Function at 0x86aaa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x88
mov esi, dword [ebp + 8]
mov eax, dword [0xa47d50]
xor eax, ebp
mov dword [esp + 0x80], eax
call fcn.00879f70
mov ecx, dword [0xa3d154]
mov edx, dword [0xa3cdf4]
mov ebx, 0xd43
sub ebx, eax
sub edx, ebx
add edx, ecx
call edx
mov edi, eax
mov eax, dword [0xa3d0f8]
mov ecx, dword [0xa3cf84]
sub ecx, ebx
add ecx, eax
push 0x509d01dd
push esi
call ecx
add esp, 8
test al, 1
je 0x86aca8
xor edi, 0xd2c35f98
mov eax, dword [0xa3d128]
mov ecx, dword [0xa3cf78]
sub ecx, ebx
add ecx, eax
push edi
call ecx
mov ecx, dword [0xa3d044]
mov edx, dword [0xa3cd6c]
sub edx, ebx
add edx, ecx
lea ecx, [esp + 0x70]
lea esi, [esp + 0x68]
lea edi, [esp + 0x5f]
push 0x98506a12
push ecx
push esi
push edi
mov dword [esp + 0x24], eax
push eax
call edx
add esp, 0x14
movzx edi, byte [esp + 0x70]
movzx esi, byte [esp + 0x5f]
movzx eax, byte [esp + 0x68]
mov dword [esp + 0x10], eax
mov edx, dword [0xa3d068]
mov ecx, dword [0xa3cd80]
sub ecx, ebx
add ecx, edx
push 0x699ca2a8
lea edx, [esp + 0x74]
push edx
lea edx, [esp + 0x70]
push edx
lea edx, [esp + 0x6b]
push edx
push eax
push esi
mov dword [esp + 0x20], esi
push edi
call ecx
add esp, 0x1c
movzx eax, byte [esp + 0x68]
movzx ecx, byte [esp + 0x70]
movzx edx, byte [esp + 0x5f]
mov dword [esp + 4], edx
mov edi, ebx
mov dword [esp], ebx
mov ebx, dword [0xa3d1c0]
mov edx, dword [0xa3ce90]
sub edx, edi
add edx, ebx
lea ebx, [esp + 0x78]
push 0xd546b17b
push ebx
lea edi, [esp + 0x78]
push edi
lea edi, [esp + 0x74]
push edi
lea edi, [esp + 0x6f]
push edi
push esi
push ecx
push eax
call edx
add esp, 0x20
movzx eax, byte [esp + 0x5f]
mov dword [esp + 0xc], eax
movzx edi, byte [esp + 0x70]
movzx ebx, byte [esp + 0x78]
movzx ecx, byte [esp + 0x68]
mov eax, dword [0xa3d198]
mov edx, dword [0xa3cef8]
mov esi, dword [esp]
sub edx, esi
add edx, eax
push 0x2893a70e
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x67]
push eax
push ecx
push dword [esp + 0x20]
push ebx
push edi
push dword [esp + 0x24]
push dword [esp + 0x2c]
call edx
add esp, 0x24
movzx eax, byte [esp + 0x5f]
movzx ecx, byte [esp + 0x68]
mov edi, dword [0xa3d0d0]
mov edx, dword [0xa3cd40]
sub edx, esi
mov ebx, esi
add edx, edi
push 0xf2666280
lea esi, [esp + 0x74]
push esi
lea esi, [esp + 0x70]
push esi
lea esi, [esp + 0x6b]
push esi
push dword [esp + 0x14]
push ecx
push eax
call edx
add esp, 0x1c
movzx eax, byte [esp + 0x68]
movzx ecx, byte [esp + 0x5f]
movzx edx, byte [esp + 0x70]
mov esi, dword [0xa3d16c]
mov edi, dword [0xa3cd54]
sub edi, ebx
add edi, esi
push 0x2a8909a1
push edx
push ecx
push eax
call edi
add esp, 0x10
mov dword [esp + 0x38], 0
test al, 1
jne 0x86cb51
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
mov dword [esp + 0x38], eax
jmp 0x86cb51
mov dword [esp + 4], edi
xor edx, edx
nop
mov eax, dword [0xa3d0dc]
mov ecx, dword [0xa3cf30]
sub ecx, ebx
add ecx, eax
push 0x5f8e7c67
lea eax, [esp + 0x64]
push eax
push edx
push esi
mov edi, edx
call ecx
add esp, 0x10
mov eax, dword [0xa3d0ec]
mov ecx, dword [0xa3ce94]
sub ecx, ebx
add ecx, eax
push 0x15c3572e
lea eax, [esp + 0x64]
push eax
push esi
push edi
push dword [esp + 0x70]
call ecx
add esp, 0x14
mov edx, dword [esp + 0x60]
test al, 1
je 0x86acb0
mov esi, dword [0x9b82e0]
mov dword [esp + 0x10], esi
sar esi, 0x1f
mov eax, dword [0xa3d0d4]
mov ecx, dword [0xa3cd78]
sub ecx, ebx
add ecx, eax
mov edi, ebx
lea eax, [esp + 0x50]
push 0xafae53d1
push eax
push 0
mov ebx, dword [esp + 0x10]
push ebx
mov dword [esp + 0x54], edx
call ecx
add esp, 0x10
mov eax, dword [0xa3d13c]
mov ecx, dword [0xa3cdc0]
sub ecx, edi
add ecx, eax
push 0xafd183ed
lea eax, [esp + 0x54]
push eax
push ebx
push dword [esp + 0x60]
push dword [esp + 0x60]
call ecx
add esp, 0x14
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov ecx, dword [0xa3d00c]
mov eax, dword [0xa3cecc]
sub eax, edi
add eax, ecx
lea ecx, [esp + 0x68]
push 0xe63d0c5f
push ecx
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x5c]
push ecx
push ebx
push esi
push dword [esp + 0x28]
call eax
add esp, 0x1c
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov ecx, dword [0xa3d190]
mov eax, dword [0xa3ce24]
sub eax, edi
add eax, ecx
push 0x52c0d189
lea esi, [esp + 0x54]
push esi
push dword [esp + 0x1c]
push dword [esp + 0x18]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x84]
push dword [esp + 0x84]
call eax
add esp, 0x20
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [0xa3d124]
mov ecx, dword [0xa3cec0]
sub ecx, edi
add ecx, eax
push 0x1d9ad9e9
push esi
push ebx
call ecx
add esp, 0xc
mov ecx, dword [0xa3d0a4]
mov eax, dword [0xa3cf2c]
sub eax, edi
add eax, ecx
push 0x42490dc3
lea esi, [esp + 0x64]
push esi
lea ecx, [esp + 0x58]
push ecx
push ebx
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x2c]
push dword [esp + 0x28]
call eax
add esp, 0x20
mov ecx, dword [0xa3cfe4]
mov eax, dword [0xa3ce2c]
sub eax, edi
add eax, ecx
push 0x14ef84d1
lea ecx, [esp + 0x6c]
push ecx
push esi
lea ecx, [esp + 0x5c]
push ecx
push ebx
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x80]
push dword [esp + 0x80]
call eax
add esp, 0x24
mov ecx, dword [0xa3d184]
mov eax, dword [0xa3cf14]
sub eax, edi
add eax, ecx
push 0x475fe8b3
push esi
lea esi, [esp + 0x58]
push esi
push dword [esp + 0x14]
push dword [esp + 0x20]
