Function at 0x43eaf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xbd5718]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x48]
cmp eax, dword [ecx + 8]
jbe 0x43fc62
sub esp, 0xc8
mov eax, dword [0xbd5718]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0xa0], eax
jmp 0x43eb2c
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xc4], ecx
lea edx, [0xbb7d74]
mov dword [esp], edx
call fcn.00476dd0
movzx eax, byte [esp + 4]
test al, al
je 0x43eb5b
call fcn.0043e840
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
mov eax, dword [esp + 0xc4]
test byte [eax], al
mov ecx, dword [eax + 0x1190]
test ecx, ecx
je 0x43eb7a
call fcn.0043cec0
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x1198]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00455540
movzx eax, byte [0xbb7490]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x54], ebp
test al, al
je 0x43ebca
mov eax, 1
jmp 0x43ebf3
nop
lea eax, [0xbb749c]
mov dword [esp], eax
call fcn.00476dd0
movzx eax, byte [esp + 4]
test al, al
setne al
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
test al, al
je 0x43ec17
call fcn.00456e00
mov eax, dword [esp]
test eax, eax
jne 0x43fb39
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
mov eax, dword [0xbd55fc]
test eax, eax
je 0x43ec5e
lea eax, [0xbd6740]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.0041f2c0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43fb1b
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebp
mov eax, dword [esp + 0xc4]
mov esi, dword [eax + 0xc]
imul esi, esi, 0xc10c9715
cmp esi, 0x4325c53
ja 0x43ecd9
mov esi, dword [0xbb7d3c]
test esi, esi
jle 0x43ecd9
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00446580
mov eax, dword [esp + 8]
mov dword [esp + 0xb8], eax
nop
nop
lea ecx, [0xbb7cf8]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0xb8]
test eax, eax
jne 0x43f60e
lea eax, [0xbd55e4]
mov dword [esp], eax
call fcn.00476e70
mov eax, dword [esp + 4]
and eax, 0xc
cmp eax, 0xc
jne 0x43ed3d
lea eax, [0xbd55e4]
mov dword [esp], eax
mov dword [esp + 4], 0xd
mov dword [esp + 8], 1
call fcn.00476ea0
movzx eax, byte [esp + 0xc]
test al, al
je 0x43ed22
mov eax, dword [0xbb4698]
jmp 0x43ed24
xor eax, eax
test eax, eax
je 0x43ed3d
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.0043ace0
mov eax, dword [0xba3ed0]
mov eax, dword [eax]
test eax, eax
je 0x43ed59
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00471e50
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00446fc0
mov eax, dword [esp + 4]
test eax, eax
jne 0x43faf9
mov eax, dword [0xbb7d3c]
test eax, eax
je 0x43edcf
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446580
mov eax, dword [esp + 8]
mov dword [esp + 0xb4], eax
nop
nop
lea ecx, [0xbb7cf8]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x43fadb
lea eax, [0xbd561c]
mov dword [esp], eax
call fcn.00476e70
mov eax, dword [esp + 4]
test eax, eax
jne 0x43ede9
xor ecx, ecx
jmp 0x43ee25
lea eax, [0xbd5710]
mov dword [esp], eax
call fcn.00476e70
mov eax, dword [esp + 4]
test eax, eax
ja 0x43ee03
xor ecx, ecx
jmp 0x43ee25
lea eax, [0xbb7ce8]
mov dword [esp], eax
call fcn.00476f70
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x43ee51
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.004322d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x43f9ea
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax + 0x88]
test cl, cl
je 0x43ee6a
mov ecx, 1
jmp 0x43eeac
lea eax, [0xbb7d2c]
mov dword [esp], eax
call fcn.00476f60
mov eax, dword [esp + 4]
shl eax, 1
mov dword [esp + 0x78], eax
lea ecx, [0xbb7d28]
mov dword [esp], ecx
call fcn.00476f60
mov eax, dword [0xbd567c]
sub eax, dword [esp + 4]
mov ecx, dword [esp + 0x78]
cmp eax, ecx
setg al
mov ecx, eax
mov eax, dword [esp + 0xa0]
test cl, cl
jne 0x43eec5
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
jmp 0x43ef76
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x43eed8
mov dword [esp], eax
call fcn.0043ac80
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0043fda0
mov eax, dword [esp + 8]
test eax, eax
jne 0x43f9c8
movzx eax, byte [esp + 0x20]
test al, al
je 0x43ef0d
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
setne dl
test ecx, ecx
setne bl
or edx, ebx
test dl, dl
je 0x43ef66
mov edx, dword [esp + 0x48]
test edx, edx
sete bl
mov ebp, dword [esp + 0x4c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and ebx, esi
test bl, bl
jne 0x43ef6e
cmp ecx, ebp
sete bl
xchg esi, ebx
setl bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and ebx, edi
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x43ef6e
mov ecx, ebp
mov eax, edx
jmp 0x43ef6e
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebp
mov ebx, dword [0xbd55fc]
test ebx, ebx
jne 0x43ef94
xor ebx, ebx
jmp 0x43efe5
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.004182f0
movzx eax, byte [esp + 4]
test al, al
jne 0x43efc0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
xor ebx, ebx
jmp 0x43efe5
lea eax, [0xbd6740]
mov dword [esp], eax
call fcn.00420800
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov ebx, eax
mov eax, dword [esp + 0x48]
test bl, bl
je 0x43f011
lea eax, [0xbd5778]
mov dword [esp], eax
call fcn.0040a6a0
mov eax, dword [esp + 4]
test eax, eax
jne 0x43f8fa
lea eax, [0xbd6740]
mov dword [esp], eax
call fcn.00420920
mov eax, dword [0xbb5018]
