43def2
mov eax, dword [esi + 0x13c]
cmp dword [esi + 0x138], 0x80000000
cmove eax, ecx
mov edx, dword [esi + 0x150]
mov esi, dword [edx + 8]
mov edx, dword [edx + 0xc]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], edx
push ecx
lea edx, [esp + 0x94]
push edx
lea edx, [esp + 0x44]
push edx
push ecx
push ecx
lea edx, [esp + 0x80]
push edx
push ecx
push ecx
push 0x9819c
push eax
push dword [esp + 0x8c]
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.secur32.dll_InitializeSecurityContextW]
mov esi, eax
mov edi, 0x14
mov eax, dword [esp + edi + 0x18]
test eax, eax
je 0x43df5b
push eax
call dword [sym.imp.secur32.dll_FreeContextBuffer]
add edi, 0xc
cmp edi, 0x2c
jne 0x43df4c
cmp esi, 0x80090318
je 0x43dfc1
test esi, esi
mov edi, dword [esp + 4]
je 0x43dfa7
cmp esi, 0x90312
jne 0x43e6a2
mov byte [edi + 0x15f], 0
cmp ebx, 1
jbe 0x43e7c5
cmp dword [ebp + 0x10], 5
jne 0x43e0be
mov edx, dword [edi + 0xe0]
sub edx, dword [ebp + 0xc]
jmp 0x43e0c4
cmp ebx, 1
jbe 0x43e7b6
cmp dword [ebp + 0x10], 5
jne 0x43dfeb
mov edx, dword [edi + 0xe0]
sub edx, dword [ebp + 0xc]
jmp 0x43dff1
cmp ebx, 1
mov esi, dword [esp + 4]
jbe 0x43e7a7
cmp dword [ebp + 0x10], 4
mov eax, 1
jne 0x43dfdc
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x154], eax
mov ebp, dword [esp + 8]
jmp 0x43e115
mov edx, dword [edi + 0xe0]
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0x88]
mov dword [esp + 8], eax
mov esi, dword [esp + 0x20]
test esi, esi
je 0x43e013
mov eax, dword [esp + 0x18]
mov dword [esp + 0xa0], eax
mov ecx, edi
call fcn.0043eba8
mov eax, dword [edi + 0xe0]
mov ecx, dword [edi + 0xe4]
xor edx, edx
mov edi, eax
or edi, ecx
mov ebp, dword [esp + 4]
sete dl
mov dword [ebp + 0x154], edx
test esi, esi
cmovne ebx, esi
je 0x43e076
mov esi, dword [esp + 0xa0]
test esi, esi
mov edx, ebx
mov eax, str._rustc_a4472498d7e88041f6206faf4503eb1f246fd427librarycore_src_sync_atomic.rsthere_is_no_such_thing_as_an_acquire_store
cmove edx, eax
mov ecx, dword [esp + 0x8c]
push esi
call fcn.0040fc21
add esp, 4
push ebx
call dword [sym.imp.secur32.dll_FreeContextBuffer]
mov eax, dword [ebp + 0xe0]
mov ecx, dword [ebp + 0xe4]
mov dword [esp + 0x88], ebx
or eax, ecx
mov edi, dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov esi, ebp
mov ebp, dword [esp + 8]
je 0x43e0ac
lea ecx, [esp + 0x4c]
mov edx, esi
call fcn.0043ec39
cmp byte [esp + 0x4c], 4
je 0x43e0ac
mov ebx, dword [esp + 0x4c]
cmp bl, 4
jne 0x43e6b2
cmp byte [esi + 0x110], 0
jne 0x43e11b
mov byte [esi + 0x112], 0
jmp 0x43e11b
mov edx, dword [edi + 0xe0]
mov ebx, edi
mov ebp, dword [esp + 8]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
mov ecx, ebx
call fcn.0043eba8
mov eax, dword [ebx + 0xe0]
xor ecx, ecx
or eax, dword [ebx + 0xe4]
sete cl
mov dword [ebx + 0x154], ecx
test edi, edi
mov edx, esi
mov eax, str._rustc_a4472498d7e88041f6206faf4503eb1f246fd427librarycore_src_sync_atomic.rsthere_is_no_such_thing_as_an_acquire_store
cmove edx, eax
mov ecx, dword [esp + 0x8c]
push edi
call fcn.0040fc21
add esp, 4
push esi
call dword [sym.imp.secur32.dll_FreeContextBuffer]
mov esi, ebx