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x80]
push dword [esp + 0x80]
push dword [esp + 0x90]
push dword [esp + 0x90]
call eax
add esp, 0x2c
mov ecx, dword [0xa3d104]
mov eax, dword [0xa3ce58]
sub eax, edi
add eax, ecx
push 0xcd026e8a
push esi
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push ebx
push dword [esp + 0x68]
push dword [esp + 0x68]
call eax
add esp, 0x1c
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [0xa3d0b4]
mov ecx, dword [0xa3ce80]
sub ecx, edi
add ecx, eax
push 0x739a495
push esi
push ebx
call ecx
add esp, 0xc
mov eax, dword [0xa3cf9c]
mov ecx, dword [0xa3cd8c]
sub ecx, edi
add ecx, eax
push 0xd33a6793
push esi
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push dword [esp + 0x18]
mov esi, ebx
push dword [esp + 0x24]
call ecx
add esp, 0x18
mov ecx, dword [0xa3d030]
mov eax, dword [0xa3cda8]
sub eax, edi
add eax, ecx
lea ecx, [esp + 0x78]
lea edx, [esp + 0x70]
push 0x887900c4
push ecx
lea ecx, [esp + 0x68]
push ecx
push edx
push dword [esp + 0x64]
push dword [esp + 0x64]
call eax
add esp, 0x18
mov eax, dword [esp + 0x70]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x40], eax
mov eax, dword [0xa3d008]
mov ecx, dword [0xa3ce08]
sub ecx, edi
add ecx, eax
push 0xa36b86ee
push dword [esp + 0x48]
call ecx
add esp, 8
mov dword [esp + 0x38], 0
test al, 1
jne 0x86cb51
mov eax, dword [0xa3d01c]
mov ecx, dword [0xa3ce6c]
sub ecx, edi
add ecx, eax
push 0x6c4a3283
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x68]
push eax
mov ebx, eax
push esi
push dword [esp + 0x54]
call ecx
add esp, 0x14
mov eax, dword [0xa3d054]
mov ecx, dword [0xa3cdd4]
sub ecx, edi
add ecx, eax
push 0x1ab25434
push ebx
push dword [esp + 0x70]
push dword [esp + 0x6c]
call ecx
add esp, 0x10
mov ecx, dword [0xa3d1bc]
mov eax, dword [0xa3cdd0]
sub eax, edi
add eax, ecx
push 0x33162ee8
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x74]
push ecx
push ebx
push esi
push dword [esp + 0x78]
call eax
add esp, 0x1c
mov ecx, dword [0xa3d1b8]
mov eax, dword [0xa3ce28]
sub eax, edi
add eax, ecx
push 0xe82285c6
push ebx
push esi
push dword [esp + 0x7c]
push dword [esp + 0x70]
push dword [esp + 0x8c]
push dword [esp + 0x80]
call eax
add esp, 0x1c
mov eax, dword [0xa3d100]
mov ecx, dword [0xa3cf6c]
sub ecx, edi
add ecx, eax
push 0xb3fbd1a7
lea ebx, [esp + 0x6c]
push ebx
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x6c]
call ecx
add esp, 0x10
mov eax, dword [0xa3d080]
mov ecx, dword [0xa3ce34]
sub ecx, edi
add ecx, eax
push 0x31d03cf4
push ebx
lea eax, [esp + 0x68]
push eax
push esi
push dword [esp + 0x70]
push dword [esp + 0x7c]
call ecx
add esp, 0x18
mov eax, dword [esp + 0x60]
mov dword [esp + 0x48], eax
mov eax, dword [0xa3d10c]
mov ecx, dword [0xa3cec8]
sub ecx, edi
add ecx, eax
push dword [esp + 0x68]
call ecx
mov ecx, dword [0xa3cfd8]
mov edx, dword [0xa3cf0c]
sub edx, edi
add edx, ecx
lea ecx, [esp + 0x5f]
push 0x8863b29
lea esi, [esp + 0x7c]
push esi
lea esi, [esp + 0x78]
push esi
push ebx
push ecx
mov dword [esp + 0x50], eax
push eax
call edx
add esp, 0x18
movzx esi, byte [esp + 0x68]
movzx eax, byte [esp + 0x70]
movzx ecx, byte [esp + 0x78]
movzx edx, byte [esp + 0x5f]
mov dword [esp + 8], edx
mov dword [esp], edi
mov ebx, dword [0xa3d0a0]
mov edx, dword [0xa3cf18]
sub edx, dword [esp]
add edx, ebx
push 0x673896f7
lea edi, [esp + 0x7c]
push edi
lea edi, [esp + 0x78]
push edi
lea edi, [esp + 0x74]
push edi
lea edi, [esp + 0x6f]
push edi
push ecx
push eax
mov dword [esp + 0x2c], esi
push esi
call edx
add esp, 0x20
movzx eax, byte [esp + 0x68]
mov dword [esp + 0xc], eax
movzx edi, byte [esp + 0x70]
movzx edx, byte [esp + 0x78]
movzx ecx, byte [esp + 0x5f]
mov eax, dword [0xa3d1d4]
mov ebx, dword [0xa3cf64]
sub ebx, dword [esp]
add ebx, eax
push 0x772aa659
lea eax, [esp + 0x63]
push eax
push ecx
push esi
push edx
push edi
push dword [esp + 0x24]
call ebx
add esp, 0x1c
movzx eax, byte [esp + 0x5f]
mov edx, dword [0xa3d040]
mov ecx, dword [0xa3ce7c]
sub ecx, dword [esp]
add ecx, edx
push 0xc3dce724
lea edx, [esp + 0x7c]
push edx
lea edx, [esp + 0x78]
push edx
lea edx, [esp + 0x74]
push edx
lea edx, [esp + 0x6f]
push edx
push eax
mov esi, dword [esp + 0x20]
push esi
call ecx
add esp, 0x1c
movzx eax, byte [esp + 0x70]
mov dword [esp + 0xc], eax
movzx ecx, byte [esp + 0x78]
movzx edx, byte [esp + 0x5f]
movzx eax, byte [esp + 0x68]
mov edi, dword [0xa3d118]
mov ebx, dword [0xa3cf38]
sub ebx, dword [esp]
add ebx, edi
push 0x50e659dc
lea edi, [esp + 0x63]
push edi
push eax
push esi
push edx
push ecx
push dword [esp + 0x24]
call ebx
mov ebx, dword [esp + 0x1c]
add esp, 0x1c
movzx eax, byte [esp + 0x5f]
mov ecx, dword [0xa3d004]
mov edx, dword [0xa3ce04]
sub edx, ebx
add edx, ecx
push 0xb23cef52
push edi
push eax
call edx
add esp, 0xc
movzx eax, byte [esp + 0x5f]
mov ecx, dword [0xa3d09c]
mov edx, dword [0xa3cf34]
sub edx, ebx
add edx, ecx
push 0xf80c6d32
push edi
push eax
push esi
push dword [esp + 0x20]
call edx
add esp, 0x14
movzx eax, byte [esp + 0x5f]
mov byte [esp + 0x33], al
mov eax, dword [0xa3cfd4]
mov ecx, dword [0xa3ce98]
sub ecx, ebx
add ecx, eax
push 0x5c46906d
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x78]
push eax
lea edi, [esp + 0x74]
push edi
lea esi, [esp + 0x70]
push esi
call ecx
add esp, 0x14
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 8], eax