mov dword [esp + 0xc0], eax
mov ecx, dword [0xbb501c]
mov dword [esp + 0x70], ecx
mov edx, dword [0xbb5020]
mov dword [esp + 0x74], edx
mov ebx, dword [0xbb5028]
mov dword [esp + 0xa4], ebx
mov ebp, dword [0xbb502c]
mov dword [esp + 0x60], ebp
mov esi, dword [0xbb5030]
mov dword [esp + 0x64], esi
mov edi, dword [0xbb5038]
mov dword [esp + 0x90], edi
mov edi, dword [0xbb503c]
mov dword [esp + 0x40], edi
mov edi, dword [0xbb5040]
mov dword [esp + 0x44], edi
nop
nop
lea edi, [0xbb7cf8]
mov dword [esp], edi
call fcn.0040a7e0
lea eax, [0xbb7d74]
mov dword [esp], eax
call fcn.00476dd0
movzx eax, byte [esp + 4]
test al, al
jne 0x43f0ac
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x1190]
test ecx, ecx
je 0x43f0c8
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
mov ecx, dword [0xbb7d3c]
test ecx, ecx
jne 0x43f8aa
mov ecx, dword [esp + 0xa0]
movzx edx, byte [ecx + 0x88]
test dl, dl
je 0x43f0ec
xor edx, edx
jmp 0x43f112
lea eax, [0xbb7d30]
mov dword [esp], eax
call fcn.00476e70
cmp dword [esp + 4], 1
sete al
mov ecx, dword [esp + 0xa0]
mov edx, eax
mov eax, dword [esp + 0xc4]
test dl, dl
je 0x43f13a
mov dword [esp], ecx
call fcn.0043ac80
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
call fcn.004447a0
mov eax, dword [esp + 0xc4]
cmp dword [esp], eax
jne 0x43fc4b
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.00446770
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
nop
nop
lea edx, [0xbb7cf8]
mov dword [esp], edx
call fcn.0040aa00
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x2b], cl
test cl, cl
jne 0x43f1aa
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
jmp 0x43f2ec
mov byte [eax + 0x88], 0
lea ecx, [0xbb7d2c]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.00476f80
mov eax, dword [esp + 8]
test eax, eax
jl 0x43fc35
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [0xbb7d3c]
test eax, eax
je 0x43f20d
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00446aa0
mov eax, dword [esp + 8]
test eax, eax
jne 0x43f82d
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
call fcn.00440370
mov eax, dword [esp + 0x18]
test eax, eax
je 0x43f282
mov dword [esp], eax
call fcn.00444590
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac80
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
call fcn.00440590
mov eax, dword [esp]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x43f749
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1c], eax
call fcn.00440470
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], ebx
lea eax, [0xbd561c]
mov dword [esp], eax
call fcn.00476e70
mov eax, dword [esp + 4]
test eax, eax
jne 0x43f316
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
xor ecx, ecx
jmp 0x43f382
lea eax, [0xbd5710]
mov dword [esp], eax
call fcn.00476e70
mov eax, dword [esp + 4]
test eax, eax
ja 0x43f344
mov eax, dword [esp + 0x48]
test eax, eax
setne cl
mov edx, dword [esp + 0x4c]
test edx, edx
setne bl
or ecx, ebx
test cl, cl
je 0x43f380
lea eax, [0xbb7ce8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00477060
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
test eax, eax
setne al
or ecx, eax
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
jmp 0x43f382
xor ecx, ecx
test cl, cl
jne 0x43f419
test eax, eax
setne cl
test edx, edx
setne bl
or ecx, ebx
test cl, cl
jne 0x43f39e
xor ecx, ecx
jmp 0x43f3bf
lea eax, [0xbd561c]
mov dword [esp], eax
call fcn.00476e70
mov eax, dword [esp + 4]
test eax, eax
setne al
mov edx, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
test cl, cl
je 0x43f738
nop
lea eax, [0xbb7cf0]
mov dword [esp], eax
call fcn.00476f70
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
sete dl
test ecx, ecx
sete bl
and edx, ebx
test dl, dl
jne 0x43f40f
mov edx, dword [esp + 0x4c]
cmp edx, ecx
sete cl
setl dl
mov ebx, dword [esp + 0x48]
cmp ebx, eax
setb al
and ecx, eax
or edx, ecx
test dl, dl
je 0x43f738
call fcn.004321c0
jmp 0x43f738
nop
lea ecx, [0xbb7cf0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00476f30
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x43fc1f
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x43fc09
mov ecx, dword [esp + 0x48]
test ecx, ecx
setne dl
mov ebx, dword [esp + 0x4c]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
je 0x43f4bd
mov edx, dword [esp + 0x54]
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x50]
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and ebp, edi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x43f4af
nop
call fcn.00472f90
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0x4c]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x48]
sub ecx, esi
sbb ebx, edx
test ebx, ebx
jge 0x43f4c7
xor ebx, ebx
xor ecx, ecx
jmp 0x43f4c7
mov ebx, 0xffffffff
mov ecx, 0xffffffff
mov edx, dword [0xbd5780]
mov ebp, dword [0xbd5784]
test edx, edx
setne dl
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
je 0x43f4eb
xor ebx, ebx
xor ecx, ecx
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.004322d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x58], eax
nop
call fcn.00472f90
mov eax, dword [esp]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x54], ecx
nop
lea edx, [0xbb7cf0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00476f30
nop
lea eax, [0xbb7ce8]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
