Function at 0x443ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xac8fb4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44473b
sub esp, 0x70
mov eax, dword [0xac8f14]
test eax, eax
jl 0x444724
mov ecx, dword [esp + 0x74]
test ecx, ecx
jle 0x444724
mov dword [esp + 0x30], eax
movzx edx, byte [0xaaad30]
test dl, dl
jne 0x443f36
xor edx, edx
xor ebx, ebx
jmp 0x443f4e
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x74]
test edx, edx
je 0x443f7e
mov dword [esp + 0x54], ebx
mov dword [esp + 0x28], edx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0045d3b0
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
call fcn.0045d360
nop
call fcn.00473090
mov eax, dword [0xaab638]
mov ecx, dword [0xaab63c]
mov edx, dword [esp]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 4]
test eax, eax
xchg ebp, ebx
setne bl
xchg ebp, ebx
test ecx, ecx
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
je 0x444006
mov ebp, dword [0xaab640]
mov esi, dword [0xaab644]
mov dword [esp + 0x4c], esi
mov edi, dword [esp + 0x30]
sar edi, 0x1f
sub edx, eax
mov dword [esp + 0x48], edx
mov eax, ebx
sbb ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x30]
mul edx
mov esi, dword [esp + 0x48]
imul edi, esi
add edx, edi
mov esi, dword [esp + 0x30]
imul ebx, esi
add edx, ebx
add ebp, eax
mov dword [0xaab640], ebp
mov ebx, dword [esp + 0x4c]
adc ebx, edx
mov dword [0xaab644], ebx
jmp 0x44400c
mov ecx, ebx
mov esi, dword [esp + 0x30]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x2c]
mov dword [0xaab638], edx
mov dword [0xaab63c], ecx
mov ebx, dword [esp + 0x74]
lea ebp, [ebx + 0x1f]
sar ebp, 0x1f
shr ebp, 0x1b
lea ebp, [ebp + ebx + 0x1f]
sar ebp, 5
mov dword [esp + 0x34], ebp
cmp dword [0xaa8cdc], ebx
jge 0x444205
nop
nop
lea eax, [0xac8f20]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0x74]
lea ecx, [0xaa8cd8]
cmp dword [ecx + 8], eax
jl 0x44406e
mov dword [0xaa8cdc], eax
jmp 0x4440fa
lea ecx, [0x762400]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0046d060
mov eax, dword [esp + 0xc]
mov dword [esp + 0x6c], eax
mov ecx, dword [0xaa8cd8]
mov edx, dword [0xaa8ce0]
lea ebx, [0x762400]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x74]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0046a360
mov eax, dword [esp + 0x74]
mov dword [0xaa8cdc], eax
mov dword [0xaa8ce0], eax
mov ecx, dword [0xac9328]
test ecx, ecx
jne 0x4440da
mov ebx, dword [esp + 0x6c]
jmp 0x4440ee
call fcn.004722e0
mov ebx, dword [esp + 0x6c]
mov dword [edi], ebx
mov ebp, dword [0xaa8cd8]
mov dword [edi + 4], ebp
mov dword [0xaa8cd8], ebx
lea ecx, [0xaa8cd8]
mov edx, dword [0xaa8cf0]
mov ebx, dword [esp + 0x34]
cmp edx, ebx
jl 0x44412d
jb 0x44471d
mov dword [0xaa8cec], ebx
mov edx, dword [0xaa8d00]
cmp edx, ebx
jb 0x444716
mov dword [0xaa8cfc], ebx
jmp 0x4441e1
mov eax, dword [0xaa8ce8]
mov ecx, dword [0xaa8cec]
lea edx, [0x74aae0]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0044d8d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov dword [0xaa8cec], ecx
mov dword [0xaa8cf0], ecx
mov edx, dword [0xac9328]
test edx, edx
je 0x444181
call fcn.004722e0
mov dword [edi], eax
mov edx, dword [0xaa8ce8]
mov dword [edi + 4], edx
mov dword [0xaa8ce8], eax
mov eax, dword [0xaa8cf8]
mov edx, dword [0xaa8cfc]