mov eax, dword [0xa3cfe0]
mov ecx, dword [0xa3cf3c]
sub ecx, ebx
add ecx, eax
push 0xd773007a
push esi
push dword [esp + 0x80]
push dword [esp + 0x74]
call ecx
add esp, 0x10
mov ecx, dword [0xa3d08c]
mov eax, dword [0xa3cda4]
sub eax, ebx
add eax, ecx
push 0xc8c95edb
lea ecx, [esp + 0x74]
push ecx
push edi
push esi
push dword [esp + 0x20]
lea edi, [esp + 0x73]
push dword [esp + 0x1c]
mov esi, dword [esp + 0x1c]
push dword [esp + 0x78]
call eax
add esp, 0x1c
mov eax, dword [0xa3d1ac]
mov ecx, dword [0xa3cf70]
sub ecx, ebx
add ecx, eax
push 0x90291f9e
push edi
push dword [esp + 0x78]
push dword [esp + 0x74]
push dword [esp + 0x70]
call ecx
add esp, 0x14
movzx ecx, byte [esp + 0x5f]
mov byte [esp + 0x32], cl
mov dword [esp + 0x38], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
test al, 1
jne 0x86be2e
mov eax, dword [0xa3d18c]
mov ecx, dword [0xa3ce1c]
mov ebx, dword [esp]
sub ecx, ebx
add ecx, eax
push 0x2654b219
push edi
push esi
call ecx
add esp, 0xc
movzx eax, byte [esp + 0x5f]
mov ecx, dword [0xa3d158]
mov edx, dword [0xa3cd48]
sub edx, ebx
add edx, ecx
push 0x90a929ef
push eax
call edx
add esp, 8
test al, 1
je 0x86b3e9
mov eax, dword [0xa3cfb8]
mov ecx, dword [0xa3cea4]
mov ebx, dword [esp]
sub ecx, ebx
add ecx, eax
push 0x77e99f7d
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x78]
push eax
push dword [esp + 0x4c]
push esi
call ecx
add esp, 0x14
mov eax, dword [0xa3d14c]
mov ecx, dword [0xa3ceb4]
sub ecx, ebx
add ecx, eax
push 0x95b71abb
push edi
lea eax, [esp + 0x58]
push eax
push dword [esp + 0x40]
push dword [esp + 0x70]
push dword [esp + 0x84]
call ecx
add esp, 0x18
jmp 0x86b417
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
add eax, ecx
mov ecx, dword [0xa3d0c0]
mov edx, dword [0xa3ce68]
sub edx, dword [esp]
add edx, ecx
push 0x49fb8386
push edi
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x40]
push eax
call edx
add esp, 0x14
mov dword [esp + 0x18], 0
cmp byte [esp + 0x5f], 0
mov dword [esp + 0x14], 0
jne 0x86be2e
mov eax, dword [esp + 0x50]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x2c], eax
xor edx, edx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x20], 0
jmp 0x86b4fe
mov ecx, dword [0xa3d170]
mov eax, dword [0xa3cd60]
mov esi, dword [esp]
sub eax, esi
add eax, ecx
push 0x7ec1943c
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
mov edi, dword [esp + 0x1c]
push edi
mov ebx, dword [esp + 0x14]
push ebx
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x30]
push dword [esp + 0x38]
call eax
add esp, 0x24
mov eax, dword [esp + 0x50]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov ecx, dword [0xa3d06c]
mov eax, dword [0xa3cf1c]
sub eax, esi
add eax, ecx
push 0x408f0666
lea ecx, [esp + 0x63]
push ecx
lea ecx, [esp + 0x68]
push ecx
push dword [esp + 0x40]
push dword [esp + 0x70]
push edi
push ebx
call eax
add esp, 0x1c
mov edx, dword [esp + 0x60]
cmp byte [esp + 0x5f], 0
mov esi, ebx
jne 0x86be2e
mov dword [esp + 0x10], edx
mov ecx, dword [0xa3d050]
mov eax, dword [0xa3cd84]
mov ebx, dword [esp]
sub eax, ebx
add eax, ecx
mov ecx, dword [esp + 0x28]
add ecx, edx
mov dword [esp + 8], ecx
push 0xb4214c1
lea ecx, [esp + 0x6c]
push ecx
mov ecx, esi
lea esi, [esp + 0x68]
push esi
lea edi, [esp + 0x5c]
push edi
push ecx
push dword [esp + 0x40]
push dword [esp + 0x3c]
call eax
add esp, 0x1c
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov ecx, dword [0xa3d0ac]
mov eax, dword [0xa3ceb8]
sub eax, ebx
add eax, ecx
push 0xbd1c792b
push esi
push edi
push dword [esp + 0x10]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x84]
push dword [esp + 0x84]
call eax
add esp, 0x20
mov ecx, dword [0xa3d164]
mov eax, dword [0xa3ced0]
sub eax, ebx
add eax, ecx
push 0x7c4e0f51
lea esi, [esp + 0x6c]
push esi
lea ecx, [esp + 0x68]
push ecx
push edi
push dword [esp + 0x14]
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x80]
push dword [esp + 0x80]
call eax
add esp, 0x24
mov ecx, dword [0xa3d0e0]
mov eax, dword [0xa3ce30]
sub eax, ebx
add eax, ecx
push 0xc907d341
push esi
lea esi, [esp + 0x68]
push esi
push edi
push dword [esp + 0x14]
push dword [esp + 0x30]
push dword [esp + 0x24]
push dword [esp + 0x70]
push dword [esp + 0x70]
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x98]
push dword [esp + 0x98]
call eax
add esp, 0x34
mov ecx, dword [0xa3d014]
mov eax, dword [0xa3cd74]
sub eax, ebx
add eax, ecx
push 0x6ef06c85
push edi
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x84]
push dword [esp + 0x84]
call eax
add esp, 0x20
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov eax, dword [0xa3cfa0]
mov ecx, dword [0xa3ce3c]
sub ecx, ebx
add ecx, eax
push 0x4ad17157
push edi
push dword [esp + 0xc]
call ecx
add esp, 0xc
mov ecx, dword [0xa3d060]
mov eax, dword [0xa3cda0]
sub eax, ebx
add eax, ecx
push 0xea9bddd8
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x70]
push ecx
push esi
push edi
push dword [esp + 0x18]
push 0
push dword [esp + 0x24]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x44]
push dword [esp + 0x38]
call eax
add esp, 0x30
mov ecx, dword [0xa3d0b0]
mov eax, dword [0xa3cf44]
sub eax, ebx
add eax, ecx
push 0x39499358
push esi
push edi
push dword [esp + 0x10]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x8c]
push dword [esp + 0x8c]
push dword [esp + 0x9c]
push dword [esp + 0x9c]
