Function at 0x446580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xa3c93c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x447645
sub esp, 0xa8
mov eax, dword [0xa3c93c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x7c], eax
jmp 0x4465b6
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xa4], ecx
lea edx, [0x9fed94]
mov dword [esp], edx
call fcn.004062a0
movzx eax, byte [esp + 4]
test al, al
je 0x4465e2
call fcn.00446310
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
mov eax, dword [esp + 0xa4]
test byte [eax], al
mov ecx, dword [eax + 0x11a0]
test ecx, ecx
je 0x446601
call fcn.00444810
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00448840
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x40], ebx
lea ebp, [0xa3c7b0]
mov dword [esp], ebp
call fcn.00406930
mov eax, dword [esp + 4]
test eax, eax
je 0x446656
mov eax, 1
jmp 0x44666f
nop
lea eax, [0xa3c7b8]
mov dword [esp], eax
call fcn.004062a0
movzx eax, byte [esp + 4]
test al, al
setne al
test al, al
je 0x446683
call fcn.0045f030
mov eax, dword [esp]
test eax, eax
jne 0x44752f
mov eax, dword [0xa3c83c]
test eax, eax
jne 0x446697
mov ebx, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
jmp 0x4466d4
lea eax, [0xa3d5a0]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0xc], edx
call fcn.00426c60
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x447511
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 0xa4]
mov edx, dword [eax + 0xc]
imul edx, edx, 0xc10c9715
cmp edx, 0x4325c53
ja 0x44674f
mov edx, dword [0x9fed5c]
test edx, edx
jle 0x44674f
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040ee10
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0044e370
mov eax, dword [esp + 8]
mov dword [esp + 0x94], eax
nop
nop
lea ecx, [0x9fed18]
mov dword [esp], ecx
call fcn.0040f030
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x447052
lea eax, [0xa3c824]
mov dword [esp], eax
call fcn.004068b0
mov eax, dword [esp + 4]
and eax, 0xc
cmp eax, 0xc
jne 0x4467b3
lea eax, [0xa3c824]
mov dword [esp], eax
mov dword [esp + 4], 0xd
mov dword [esp + 8], 1
call fcn.004068d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x446798
mov eax, dword [0x9fc7bc]
jmp 0x44679a
xor eax, eax
test eax, eax
je 0x4467b3
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.00442830
mov eax, dword [0x9f1110]
mov eax, dword [eax]
test eax, eax
je 0x4467cf
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00470960
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.0044ee20
mov eax, dword [esp + 4]
test eax, eax
jne 0x4474ef
mov eax, dword [0x9fed5c]
test eax, eax
je 0x446845
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040ee10
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0044e370
mov eax, dword [esp + 8]
mov dword [esp + 0x90], eax
nop
nop
lea ecx, [0x9fed18]
mov dword [esp], ecx
call fcn.0040f030
mov eax, dword [esp + 0x90]
test eax, eax
jne 0x4474d1
lea eax, [0xa3c860]
mov dword [esp], eax
call fcn.004068b0
mov eax, dword [esp + 4]
test eax, eax
jne 0x44685f
xor ecx, ecx
jmp 0x44689b
lea eax, [0xa3c864]
mov dword [esp], eax
call fcn.004068b0
mov eax, dword [esp + 4]
test eax, eax
ja 0x446879
xor ecx, ecx
jmp 0x44689b
lea eax, [0x9fed08]
mov dword [esp], eax
call fcn.004069a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x4468c7
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00439c50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x48], eax
test eax, eax
jne 0x4473f1
mov eax, dword [esp + 0x7c]
movzx ecx, byte [eax + 0x88]
test cl, cl
je 0x4468dd
mov ecx, 1
jmp 0x44691c
lea eax, [0x9fed4c]
mov dword [esp], eax
call fcn.00406990
mov eax, dword [esp + 4]
shl eax, 1
mov dword [esp + 0x68], eax
lea ecx, [0x9fed48]
mov dword [esp], ecx
call fcn.00406990
mov eax, dword [0xa3c8c4]
sub eax, dword [esp + 4]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
setg al
mov ecx, eax
mov eax, dword [esp + 0x7c]
test cl, cl
jne 0x446935
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
jmp 0x4469e5
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x446948
mov dword [esp], eax
call fcn.004427d0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.00447780
mov eax, dword [esp + 8]
test eax, eax
jne 0x4473cf
movzx eax, byte [esp + 0x20]
test al, al
je 0x44697a
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
setne dl
test ecx, ecx
setne bl
or edx, ebx
test dl, dl
je 0x4469d5
mov edx, dword [esp + 0x38]
test edx, edx
sete bl
mov ebp, dword [esp + 0x34]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4469dd
cmp ecx, edx
setl bl
xchg esi, ebx
sete bl
xchg esi, ebx
cmp eax, ebp
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4469dd
mov ecx, edx
mov eax, ebp
jmp 0x4469dd
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
mov edx, dword [0xa3c83c]
test edx, edx
jne 0x446a03
xor edx, edx
jmp 0x446a54
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.0041fd80
movzx eax, byte [esp + 4]
test al, al
jne 0x446a2f
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
xor edx, edx
jmp 0x446a54
lea eax, [0xa3d5a0]
mov dword [esp], eax
call fcn.00428160
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
mov edx, eax
mov eax, dword [esp + 0x34]
test dl, dl
je 0x446a80
lea eax, [0xa3c990]
mov dword [esp], eax
call fcn.0040ecd0
mov eax, dword [esp + 4]
test eax, eax
jne 0x447314
lea eax, [0xa3d5a0]
mov dword [esp], eax