mov edi, dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x43e13c
mov eax, ebp
cmp ecx, 9
jb 0x43e12d
mov eax, dword [ebp - 4]
push eax
push 0
push dword [0x530ac8]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [esp + 0x54], 0
je 0x43dc4e
push dword [esp + 0x58]
push 0
push dword [0x530ac8]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x43dc4e
mov dword [esp + 0x18], 0
lea eax, [esp + 0x18]
push eax
push 0x53
push dword [esp + 0x6c]
call dword [sym.imp.secur32.dll_QueryContextAttributesW]
test eax, eax
je 0x43e196
mov ebp, eax
cmp byte [esp + 0x68], 0
je 0x43e715
xor ecx, ecx
mov edx, ebp
call fcn.0043ffb9
jmp 0x43dd15
mov eax, dword [esp + 0x18]
mov dword [esp + 0x60], eax
mov eax, dword [eax + 0x10]
test eax, eax
je 0x43e2f0
push eax
call dword [sym.imp.crypt32.dll_CertDuplicateStore]
mov ebx, eax
cmp dword [esi], 0
mov ebp, 0
je 0x43e245
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x84]
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x18]
call fcn.0048db08
test eax, eax
je 0x43e231
mov esi, edx
lea ecx, [esp + 0x3c]
mov edx, dword [esp]
push esi
call fcn.0048daca
add esp, 4
cmp byte [esp + 0x3c], 4
jne 0x43e20b
mov eax, dword [esp + 0x40]
and ebx, 0xffffff00
or ebx, 4
jmp 0x43e213
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp bl, 4
jne 0x43e594
push eax
call edi
push esi
call edi
lea ecx, [esp + 0x18]
call fcn.0048db08
mov esi, edx
test eax, eax
jne 0x43e1e5
cmp dword [esp + 0x18], 0
je 0x43e23e
push dword [esp + 0x1c]
call edi
mov esi, dword [esp + 4]
mov ebx, dword [esp]
push 0
push ebx
call dword [sym.imp.crypt32.dll_CertCloseStore]
jmp 0x43e2fe
mov al, 2
cmp byte [esp + 0xc], 0
jne 0x43e2b3
xorps xmm0, xmm0
movups xmmword [esp + 0x18], xmm0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x18]
push eax
push 4
push dword [esp + 0x6c]
call dword [sym.imp.secur32.dll_QueryContextAttributesW]
test eax, eax
jne 0x43e794
mov eax, dword [esp + 0x18]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x94], eax
lea eax, [esp + 0x1c]
movsd xmm0, qword [eax + 4]
movsd qword [esp + 0x3c], xmm0
mov eax, dword [eax + 0xc]
mov dword [esp + 0x44], eax
mov al, 1
mov byte [esi + 0x110], al
mov eax, dword [esp + 0x98]
mov dword [esi + 0x114], eax
mov eax, dword [esp + 0x94]
mov dword [esi + 0x118], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x9c]
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x3c]
movsd qword [ecx], xmm0
jmp 0x43dc4e
mov ebx, dword [esi]
test ebx, ebx
mov ebp, 0
je 0x43e2fe
mov ebx, dword [esi + 4]
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x1c], 1
mov dword [esp + 0x3c], str.1.3.6.1.5.5.7.3.1
mov dword [esp + 0x40], str.1.3.6.1.4.1.311.10.3.3
mov dword [esp + 0x44], str.2.16.840.1.113730.4.1
mov dword [esp + 0x20], 3
lea eax, [esp + 0x3c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x6c], ebp
lea eax, [esp + 0x6c]
push eax
push ebp
push 0xc0000001
lea eax, [esp + 0x24]
push eax
push ebx
push ebp
push dword [esp + 0x78]
push ebp
call dword [sym.imp.crypt32.dll_CertGetCertificateChain]
test eax, eax
je 0x43e727
mov edx, dword [esp + 0x6c]
cmp dword [esi], 0