call eax
add esp, 0x30
mov eax, dword [0xa3d1c8]
mov ecx, dword [0xa3cf08]
sub ecx, ebx
add ecx, eax
push 0x2c539ed6
push edi
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push dword [esp + 0x74]
push dword [esp + 0x74]
call ecx
add esp, 0x18
mov eax, dword [0xa3d000]
mov ecx, dword [0xa3cd98]
sub ecx, ebx
add ecx, eax
push 0x1fc1660e
push esi
push edi
push dword [esp + 0x10]
push dword [esp + 0x64]
push dword [esp + 0x64]
call ecx
add esp, 0x18
mov eax, dword [0xa3cfd0]
mov ecx, dword [0xa3cee4]
sub ecx, ebx
add ecx, eax
push 0x4ecd0ab
push edi
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push dword [esp + 0x74]
push dword [esp + 0x74]
call ecx
add esp, 0x18
mov eax, dword [0xa3d028]
mov ecx, dword [0xa3cea8]
sub ecx, ebx
add ecx, eax
push 0x943a1ea5
push edi
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push dword [esp + 0x14]
call ecx
add esp, 0x14
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x54]
mov eax, dword [0xa3d048]
mov ecx, dword [0xa3ce00]
sub ecx, ebx
add ecx, eax
push 0x695ba1f1
push edi
push dword [esp + 0xc]
call ecx
add esp, 0xc
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x54]
mov eax, dword [0xa3d11c]
mov ecx, dword [0xa3ce74]
sub ecx, dword [esp]
add ecx, eax
push 0x80b86cb7
push edi
push esi
push dword [esp + 0x18]
mov esi, dword [esp + 0x14]
push esi
call ecx
add esp, 0x14
mov ecx, dword [0xa3d120]
mov eax, dword [0xa3cdec]
sub eax, dword [esp]
add eax, ecx
push 0xb94e200d
push edi
mov edi, dword [esp + 0x18]
push esi
push ebx
push dword [esp + 0x18]
push dword [esp + 0x68]
push dword [esp + 0x68]
call eax
add esp, 0x1c
mov ebx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov eax, dword [0xa3d108]
mov ecx, dword [0xa3ce84]
sub ecx, dword [esp]
add ecx, eax
push 0xe1c672a1
lea eax, [esp + 0x63]
push eax
mov dword [esp + 0x24], edx
push edx
push ebx
push esi
call ecx
add esp, 0x14
cmp byte [esp + 0x5f], 0
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + edi]
mov eax, dword [eax + edi + 4]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
je 0x86bab0
mov eax, dword [0xa3d1b4]
mov ecx, dword [0xa3cf80]
sub ecx, dword [esp]
add ecx, eax
push 0x4fde131c
mov dword [esp + 0x28], ebx
mov ebx, esi
lea esi, [esp + 0x54]
push esi
push ebx
call ecx
add esp, 0xc
mov ecx, dword [0xa3d1d8]
mov eax, dword [0xa3ce40]
mov esi, dword [esp]
sub eax, esi
add eax, ecx
push 0x89ee6300
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
push ebx
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x34]
push dword [esp + 0x40]
call eax
add esp, 0x20
mov eax, dword [esp + 0x50]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x4c], eax
mov ecx, dword [0xa3cfb0]
mov eax, dword [0xa3cf10]
mov edi, esi
sub eax, esi
add eax, ecx
push 0xb69578f1
lea ebx, [esp + 0x6c]
push ebx
lea ecx, [esp + 0x68]
push ecx
lea esi, [esp + 0x5c]
push esi
push dword [esp + 0x14]
push dword [esp + 0x78]
push dword [esp + 0x78]
call eax
add esp, 0x1c
mov ecx, dword [0xa3d07c]
mov eax, dword [0xa3cd94]
sub eax, edi
add eax, ecx
push 0xe27c5175
push esi
push dword [esp + 0x54]
mov ebx, dword [esp + 0x10]
push dword [esp + 0x38]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x8c]
push dword [esp + 0x8c]
call eax
add esp, 0x28
mov ecx, dword [0xa3d0e8]
mov eax, dword [0xa3cf28]
sub eax, edi
add eax, ecx
push 0x9b52312c
lea ecx, [esp + 0x6c]
push ecx
lea esi, [esp + 0x68]
push esi
lea ecx, [esp + 0x5c]
push ecx
push ebx
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x28]
push dword [esp + 0x28]
call eax
add esp, 0x24
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov eax, dword [0xa3d180]
mov ecx, dword [0xa3cdb0]
sub ecx, edi
add ecx, eax
push 0xbac1d5b4
push esi
push ebx
push dword [esp + 0x6c]
push dword [esp + 0x78]
push dword [esp + 0x34]
call ecx
add esp, 0x18
mov eax, dword [esp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [0xa3cfbc]
mov ecx, dword [0xa3ceb0]
sub ecx, edi
add ecx, eax
push 0x1f991b11
push esi
push ebx
push dword [esp + 0x28]
push dword [esp + 0x34]
call ecx
add esp, 0x14
mov eax, dword [0xa3d140]
mov ecx, dword [0xa3ce9c]
sub ecx, edi
add ecx, eax
push 0x8e8fde65
lea eax, [esp + 0x6c]
push eax
push esi
mov esi, dword [esp + 0x1c]
push esi
push dword [esp + 0x70]
push ebx
call ecx
add esp, 0x18
mov eax, dword [0xa3cff0]
mov ecx, dword [0xa3cd7c]
sub ecx, edi
add ecx, eax
push 0xa1b308c5
lea eax, [esp + 0x64]
push eax
push dword [esp + 0x70]
push ebx
push dword [esp + 0x70]
push esi
call ecx
add esp, 0x18
mov ecx, dword [0xa3d12c]
mov eax, dword [0xa3cf68]
sub eax, edi
add eax, ecx
push 0xc054b5fd
lea edi, [esp + 0x6c]
push edi
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x6c]
push ecx
push dword [esp + 0x30]
mov esi, ebx
push dword [esp + 0x54]
push dword [esp + 0x78]
push ebx
call eax
add esp, 0x20
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x70]
add eax, dword [esp + 0x68]
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], 0
mov edx, edi
jmp 0x86bab4
lea edx, [esp + 0x68]
mov eax, dword [0xa3d02c]
mov ecx, dword [0xa3cd88]
mov edi, dword [esp]
sub ecx, edi
add ecx, eax
push 0xe8298b46
push edx
lea eax, [esp + 0x67]
push eax
push esi
call ecx
add esp, 0x10
movzx eax, byte [esp + 0x68]
movzx ecx, byte [esp + 0x5f]
mov edx, dword [0xa3d024]
mov esi, dword [0xa3cf54]
sub esi, edi
add esi, edx