lea ebx, [0x74aae0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.0044d8d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
mov dword [0xaa8cfc], ecx
mov dword [0xaa8d00], ecx
mov edx, dword [0xac9328]
test edx, edx
je 0x4441db
call fcn.004722e0
mov dword [edi], eax
mov edx, dword [0xaa8cf8]
mov dword [edi + 4], edx
mov dword [0xaa8cf8], eax
nop
nop
lea eax, [0xac8f20]
mov dword [esp], eax
call fcn.0040aa00
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov eax, esi
jmp 0x444241
mov ecx, dword [0xaa8cd8]
lea ecx, [ecx + eax*4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
call fcn.00404de0
mov eax, dword [esp + 0x40]
lea esi, [eax + 1]
mov eax, dword [esp + 0x74]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
cmp ebx, esi
jle 0x4442a1
mov edi, dword [0xaa8cdc]
cmp esi, edi
jae 0x44470d
mov dword [esp + 0x40], esi
mov edi, dword [0xaa8cd8]
mov edi, dword [edi + esi*4]
test edi, edi
jne 0x44427a
lea eax, [0x7a1380]
mov dword [esp], eax
call fcn.0040c0b0
mov edi, dword [esp + 4]
mov esi, dword [esp + 0x40]
mov dword [esp + 0x60], edi
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.00443a10
mov ecx, dword [0xaa8cdc]
mov eax, dword [esp + 0x40]
cmp eax, ecx
jb 0x444209
jmp 0x444708
mov esi, dword [0xac8fb4]
mov esi, dword fs:[esi]
mov esi, dword [esi]
mov dword [esp + 0x64], esi
mov edi, dword [esi + 0x18]
mov edi, dword [edi + 0x58]
test edi, edi
je 0x4443ae
mov dword [esp + 0x44], edi
cmp dword [edi], ebx
jl 0x444394
mov edi, dword [esp + 0x44]
test edi, edi
je 0x4443ae
movzx edi, byte [0xaaad30]
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4442ef
xor edi, edi
xor edi, edi
mov dword [esp + 0x50], edi
xor edi, edi
jmp 0x444319
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x64]
mov edi, ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
test edi, edi
je 0x444385
mov dword [esp + 0x24], edi
nop
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov dword [esp + 4], edi
mov byte [esp + 8], 1
call fcn.0045e1a0
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
mov edx, dword [esp + 0x50]
mov dword [esp], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.0045d580
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.0045d360
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x64]
mov edi, dword [esi + 0x18]
mov edi, dword [edi + 0x58]
mov dword [edi + 0x2c], 0
jmp 0x4443ae
mov dword [edi + 4], 1
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0x30]
mov dword [esp], eax
call fcn.00411410
jmp 0x44442d
mov edi, dword [esi + 0x18]
mov dword [edi + 0x58], 0
mov edi, dword [0xaa8cdc]
test edi, edi
jbe 0x4446ff
mov eax, dword [0xaa8cd8]
mov eax, dword [eax]
mov dword [eax + 0x2c], 0
mov dword [eax + 4], 0
mov dword [esp], eax
call fcn.00444750
movzx eax, byte [0xaaad30]
test al, al
jne 0x4443f5
xor ecx, ecx
xor eax, eax
jmp 0x444401
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x44442d
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0045df80
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.0045d360
mov dword [0xac8ef0], 0
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x74]
mov eax, ebx
jmp 0x44446b
mov dword [esp + 0x3c], ebx
mov eax, dword [0xaa8cd8]
mov eax, dword [eax + ebx*4]
mov dword [esp], eax
call fcn.00443b90
mov eax, dword [esp + 0x3c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