mov dword [esp], edx
je 0x43e42f
lea ecx, [esp + 0x3c]
call fcn.0048d856
cmp dword [esp + 0x3c], 0
je 0x43e436
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
lea eax, [esp + 0x54]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], 0
lea ecx, [esp + 0x6c]
call fcn.0048d8c9
cmp eax, 1
jne 0x43e43d
mov esi, edx
mov eax, dword [esp + 0x84]
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], 0
lea ecx, [esp + 0x18]
call fcn.0048db08
cmp eax, 1
jne 0x43e40f
mov ebp, edx
mov eax, dword [ebp + 8]
cmp eax, dword [esi + 8]
jne 0x43e3fc
push eax
push dword [esi + 4]
push dword [ebp + 4]
call fcn.004b6b8a
add esp, 0xc
mov ebx, eax
push ebp
call edi
test ebx, ebx
jne 0x43e3ff
jmp 0x43e42b
push ebp
call edi
lea ecx, [esp + 0x18]
call fcn.0048db08
mov ebp, edx
cmp eax, 1
je 0x43e3da
xor ebx, ebx
cmp dword [esp + 0x18], 0
je 0x43e41e
push dword [esp + 0x1c]
call edi
push esi
call edi
test bl, bl
je 0x43e3a3
jmp 0x43e444
mov bl, 1
jmp 0x43e411
mov esi, 0xf00
jmp 0x43e456
mov esi, 0xf00
jmp 0x43e453
mov esi, 0xf00
jmp 0x43e449
mov esi, 0xf10
push dword [esp + 0x58]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
mov edx, dword [esp]
movaps xmm0, xmmword [0x4d0740]
movups xmmword [esp + 0x6c], xmm0
mov eax, dword [esp + 4]
cmp dword [eax + 0x138], 0x80000000
je 0x43e485
cmp byte [eax + 0x15d], 0
jne 0x43e485
mov eax, dword [eax + 0x13c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x54], 0xc
mov dword [esp + 0x58], esi
lea eax, [esp + 0x6c]
mov dword [esp + 0x5c], eax
xorps xmm0, xmm0
lea eax, [esp + 0x1c]
movups xmmword [eax], xmm0
mov dword [esp + 0x18], 0x14
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x58]
push eax
push edx
push 4
call dword [sym.imp.crypt32.dll_CertVerifyCertificateChainPolicy]
test eax, eax
je 0x43e55d
mov esi, dword [esp + 0x1c]
test esi, esi
mov ebp, dword [esp + 0x7c]
cmovne ebp, esi
sete bl
shl bl, 2
mov eax, dword [esp + 4]
mov ecx, dword [eax + 0x130]
test ecx, ecx
mov dword [esp + 0x7c], ebp
je 0x43e569
mov eax, dword [eax + 0x134]
mov edx, dword [eax + 8]
dec edx
and edx, 0xfffffff8
add ecx, edx
add ecx, 8
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
mov ebp, dword [esp]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], edi
lea edx, [esp + 0x3c]
push edx
push ecx
lea ecx, [esp + 0x54]
push ecx
call dword [eax + 0x14]
add esp, 0xc
test esi, esi
je 0x43e539
movzx ecx, bl
mov edx, dword [esp + 0x7c]
call fcn.0043d9ff
mov ebx, dword [esp + 0x4c]
cmp bl, 4
mov edi, dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
jne 0x43e744
mov esi, dword [esp + 4]
push dword [esp + 0x60]
call edi
mov cl, 1
jmp 0x43e5e0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
xor ebx, ebx
jmp 0x43e571
test esi, esi
je 0x43e60d
mov esi, dword [esp + 4]
mov eax, dword [esp]
mov ecx, ebp
shr ecx, 0x10
mov dword [esp + 0x14], ecx
shl ebp, 0x10
push eax
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
mov dword [esp], 0
jmp 0x43e5ce
mov dword [esp + 0x14], eax
push esi
call edi
cmp dword [esp + 0x18], 0
je 0x43e5a8
push dword [esp + 0x1c]
call edi
mov ebp, ebx
mov eax, dword [esp + 0x14]