call fcn.00428280
mov eax, dword [0x9fcc70]
mov dword [esp + 0x9c], eax
mov ecx, dword [0x9fcc74]
mov dword [esp + 0x5c], ecx
mov edx, dword [0x9fcc78]
mov dword [esp + 0x60], edx
mov ebx, dword [0x9fcc80]
mov dword [esp + 0x80], ebx
mov ebp, dword [0x9fcc84]
mov dword [esp + 0x4c], ebp
mov esi, dword [0x9fcc88]
mov dword [esp + 0x50], esi
mov edi, dword [0x9fcc90]
mov dword [esp + 0x6c], edi
mov edi, dword [0x9fcc94]
mov dword [esp + 0x2c], edi
mov edi, dword [0x9fcc98]
mov dword [esp + 0x30], edi
nop
nop
lea edi, [0x9fed18]
mov dword [esp], edi
call fcn.0040ee10
lea eax, [0x9fed94]
mov dword [esp], eax
call fcn.004062a0
movzx eax, byte [esp + 4]
test al, al
jne 0x446b18
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x11a0]
test ecx, ecx
je 0x446b31
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040f030
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
mov ecx, dword [0x9fed5c]
test ecx, ecx
jne 0x4472c4
mov ecx, dword [esp + 0x7c]
movzx edx, byte [ecx + 0x88]
test dl, dl
je 0x446b52
xor edx, edx
jmp 0x446b75
lea eax, [0x9fed50]
mov dword [esp], eax
call fcn.004068b0
cmp dword [esp + 4], 1
sete al
mov ecx, dword [esp + 0x7c]
mov edx, eax
mov eax, dword [esp + 0xa4]
test dl, dl
je 0x446b9a
mov dword [esp], ecx
call fcn.004427d0
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040f030
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
call fcn.0044c5a0
mov eax, dword [esp + 0xa4]
cmp dword [esp], eax
jne 0x44762e
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], eax
call fcn.0044e610
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
nop
nop
lea edx, [0x9fed18]
mov dword [esp], edx
call fcn.0040f030
mov eax, dword [esp + 0x7c]
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x2b], cl
test cl, cl
jne 0x446c07
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
jmp 0x446d3c
mov byte [eax + 0x88], 0
lea ecx, [0x9fed4c]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.004069b0
mov eax, dword [esp + 8]
test eax, eax
jl 0x447618
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040ee10
mov eax, dword [0x9fed5c]
test eax, eax
je 0x446c6a
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.0044e900
mov eax, dword [esp + 8]
test eax, eax
jne 0x447250
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040f030
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x14], ebx
call fcn.00447d40
mov eax, dword [esp + 0x18]
test eax, eax
je 0x446cd9
mov dword [esp], eax
call fcn.0044c3a0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004427d0
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
call fcn.00447f60
mov eax, dword [esp]
test eax, eax
jne 0x447182
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
call fcn.00447e40
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edx
lea eax, [0xa3c860]
mov dword [esp], eax
call fcn.004068b0
mov eax, dword [esp + 4]
test eax, eax
jne 0x446d66
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
xor ecx, ecx
jmp 0x446dd4
lea eax, [0xa3c864]
mov dword [esp], eax
call fcn.004068b0
mov eax, dword [esp + 4]
test eax, eax
ja 0x446d94
mov eax, dword [esp + 0x38]
test eax, eax
setne cl
mov edx, dword [esp + 0x34]
test edx, edx
setne bl
or ecx, ebx
test cl, cl
je 0x446dd2
lea eax, [0x9fed08]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00406a90
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
test eax, eax
setne al
or eax, ecx
mov edx, dword [esp + 0x34]
mov ecx, eax
mov eax, dword [esp + 0x38]
jmp 0x446dd4
xor ecx, ecx
test cl, cl
jne 0x446e6b
test eax, eax
setne cl
test edx, edx
setne bl
or ecx, ebx
test cl, cl
jne 0x446df0
xor ecx, ecx
jmp 0x446e11
lea eax, [0xa3c860]
mov dword [esp], eax
call fcn.004068b0
mov eax, dword [esp + 4]
test eax, eax
setne al
mov edx, dword [esp + 0x34]
mov ecx, eax
mov eax, dword [esp + 0x38]
test cl, cl
je 0x447174
nop
lea eax, [0x9fed10]
mov dword [esp], eax
call fcn.004069a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test ecx, ecx
sete dl
test eax, eax
sete bl
and ebx, edx
test bl, bl
jne 0x446e61
mov edx, dword [esp + 0x38]
cmp edx, ecx
setl cl
sete dl
mov ebx, dword [esp + 0x34]
cmp ebx, eax
setb al
and edx, eax
or edx, ecx
test dl, dl
je 0x447174
call fcn.00439b50
jmp 0x447174
nop
lea ecx, [0x9fed10]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00406960
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x447602
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x4475ec
mov ecx, dword [esp + 0x34]
test ecx, ecx
setne dl
mov ebx, dword [esp + 0x38]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x446f0b
mov edx, dword [esp + 0x40]
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x3c]
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, ebp
xchg edi, eax
test al, al
xchg edi, eax
je 0x446efd
nop
call fcn.00471a80
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0x38]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x34]
sub ecx, esi
sbb ebx, edx
test ebx, ebx
jge 0x446f15
xor ebx, ebx
xor ecx, ecx
jmp 0x446f15
mov ebx, 0xffffffff
mov ecx, 0xffffffff
mov edx, dword [0xa3c998]
mov ebp, dword [0xa3c99c]
test edx, edx
setne dl
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x446f3b
xor ebx, ebx
xor ecx, ecx
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00439c50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x44], eax
nop
call fcn.00471a80
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x40], ecx