push 0xa955d86f
push ecx
push eax
call esi
add esp, 0xc
test al, 1
je 0x86b470
mov ecx, dword [0xa3d020]
mov eax, dword [0xa3cd5c]
mov ebx, dword [esp]
sub eax, ebx
add eax, ecx
push 0xd3d2425c
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x10]
push ecx
mov esi, ecx
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push dword [esp + 0x2c]
mov edi, dword [esp + 0x34]
push edi
call eax
add esp, 0x20
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov eax, dword [0xa3d1a4]
mov ecx, dword [0xa3cedc]
sub ecx, ebx
add ecx, eax
push 0x707e435b
lea eax, [esp + 0x54]
push eax
push esi
push dword [esp + 0x70]
push dword [esp + 0x70]
call ecx
add esp, 0x14
mov ecx, dword [0xa3d19c]
mov eax, dword [0xa3cf24]
sub eax, ebx
add eax, ecx
push 0xf1f2f828
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
push esi
push dword [esp + 0x24]
mov esi, ebx
push edi
push dword [esp + 0x6c]
push dword [esp + 0x6c]
call eax
add esp, 0x20
mov ecx, dword [0xa3d03c]
mov eax, dword [0xa3cf88]
sub eax, ebx
add eax, ecx
push 0xf523aad5
lea ecx, [esp + 0x54]
push ecx
mov ebx, dword [esp + 0x10]
push ebx
mov edi, dword [esp + 0x18]
push edi
push dword [esp + 0x14]
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x80]
push dword [esp + 0x80]
call eax
add esp, 0x24
mov ecx, dword [0xa3d084]
mov eax, dword [0xa3cde0]
sub eax, esi
add eax, ecx
push 0xa57af351
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x5c]
push ecx
push ebx
push edi
push dword [esp + 0x6c]
push dword [esp + 0x6c]
call eax
add esp, 0x20
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x14], ecx
mov eax, dword [0xa3cfec]
mov dword [esp + 0x18], eax
mov eax, dword [0xa3ce4c]
mov ebx, esi
sub eax, esi
add eax, dword [esp + 0x18]
push 0xc664eab
lea esi, [esp + 0x64]
push esi
lea esi, [esp + 0x58]
push esi
push dword [esp + 0x14]
push edi
push dword [esp + 0x80]
push dword [esp + 0x80]
push ecx
push edx
mov edi, edx
push dword [esp + 0x88]
push dword [esp + 0x88]
call eax
add esp, 0x2c
mov ecx, dword [0xa3d1b0]
mov eax, dword [0xa3ce44]
sub eax, ebx
add eax, ecx
push 0xe1b36097
lea esi, [esp + 0x6c]
push esi
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x5c]
push ecx
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x2c]
push edi
push dword [esp + 0x28]
push dword [esp + 0x30]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call eax
add esp, 0x30
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
mov edi, dword [esp + 0x54]
mov ecx, dword [0xa3d144]
mov eax, dword [0xa3ce0c]
sub eax, ebx
add eax, ecx
push 0xe593c6ea
push esi
lea esi, [esp + 0x68]
push esi
lea ecx, [esp + 0x5c]
push ecx
push edi
push edx
push dword [esp + 0x84]
push dword [esp + 0x84]
push dword [esp + 0x84]
push dword [esp + 0x84]
call eax
add esp, 0x28
mov ecx, dword [0xa3d130]
mov eax, dword [0xa3cf58]
sub eax, ebx
add eax, ecx
push 0xb06f975c
push esi
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x10]
push dword [esp + 0x74]
push dword [esp + 0x74]
push edi
mov esi, dword [esp + 0x20]
push dword [esp + 0x24]
push dword [esp + 0x8c]
push dword [esp + 0x8c]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call eax
add esp, 0x30
mov eax, dword [esp + 0x50]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [0xa3d070]
mov ecx, dword [0xa3ceec]
sub ecx, ebx
add ecx, eax
push 0x8c71456f
lea edi, [esp + 0x6c]
push edi
lea eax, [esp + 0x68]
push eax
push esi
push dword [esp + 0x20]
push dword [esp + 0x74]
call ecx
add esp, 0x18
mov ecx, dword [0xa3cf98]
mov eax, dword [0xa3cf00]
sub eax, ebx
add eax, ecx
push 0xfc60eb3c
lea ecx, [esp + 0x74]
push ecx
push edi
lea ecx, [esp + 0x6c]
push ecx
push esi
push dword [esp + 0x7c]
push dword [esp + 0x78]
call eax
add esp, 0x1c
mov eax, dword [0xa3cfa4]
mov ecx, dword [0xa3cdb8]
sub ecx, ebx
add ecx, eax
push 0xf4887bee
push edi
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x74]
push dword [esp + 0x80]
push dword [esp + 0x74]
call ecx
add esp, 0x18
mov eax, dword [0xa3d1a0]
mov ecx, dword [0xa3cdf0]
sub ecx, ebx
add ecx, eax
push 0xaac391
lea eax, [esp + 0x63]
push eax
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x40]
push dword [esp + 0x70]
push dword [esp + 0x7c]
call ecx
add esp, 0x18
mov edx, dword [esp + 0x60]
cmp byte [esp + 0x5f], 0
je 0x86b4fe
lea esi, [esp + 0x50]
test byte [esp + 0x33], 1
jne 0x86cb51
mov eax, dword [esp + 0x3c]
add eax, 0xc
mov dword [esp + 0xc], eax
mov ecx, dword [0xa3cfac]
mov eax, dword [0xa3cf5c]
mov ebx, dword [esp]
sub eax, ebx
add eax, ecx
movzx ecx, byte [esp + 0x32]
push 0x5ad8c21f
lea edx, [esp + 0x74]
push edx
lea edx, [esp + 0x70]
push edx
lea edx, [esp + 0x6c]
push edx
mov edi, edx
push esi
push ecx
call eax
add esp, 0x18
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov ecx, dword [0xa3cfb4]
mov eax, dword [0xa3cd4c]
sub eax, ebx
add eax, ecx
push 0x60d6eb1e
push edi
push esi
push dword [esp + 0x70]
push dword [esp + 0x70]
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x88]
call eax
add esp, 0x24
mov eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x20], eax
mov edi, dword [esp + 0x64]
mov eax, dword [0xa3cfcc]
mov ecx, dword [0xa3cdac]
sub ecx, ebx
add ecx, eax
push 0x33d0b072
push esi
push dword [esp + 0xc]
call ecx
add esp, 0xc
mov eax, dword [0xa3d018]
mov ecx, dword [0xa3ce10]
sub ecx, ebx
add ecx, eax
push 0x61fe1a17