cmp ebx, edx
jge 0x44447e
mov ecx, dword [0xaa8cdc]
cmp ebx, ecx
jb 0x444443
jmp 0x4446f8
lea ebx, [0xaa8cd8]
cmp dword [ebx + 4], eax
je 0x4444f5
nop
nop
lea eax, [0xac8f20]
mov dword [esp], eax
call fcn.0040a7e0
mov edx, dword [0xaa8ce0]
mov ecx, dword [esp + 0x74]
cmp ecx, edx
ja 0x4446f3
mov dword [0xaa8cdc], ecx
mov edx, dword [0xaa8cf0]
mov eax, dword [esp + 0x34]
cmp edx, eax
jb 0x4446ec
mov dword [0xaa8cec], eax
mov edx, dword [0xaa8d00]
cmp edx, eax
jb 0x4446e5
mov dword [0xaa8cfc], eax
nop
nop
lea eax, [0xac8f20]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
lea ebx, [eax - 1]
mov ebp, dword [esp + 0x64]
xor ecx, ecx
jmp 0x444501
dec ebx
mov dword [esp + 0x5c], ecx
test ebx, ebx
jl 0x4445b2
mov esi, dword [0xaa8cdc]
cmp ebx, esi
jae 0x4446dc
mov esi, dword [0xaa8cd8]
mov esi, dword [esi + ebx*4]
mov edi, dword [ebp + 0x18]
mov edi, dword [edi + 0x58]
cmp edi, esi
je 0x444500
mov dword [esp + 0x38], ebx
mov dword [esp + 0x68], esi
mov dword [esi + 4], 0
mov dword [esp], esi
call fcn.00446cf0
movzx eax, byte [esp + 4]
test al, al
jne 0x44457d
mov edx, dword [0xaab59c]
nop
test edx, edx
je 0x44456b
mov ebx, dword [edx + 0xb4]
mov dword [0xaab59c], ebx
dec dword [0xaab5a0]
nop
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x2c], edx
mov edx, dword [esp + 0x5c]
nop
mov dword [ecx + 8], edx
jmp 0x44459d
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.00446930
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x64]
jmp 0x444500
nop
mov dword [0xaa8f80], eax
mov dword [0xaa8f88], 0
mov ebx, 1
jmp 0x4445cf
lea ebx, [esi + 1]
mov eax, ebp
cmp eax, ebx
jb 0x444677
mov ebp, eax
mov esi, ebx
jmp 0x4446d3
cmp ebx, 1
jne 0x4445ca
mov ebx, dword [0xaa8f8c]
mov edi, dword [0xaa8f88]
inc edi
mov eax, dword [0xaa8f84]
cmp ebx, edi
jae 0x444668
mov dword [esp + 0x48], esi
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x74aae0]
mov dword [esp + 0x10], eax
call fcn.0046d110
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [0xaa8f8c], eax
mov eax, dword [0xac9328]
test eax, eax
je 0x44464e
call fcn.004722e0
mov dword [edi], ecx
mov ebx, dword [0xaa8f84]
mov dword [edi + 4], ebx
mov dword [0xaa8f84], ecx
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x48]
mov edi, edx
mov eax, ecx
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x30]
mov dword [0xaa8f88], edi
mov dword [eax + edi*4 - 4], esi
jmp 0x4445ca
lea ecx, [0xac8f14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476fe0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x30]
cmp eax, ecx
je 0x4446b7
lea ecx, [0xac9680]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.00419a40
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x78], eax
add esp, 0x70
ret
mov edi, eax
mov eax, ebx
xor edx, edx
div edi
mov eax, edx
mov ebx, edi
mov edx, dword [esp + 0x30]
test eax, eax
jne 0x4446c3
jmp 0x4445e0
mov eax, ebx
mov ecx, esi
call fcn.00472350
mov ecx, eax
call fcn.00472390
mov ecx, eax
call fcn.00472390
call fcn.00472390
mov eax, ebx
call fcn.00472350
xor eax, eax
mov ecx, eax
call fcn.00472350
call fcn.00472350
mov eax, esi
mov ecx, edi
call fcn.00472350
mov ecx, ebx
call fcn.00472390
mov ecx, ebx
call fcn.00472390
lea eax, [0x7b4c4e]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0046bc70
nop
call fcn.00470ed0
jmp fcn.00443ef0