shrd ebp, eax, 0x10
shr eax, 0x10
mov dword [esp + 0x14], eax
push 0
push dword [esp + 4]
call dword [sym.imp.crypt32.dll_CertCloseStore]
mov al, bh
mov dword [esp], eax
mov esi, dword [esp + 4]
push dword [esp + 0x60]
call edi
cmp bl, 4
mov ecx, dword [esp]
jne 0x43e767
test cl, cl
je 0x43e604
cmp byte [esi + 0x110], 0
mov ebp, dword [esp + 8]
jne 0x43dd0a
mov eax, dword [esp + 0x80]
mov byte [eax], 1
jmp 0x43dd0a
mov ebp, dword [esp + 8]
jmp 0x43dd0a
push dword [esp]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
jmp 0x43e54c
cmp eax, 1
jne 0x43e640
mov ecx, dword [esp + 0x10]
mov dword [ecx], 1
mov eax, dword [esp + 0x80]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 4], xmm0
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x14], eax
jmp 0x43e697
mov eax, dword [esp + 0x10]
mov dword [eax], 0
jmp 0x43e697
mov edx, dword [esp + 0x10]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
jmp 0x43e691
lea esi, [esp + 0x18]
mov ecx, esi
mov edx, 0x25
push 0x1f
push str.unexpected_EOF_during_handshakeassertion_failed:_size___nread
call fcn.0048d696
add esp, 8
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x10]
mov dword [edx + 8], ecx
mov dword [edx + 4], eax
jmp 0x43e691
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov dword [edx], 2
add esp, 0xa8
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, esi
shr edi, 8
shl esi, 0x18
xor ebx, ebx
mov ebp, dword [esp + 8]
jmp 0x43e6bf
mov edi, dword [esp + 0x50]
mov esi, ebx
shrd esi, edi, 8
shr edi, 8
mov eax, dword [esp + 0xc]
test eax, eax
je 0x43e6de
cmp eax, 9
jb 0x43e6cf
mov ebp, dword [ebp - 4]
push ebp
push 0
push dword [0x530ac8]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [esp + 0x54], 0
je 0x43e6f7
push dword [esp + 0x58]
push 0
push dword [0x530ac8]
call dword [sym.imp.KERNEL32.dll_HeapFree]
shld edi, esi, 8
shl esi, 8
movzx eax, bl
or eax, esi
mov ecx, dword [esp + 0x10]
mov dword [ecx + 8], edi
mov dword [ecx + 4], eax
mov dword [ecx], 2
jmp 0x43e697
mov eax, ebp
shr eax, 0x10
mov dword [esp + 0x14], eax
shl ebp, 0x10
xor ecx, ecx
xor ebx, ebx
jmp 0x43e767
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
shr eax, 0x10
mov dword [esp + 0x14], eax
shl ebp, 0x10
mov dword [esp], 0
xor ebx, ebx
jmp 0x43e75a
mov eax, dword [esp + 0x50]
mov ebp, ebx
shrd ebp, eax, 0x10
shr eax, 0x10
mov dword [esp + 0x14], eax
mov al, bh
mov dword [esp], eax
push dword [esp + 0x60]
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov ecx, dword [esp]
mov edx, dword [esp + 0x14]
shld edx, ebp, 0x10
shl ebp, 0x10
movzx eax, bl
or eax, ebp
movzx ecx, cl
shl ecx, 8
or ecx, eax
mov eax, dword [esp + 0x10]
mov dword [eax + 8], edx
mov dword [eax + 4], ecx
mov dword [eax], 2
jmp 0x43e697
mov ecx, dword [esp + 0x10]
mov dword [ecx + 8], eax
mov dword [ecx + 4], 0
jmp 0x43e70d
xor ecx, ecx
inc ecx
mov edx, ebx
push 0x4f51d8
call fcn.004cb900
xor ecx, ecx
inc ecx
mov edx, ebx
push 0x4f51b8
call fcn.004cb900
xor ecx, ecx
inc ecx
mov edx, ebx
push 0x4f51c8
call fcn.004cb900
mov ecx, esi
push 0x4f51a8
call fcn.004cb960
mov ecx, 4
mov edx, 0x18
call fcn.004cb610