lea eax, [esp + 0x64]
push eax
push esi
push dword [esp + 0x10]
push dword [esp + 0x64]
push dword [esp + 0x64]
call ecx
add esp, 0x18
mov ecx, dword [0xa3d1c4]
mov eax, dword [0xa3ce60]
sub eax, ebx
add eax, ecx
push 0x98509eab
push esi
push edi
push dword [esp + 0x2c]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
call eax
add esp, 0x20
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x24], eax
mov eax, dword [0xa3cfc0]
mov ecx, dword [0xa3cea0]
sub ecx, ebx
add ecx, eax
push 0xd0f2748d
push esi
push dword [esp + 0xc]
call ecx
add esp, 0xc
mov eax, dword [0xa3d150]
mov ecx, dword [0xa3cd9c]
sub ecx, ebx
add ecx, eax
push 0x151ed622
lea edi, [esp + 0x64]
push edi
push esi
push dword [esp + 0x10]
push dword [esp + 0x64]
push dword [esp + 0x64]
call ecx
add esp, 0x18
mov ecx, dword [0xa3d0fc]
mov eax, dword [0xa3ce70]
sub eax, ebx
add eax, ecx
push 0x30f26d1a
push edi
push esi
push dword [esp + 0x10]
push dword [esp + 0x74]
push dword [esp + 0x74]
push dword [esp + 0x6c]
push dword [esp + 0x6c]
call eax
add esp, 0x20
mov ecx, dword [0xa3d088]
mov eax, dword [0xa3cf8c]
sub eax, ebx
add eax, ecx
push 0xe95a3591
push edi
push esi
push dword [esp + 0x10]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call eax
add esp, 0x20
mov ecx, dword [0xa3d17c]
mov eax, dword [0xa3cdc4]
sub eax, ebx
add eax, ecx
push 0x94e1fde
lea ecx, [esp + 0x6c]
push ecx
push edi
push esi
push dword [esp + 0x14]
push dword [esp + 0x38]
push dword [esp + 0x38]
push dword [esp + 0x70]
push dword [esp + 0x70]
push dword [esp + 0x88]
push dword [esp + 0x88]
call eax
add esp, 0x2c
mov ecx, dword [0xa3d0f0]
mov eax, dword [0xa3cdfc]
sub eax, ebx
add eax, ecx
push 0xe7384ee3
push edi
push esi
push dword [esp + 0x10]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x8c]
push dword [esp + 0x8c]
call eax
add esp, 0x28
mov ecx, dword [0xa3d0b8]
mov eax, dword [0xa3cdf8]
sub eax, ebx
add eax, ecx
push 0xa14418cd
push edi
push esi
push dword [esp + 0x28]
push dword [esp + 0x38]
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x80]
push dword [esp + 0x80]
call eax
add esp, 0x24
mov ecx, dword [0xa3d0bc]
mov eax, dword [0xa3cd50]
sub eax, ebx
add eax, ecx
push 0x6504f451
lea ecx, [esp + 0x6c]
push ecx
push edi
push esi
push dword [esp + 0x14]
push dword [esp + 0x78]
push dword [esp + 0x78]
push dword [esp + 0x70]
push dword [esp + 0x70]
call eax
add esp, 0x24
mov ecx, dword [0xa3d0c4]
mov eax, dword [0xa3cd44]
sub eax, ebx
add eax, ecx
push 0x975b6e5e
push edi
push esi
push dword [esp + 0x10]
push dword [esp + 0x64]
push dword [esp + 0x64]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x8c]
push dword [esp + 0x8c]
call eax
add esp, 0x28
mov eax, dword [0xa3d138]
mov ecx, dword [0xa3cefc]
sub ecx, ebx
add ecx, eax
push 0x40506716
push esi
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push dword [esp + 0x74]
push dword [esp + 0x74]
call ecx
add esp, 0x18
mov ecx, dword [0xa3d1d0]
mov eax, dword [0xa3cf40]
sub eax, ebx
add eax, ecx
push 0x85ad26bd
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x74]
push ecx
push edi
push esi
push dword [esp + 0x2c]
push dword [esp + 0x34]
push dword [esp + 0x28]
push dword [esp + 0x34]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call eax
add esp, 0x30
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
mov edi, dword [esp + 0x60]
mov dword [esp + 0x14], edi
mov esi, dword [esp + 0x64]
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x24], eax
mov eax, dword [0xa3d0c8]
mov ecx, dword [0xa3cf74]
sub ecx, ebx
add ecx, eax
push 0x8906b62
lea eax, [esp + 0x54]
push eax
push dword [esp + 0x84]
push dword [esp + 0x84]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call ecx
add esp, 0x18
mov eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x20], eax
mov ecx, dword [0xa3d174]
mov eax, dword [0xa3cdc8]
sub eax, ebx
add eax, ecx
push 0xd9a56d1c
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x30]
push dword [esp + 0x2c]
push esi
push edi
call eax
add esp, 0x1c
mov ecx, dword [0xa3cfa8]
mov eax, dword [0xa3cf20]
sub eax, ebx
add eax, ecx
push 0xb6b20b8c
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
mov esi, dword [esp + 0x14]
push esi
mov edi, dword [esp + 0x20]
push edi
push dword [esp + 0x34]
push dword [esp + 0x40]
push dword [esp + 0x80]
push dword [esp + 0x80]
push dword [esp + 0x78]
push dword [esp + 0x78]
call eax
add esp, 0x2c
mov eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov ecx, dword [0xa3cf90]
mov eax, dword [0xa3ce50]
sub eax, ebx
add eax, ecx
push 0x24582c67
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x60]
push ecx
push esi
push edi
push dword [esp + 0x80]
push dword [esp + 0x80]
call eax
add esp, 0x24
mov edx, dword [esp + 0x50]
mov dword [esp + 0x20], edx
mov edi, dword [esp + 0x54]
mov ecx, dword [0xa3cfc8]
mov eax, dword [0xa3cef4]
sub eax, ebx
add eax, ecx
push 0x26029c86
lea ecx, [esp + 0x64]
push ecx
lea esi, [esp + 0x58]
push esi
push edi
push edx
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x88]
push dword [esp + 0x88]
call eax
add esp, 0x2c
mov ecx, dword [0xa3d194]
mov eax, dword [0xa3cf7c]
sub eax, ebx
add eax, ecx
push 0x2d46adae
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x68]
push ecx
push esi
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x20]