call fcn.00476f30
mov eax, dword [0xbd5780]
mov ecx, dword [0xbd5784]
test ecx, ecx
setne cl
test eax, eax
setne al
or ecx, eax
test cl, cl
je 0x43f58f
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x43f58f
call fcn.0043de60
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00446930
mov eax, dword [esp + 8]
mov dword [esp + 0x94], eax
nop
nop
lea ecx, [0xbb7cf8]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0x94]
test eax, eax
je 0x43f710
mov dword [esp], eax
call fcn.00444590
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x43f62c
movzx eax, byte [esp + 0x2b]
test al, al
je 0x43eb25
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac80
jmp 0x43eb25
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xc4], eax
nop
nop
test eax, eax
je 0x43f640
mov ecx, dword [eax + 0x5c]
mov dword [esp + 0x58], ecx
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.004408c0
nop
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43f668
nop
lea ecx, [0xbd5710]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476ff0
movzx eax, byte [0xbb7490]
test al, al
jne 0x43f679
xor ecx, ecx
xor eax, eax
jmp 0x43f685
call fcn.0045d070
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x7c], eax
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b580
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x43f6eb
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e240
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.0045d1a0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.004408c0
nop
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43f738
nop
lea ecx, [0xbd5710]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476ff0
call fcn.0043de60
mov eax, dword [esp + 0xa0]
jmp 0x43eb2c
mov dword [esp + 0x98], eax
mov dword [esp + 0xa8], ecx
call fcn.00444590
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac80
mov eax, dword [esp + 0x98]
mov dword [eax + 0x960], 3
movzx eax, byte [0xbb7490]
test al, al
jne 0x43f78d
xor ecx, ecx
xor eax, eax
jmp 0x43f799
call fcn.0045d070
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x80], eax
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b580
mov eax, dword [esp + 0x30]
test eax, eax
je 0x43f808
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e240
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0045d1a0
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0x9c], eax
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446580
mov eax, dword [esp + 8]
test eax, eax
je 0x43fbf3
mov dword [esp + 0xac], eax
nop
nop
lea eax, [0xbb7cf8]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00444590
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac80
mov eax, dword [esp + 0xac]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446580
mov eax, dword [esp + 8]
mov dword [esp + 0xb0], eax
nop
nop
lea ecx, [0xbb7cf8]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov ecx, dword [esp + 0xc4]
mov dword [ecx + 0x960], 3
mov eax, dword [eax + 0xc]
movzx ecx, byte [0xbb7490]
mov dword [esp + 0xc4], eax
test cl, cl
jne 0x43f926
xor ecx, ecx
xor edx, edx
jmp 0x43f93b
call fcn.0045d070
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x84], edx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b580
mov eax, dword [esp + 0x34]
test eax, eax
je 0x43f9a3
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e240
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0045d1a0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
movzx ecx, byte [esp + 0xc]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xc4], eax
nop
nop
test eax, eax
je 0x43fa02
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x5c], edx
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.004408c0
nop
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x43fa2a
nop
lea ecx, [0xbd5710]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476ff0
movzx eax, byte [0xbb7490]
test al, al
jne 0x43fa3b
xor ecx, ecx
xor eax, eax
jmp 0x43fa47
call fcn.0045d070
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b580
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x43fab6
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e240
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.0045d1a0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
movzx ecx, byte [esp + 8]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 1
add esp, 0xc8
ret
mov dword [esp + 0xbc], eax
movzx ecx, byte [0xbb7490]
test cl, cl
jne 0x43fb51
xor ecx, ecx
xor edx, edx
jmp 0x43fb66
call fcn.0045d070
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x38], ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b580
mov eax, dword [esp + 0x38]
test eax, eax
je 0x43fbce
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e240
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0045d1a0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 1
add esp, 0xc8
ret
lea eax, [0x886dc1]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046bb40
lea eax, [0x883fe6]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046bb40
lea eax, [0x87f47f]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0046bb40
lea eax, [0x882ca1]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0046bb40
lea eax, [0x87a23f]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0046bb40
nop
call fcn.00470dc0
jmp fcn.0043eaf0