nop
lea edx, [0x9fed10]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00406960
nop
lea eax, [0x9fed08]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], ecx
call fcn.00406960
mov eax, dword [0xa3c998]
mov ecx, dword [0xa3c99c]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x446fdc
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x446fdc
call fcn.004457c0
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040ee10
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.0044e790
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
nop
nop
lea ecx, [0x9fed18]
mov dword [esp], ecx
call fcn.0040f030
mov eax, dword [esp + 0x70]
test eax, eax
je 0x44714c
mov dword [esp], eax
call fcn.0044c3a0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x447070
movzx eax, byte [esp + 0x2b]
test al, al
je 0x4465b2
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004427d0
jmp 0x4465b2
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0xa4], eax
nop
nop
test eax, eax
je 0x447084
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x44], ecx
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00448290
nop
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4470ac
nop
lea ecx, [0xa3c864]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00406a20
call fcn.00460240
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.004430b0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x447127
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00461370
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00460350
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00448290
nop
mov eax, dword [esp + 0x54]
test eax, eax
je 0x447174
nop
lea ecx, [0xa3c864]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00406a20
call fcn.004457c0
mov eax, dword [esp + 0x7c]
jmp 0x4465b6
mov dword [esp + 0x74], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x84], eax
call fcn.0044c3a0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004427d0
mov eax, dword [esp + 0x74]
mov dword [eax + 0x970], 3
call fcn.00460240
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0x84]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.004430b0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x44722b
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x84]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00461370
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00460350
mov eax, dword [esp + 0x84]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0x78], eax
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0044e370
mov eax, dword [esp + 8]
test eax, eax
je 0x4475d6
mov dword [esp + 0x88], eax
nop
nop
lea eax, [0x9fed18]
mov dword [esp], eax
call fcn.0040f030
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.0044c3a0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004427d0
mov eax, dword [esp + 0x88]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0044e370
mov eax, dword [esp + 8]
mov dword [esp + 0x8c], eax
nop
nop
lea ecx, [0x9fed18]
mov dword [esp], ecx
call fcn.0040f030
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov ecx, dword [esp + 0xa4]
mov dword [ecx + 0x970], 3
mov eax, dword [eax + 0xc]
mov dword [esp + 0xa4], eax
call fcn.00460240
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.004430b0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4473aa
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00461370
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00460350
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
movzx ecx, byte [esp + 0xc]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], cl
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0x58], ecx
mov dword [esp + 0xa4], eax
nop
nop
test eax, eax
je 0x447409
mov edx, dword [eax + 0x58]
mov dword [esp + 0x48], edx
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.00448290
nop
mov eax, dword [esp + 0x58]
test eax, eax
je 0x447431
nop
lea ecx, [0xa3c864]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00406a20
call fcn.00460240
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.004430b0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4474ac
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00461370
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00460350
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
movzx ecx, byte [esp + 8]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], cl
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 1
add esp, 0xa8
ret
mov dword [esp + 0x98], eax
call fcn.00460240
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.004430b0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4475b1
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.00461370
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.00460350
mov eax, dword [esp + 0x98]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 1
add esp, 0xa8
ret
lea eax, [0x7970bb]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0043e5b0
lea eax, [0x794674]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0043e5b0
lea eax, [0x790e5a]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0043e5b0
lea eax, [0x793715]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0043e5b0
lea eax, [0x78cfee]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0043e5b0
nop
call fcn.0046f8d0
jmp fcn.00446580