push dword [esp + 0x2c]
push dword [esp + 0x38]
push dword [esp + 0x38]
push dword [esp + 0x8c]
push dword [esp + 0x8c]
push dword [esp + 0x84]
push dword [esp + 0x84]
push edi
push dword [esp + 0x5c]
call eax
add esp, 0x40
mov edx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
mov eax, dword [0xa3d010]
mov ecx, dword [0xa3ce54]
sub ecx, ebx
add ecx, eax
push 0x7a86f3c4
push esi
push dword [esp + 0x74]
push dword [esp + 0x74]
push edi
push edx
mov esi, edx
call ecx
add esp, 0x18
mov ecx, dword [0xa3d110]
mov eax, dword [0xa3ced4]
sub eax, ebx
add eax, ecx
push 0xfc569771
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x14]
push dword [esp + 0x20]
push edi
push esi
push dword [esp + 0x70]
push dword [esp + 0x70]
call eax
add esp, 0x24
mov eax, dword [0xa3d178]
mov ecx, dword [0xa3ce8c]
sub ecx, ebx
add ecx, eax
push 0xfdd0b2a7
lea eax, [esp + 0x54]
push eax
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x64]
push dword [esp + 0x64]
call ecx
add esp, 0x18
mov eax, dword [0xa3d034]
mov ecx, dword [0xa3cf50]
sub ecx, ebx
add ecx, eax
push 0x7d108d64
push dword [esp + 0x58]
push dword [esp + 0x58]
call ecx
add esp, 0xc
mov eax, dword [0xa3d05c]
mov ecx, dword [0xa3ceac]
sub ecx, ebx
add ecx, eax
push 0x2d5a5f83
lea eax, [esp + 0x63]
push eax
lea eax, [esp + 0x80]
push eax
lea edi, [esp + 0x7c]
push edi
push dword [esp + 0x4c]
push dword [esp + 0x20]
call ecx
add esp, 0x18
mov eax, dword [esp + 0x70]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x28], eax
movzx esi, byte [esp + 0x5f]
mov eax, dword [0xa3d1cc]
mov ecx, dword [0xa3ce14]
sub ecx, ebx
add ecx, eax
push 0x6e5e7e63
lea eax, [esp + 0x7c]
push eax
push edi
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x6f]
push eax
push esi
call ecx
add esp, 0x18
movzx eax, byte [esp + 0x70]
mov dword [esp + 0x10], eax
movzx ecx, byte [esp + 0x5f]
movzx edi, byte [esp + 0x78]
movzx ebx, byte [esp + 0x68]
mov eax, dword [0xa3d0e4]
mov edx, dword [0xa3cd70]
sub edx, dword [esp]
add edx, eax
push 0x400e734f
lea eax, [esp + 0x63]
push eax
push ebx
push edi
mov edi, dword [esp + 0x14]
push ecx
push esi
lea esi, [esp + 0x77]
push dword [esp + 0x28]
call edx
add esp, 0x1c
movzx eax, byte [esp + 0x5f]
mov ecx, dword [0xa3d098]
mov edx, dword [0xa3cf60]
sub edx, dword [esp]
add edx, ecx
push 0x13fd784a
push eax
push dword [esp + 0x30]
call edx
add esp, 0xc
test al, 1
je 0x86cb51
mov eax, dword [0xa3d134]
mov ecx, dword [0xa3cddc]
sub ecx, dword [esp]
add ecx, eax
push 0xe1832592
lea eax, [esp + 0x6c]
push eax
push esi
push dword [ebp + 0xc]
push dword [esp + 0x58]
call ecx
add esp, 0x14
movzx eax, byte [esp + 0x5f]
mov byte [esp + 0x2c], al
movzx eax, byte [esp + 0x68]
mov byte [esp + 0x34], al
xor edi, 0xf2c843ec
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], 0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
jmp 0x86c5de
mov edx, dword [esp + 0x10]
mov eax, dword [0xa3d04c]
mov ecx, dword [0xa3cdd8]
sub ecx, dword [esp]
add ecx, eax
mov dword [esp + 0x10], edx
movzx eax, dl
push 0xa987c06b
push eax
call ecx
add esp, 8
test al, 1
je 0x86cb51
mov eax, dword [0xa3d114]
mov ecx, dword [0xa3cee8]
sub ecx, dword [esp]
add ecx, eax
push 0x234dc6ff
push dword [esp + 0x1c]
mov esi, dword [esp + 0x44]
push esi
call ecx
add esp, 0xc
test al, 1
lea edx, [esp + 0x68]
jne 0x86c65b
mov ebx, edx
mov eax, dword [0xa3d10c]
mov ecx, dword [0xa3cec8]
mov edi, dword [esp]
sub ecx, edi
add ecx, eax
push dword [esp + 0x24]
call ecx
mov esi, eax
mov eax, dword [0xa3cfc4]
mov ecx, dword [0xa3ce38]
sub ecx, edi
add ecx, eax
push 0x8efd792e
push esi
call ecx
add esp, 8
test al, 1
jne 0x86cb51
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov edx, ebx
mov dword [esp + 0x3c], esi
mov eax, dword [0xa3d1dc]
mov ecx, dword [0xa3ce18]
mov ebx, dword [esp]
sub ecx, ebx
add ecx, eax
push 0xdebe55b5
lea edi, [esp + 0x7c]
push edi
push edx
mov edi, edx
call ecx
add esp, 0xc
movzx eax, byte [esp + 0x78]
movzx ecx, byte [esp + 0x68]
mov edx, dword [0xa3cffc]
mov esi, dword [0xa3cef0]
sub esi, ebx
add esi, edx
push 0xeb0eef31
lea edx, [esp + 0x7c]
push edx
push edi
push ecx
push eax
call esi
add esp, 0x14
movzx eax, byte [esp + 0x68]
movzx ecx, byte [esp + 0x78]
mov edx, dword [0xa3d038]
mov edi, dword [0xa3ce88]
sub edi, ebx
add edi, edx
movzx esi, byte [esp + 0x10]
push 0x2052363c
push esi
push ecx
push eax
call edi
add esp, 0x10
test al, 1
je 0x86c5b0
mov eax, dword [0xa3d090]
mov ecx, dword [0xa3cde8]
mov edi, dword [esp]
sub ecx, edi
add ecx, eax
push 0x7bc11a0
lea ebx, [esp + 0x74]
push ebx
lea eax, [esp + 0x70]
push eax
push esi
push dword [esp + 0x38]
mov esi, dword [esp + 0x28]
push esi
call ecx
add esp, 0x18
movzx eax, byte [esp + 0x68]
mov byte [esp + 0x1c], al
mov eax, dword [0xa3d0cc]
mov ecx, dword [0xa3ce48]
sub ecx, edi
add ecx, eax
push 0x4bb13818
push dword [esp + 0x4c]
push dword [esp + 0x78]
call ecx
add esp, 0xc
test al, 1
mov edi, dword [esp + 4]
je 0x86c750
lea edi, [esp + 0x68]
mov edx, ebx
jmp 0x86c7e9
mov eax, dword [0xa3cf94]
mov ecx, dword [0xa3cd68]
sub ecx, dword [esp]
add ecx, eax
push 0x1a63632a
lea eax, [esp + 0x64]
push eax
push ebx
push esi
call ecx
add esp, 0x10
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x60]
test al, 1
mov esi, dword [ebp + 8]
je 0x86c79b
mov eax, dword [0xa3d0a8]
mov edx, dword [0xa3cf4c]
sub edx, dword [esp]
add edx, eax
push 0xd9ef0894
jmp 0x86c7b0
mov eax, dword [0xa3d058]
mov edx, dword [0xa3cee0]
sub edx, dword [esp]
add edx, eax
push 0x85712a7b
push ecx
call edx
add esp, 8
test al, 1
je 0x86c7e1
test byte [esp + 0x2c], 1
je 0x86c848
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x18]
mov byte [esp + 0x1c], 1
test byte [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x86c7e1
mov eax, dword [ebp + 0xc]
mov dword [eax], ecx
lea edi, [esp + 0x68]
lea edx, [esp + 0x70]
lea esi, [esp + 0x5f]
mov eax, dword [0xa3d094]
mov ecx, dword [0xa3cdb4]
mov ebx, dword [esp]
sub ecx, ebx
add ecx, eax
push 0x9d1b5075
push edx
push esi
push dword [esp + 0x20]
call ecx
add esp, 0x10
mov eax, dword [esp + 0x70]
mov dword [esp + 0x14], eax
movzx eax, byte [esp + 0x5f]
mov ecx, dword [0xa3cff4]
mov edx, dword [0xa3cde4]
sub edx, ebx
add edx, ecx
movzx ecx, byte [esp + 0x1c]
push 0xee054442
push edi
push ecx
push eax
call edx
add esp, 0x10
movzx edx, byte [esp + 0x68]
jmp 0x86c5b4
xor edx, edx
jmp 0x86c88a
mov eax, dword [0xa3cff8]
mov ecx, dword [0xa3cd64]
sub ecx, dword [esp]
add ecx, eax
push 0x20235deb
lea eax, [esp + 0x64]
push eax
push dword [esp + 0x4c]
push dword [esp + 0x1c]
call ecx
add esp, 0x10
mov edx, dword [esp + 0x60]
test al, 1
mov esi, dword [ebp + 8]
mov edi, dword [esp + 4]
jne 0x86c7c5
mov ecx, dword [0xa3d064]
mov eax, dword [0xa3cec4]
mov ebx, dword [esp]
sub eax, ebx
add eax, ecx
push 0xbf2c66ce
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x74]
push ecx
push edi
mov dword [esp + 0x24], edx
push edx
push esi
call eax
add esp, 0x1c
movzx eax, word [esp + 0x78]
mov dword [esp + 0xc], eax
movzx ecx, word [esp + 0x70]
mov eax, ebx
movzx ebx, word [esp + 0x68]
mov esi, dword [0xa3d0d8]
mov edx, dword [0xa3cf04]
sub edx, eax
add edx, esi
push 0x75a0b69f
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x74]
push eax
push ebx
mov esi, ebx
push ecx
push edi
push dword [esp + 0x28]
call edx
add esp, 0x20
movzx eax, word [esp + 0x68]
movzx ecx, word [esp + 0x78]
movzx edx, word [esp + 0x70]
mov dword [esp + 0xc], edx
mov edx, dword [0xa3d15c]
mov ebx, dword [0xa3ce20]
sub ebx, dword [esp]
add ebx, edx
push 0xb85a4762
lea edi, [esp + 0x6c]
push edi
push ecx
push esi
mov dword [esp + 0x18], esi
push eax
call ebx
add esp, 0x14
movzx eax, word [esp + 0x68]
mov edx, dword [0xa3d074]
mov ecx, dword [0xa3ced8]
sub ecx, dword [esp]
add ecx, edx
push 0x84a8b942
lea edx, [esp + 0x7c]
push edx
lea edx, [esp + 0x78]
push edx
push edi
mov edi, dword [esp + 0x14]
push edi
push esi
push dword [esp + 0x24]
push eax
call ecx
add esp, 0x20
movzx eax, word [esp + 0x78]
movzx ecx, word [esp + 0x70]
movzx edx, word [esp + 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [0xa3d188]
mov ebx, dword [0xa3ce5c]
sub ebx, dword [esp]
add ebx, edx
push 0xdc55860a
lea esi, [esp + 0x74]
push esi
lea edx, [esp + 0x70]
push edx
push edi
push ecx
push eax
call ebx
add esp, 0x18
movzx eax, word [esp + 0x68]
movzx ecx, word [esp + 0x70]
mov edx, dword [0xa3d1a8]
mov ebx, dword [0xa3cdcc]
sub ebx, dword [esp]
add ebx, edx
push 0x392b0e9f
push esi
lea edx, [esp + 0x70]
push edx
push edi
push ecx
push eax
call ebx
add esp, 0x18
movzx eax, word [esp + 0x70]
movzx edx, word [esp + 0x68]
mov ebx, dword [0xa3cfe8]
mov ecx, dword [0xa3ce64]
sub ecx, dword [esp]
add ecx, ebx
mov ebx, dword [esp]
push 0xc74c7b18
push esi
lea esi, [esp + 0x70]
push esi
push edi
push edx
push eax
push dword [esp + 0x24]
call ecx
add esp, 0x1c
movzx eax, word [esp + 0x70]
movzx ecx, word [esp + 0x68]
mov edx, dword [0xa3d0f4]
mov esi, dword [0xa3cd58]
sub esi, ebx
add esi, edx
push 0xfe90e9cf
lea edx, [esp + 0x6c]
push edx
lea edx, [esp + 0x67]
push edx
push edi
push ecx
push eax
call esi
add esp, 0x18
movzx eax, word [esp + 0x68]
movzx ecx, byte [esp + 0x5f]
mov edx, dword [0xa3d160]
mov esi, dword [0xa3cf48]
sub esi, ebx
lea edi, [esp + 0x68]
add esi, edx
push 0x3d28c5d9
push edi
push ecx
push dword [esp + 0x14]
push eax
call esi
add esp, 0x14
test al, 1
jne 0x86c850
movzx eax, word [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
movzx edx, word [eax + ecx*2]
mov dword [esp + 0xc], edx
mov eax, dword [0xa3d148]
mov ecx, dword [0xa3cd90]
mov ebx, dword [esp]
sub ecx, ebx
add ecx, eax
push 0xf36e6306
push edi
mov edi, dword [esp + 0xc]
push edi
push edx
push edi
call ecx
add esp, 0x14
movzx eax, word [esp + 0x68]
mov ecx, dword [0xa3cfdc]
mov edx, dword [0xa3cdbc]
sub edx, ebx
add edx, ecx
push 0x688ee9ae
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x70]
push ecx
push eax
push edi
call edx
add esp, 0x14
movzx eax, word [esp + 0x70]
movzx ecx, word [esp + 0x68]
mov edx, dword [0xa3d078]
mov esi, dword [0xa3cebc]
sub esi, ebx
add esi, edx
push 0x4be2cd5c
lea edx, [esp + 0x6c]
push edx
lea edx, [esp + 0x67]
push edx
push edi
lea edi, [esp + 0x78]
push ecx
push eax
call esi
add esp, 0x18
movzx eax, word [esp + 0x68]
movzx ecx, byte [esp + 0x5f]
mov edx, dword [0xa3d168]
mov esi, dword [0xa3ce78]
sub esi, ebx
add esi, edx
push 0x734b7db3
push dword [esp + 0xc]
push ecx
push eax
push dword [esp + 0x1c]
call esi
add esp, 0x14
test al, 1
jne 0x86c850
jmp 0x86c7e5
mov ecx, dword [esp + 0x80]
xor ecx, ebp
call fcn.008ea1d3
mov eax, dword [esp + 0x38]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8