Function at 0x440900
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x6816e0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x4419c5
sub esp, 0xa8
mov eax, dword [0x6816e0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x7c], eax
jmp 0x440936
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xa4], ecx
lea edx, [0x643b74]
mov dword [esp], edx
call fcn.004029e0
movzx eax, byte [esp + 4]
test al, al
je 0x440962
call fcn.00440690
mov eax, dword [esp + 0x7c]
jmp 0x440936
mov eax, dword [esp + 0xa4]
test byte [eax], al
mov ecx, dword [eax + 0x11a0]
test ecx, ecx
je 0x440981
call fcn.0043eb90
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00442bc0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x40], ebx
lea ebp, [0x681590]
mov dword [esp], ebp
call fcn.00402ab0
mov eax, dword [esp + 4]
test eax, eax
je 0x4409d6
mov eax, 1
jmp 0x4409ef
nop
lea eax, [0x681598]
mov dword [esp], eax
call fcn.004029e0
movzx eax, byte [esp + 4]
test al, al
setne al
test al, al
je 0x440a03
call fcn.00458f20
mov eax, dword [esp]
test eax, eax
jne 0x4418af
mov eax, dword [0x681614]
test eax, eax
jne 0x440a17
mov ebx, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
jmp 0x440a54
lea eax, [0x682000]
mov dword [esp], eax
mov ecx, dword [esp + 0xa4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0xc], edx
call fcn.00421720
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x441891
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 0xa4]
mov edx, dword [eax + 0xc]
imul edx, edx, 0xc10c9715
cmp edx, 0x4325c53
ja 0x440acf
mov edx, dword [0x643b3c]
test edx, edx
jle 0x440acf
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040abd0
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004486f0
mov eax, dword [esp + 8]
mov dword [esp + 0x94], eax
nop
nop
lea ecx, [0x643af8]
mov dword [esp], ecx
call fcn.0040adf0
mov eax, dword [esp + 0x94]
test eax, eax
jne 0x4413d2
lea eax, [0x6815fc]
mov dword [esp], eax
call fcn.00402a30
mov eax, dword [esp + 4]
and eax, 0xc
cmp eax, 0xc
jne 0x440b33
lea eax, [0x6815fc]
mov dword [esp], eax
mov dword [esp + 4], 0xd
mov dword [esp + 8], 1
call fcn.00402a50
movzx eax, byte [esp + 0xc]
test al, al
je 0x440b18
mov eax, dword [0x642764]
jmp 0x440b1a
xor eax, eax
test eax, eax
je 0x440b33
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.0043cbb0
mov eax, dword [0x63e628]
mov eax, dword [eax]
test eax, eax
je 0x440b4f
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00469010
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.004491a0
mov eax, dword [esp + 4]
test eax, eax
jne 0x44186f
mov eax, dword [0x643b3c]
test eax, eax
je 0x440bc5
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040abd0
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004486f0
mov eax, dword [esp + 8]
mov dword [esp + 0x90], eax
nop
nop
lea ecx, [0x643af8]
mov dword [esp], ecx
call fcn.0040adf0
mov eax, dword [esp + 0x90]
test eax, eax
jne 0x441851
lea eax, [0x681638]
mov dword [esp], eax
call fcn.00402a30
mov eax, dword [esp + 4]
test eax, eax
jne 0x440bdf
xor ecx, ecx
jmp 0x440c1b
lea eax, [0x68163c]
mov dword [esp], eax
call fcn.00402a30
mov eax, dword [esp + 4]
test eax, eax
ja 0x440bf9
xor ecx, ecx
jmp 0x440c1b
lea eax, [0x643ae8]
mov dword [esp], eax
call fcn.00402b20
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x440c47
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00434210
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x48], eax
test eax, eax
jne 0x441771
mov eax, dword [esp + 0x7c]
movzx ecx, byte [eax + 0x88]
test cl, cl
je 0x440c5d
mov ecx, 1
jmp 0x440c9c
lea eax, [0x643b2c]
mov dword [esp], eax
call fcn.00402b10
mov eax, dword [esp + 4]
shl eax, 1
mov dword [esp + 0x68], eax
lea ecx, [0x643b28]
mov dword [esp], ecx
call fcn.00402b10
mov eax, dword [0x68169c]
sub eax, dword [esp + 4]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
setg al
mov ecx, eax
mov eax, dword [esp + 0x7c]
test cl, cl
jne 0x440cb5
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
jmp 0x440d65
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x440cc8
mov dword [esp], eax
call fcn.0043cb50
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.00441b00
mov eax, dword [esp + 8]
test eax, eax
jne 0x44174f
movzx eax, byte [esp + 0x20]
test al, al
je 0x440cfa
mov eax, dword [esp + 0x7c]
jmp 0x440936
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
setne dl
test ecx, ecx
setne bl
or edx, ebx
test dl, dl
je 0x440d55
mov edx, dword [esp + 0x38]
test edx, edx
sete bl
mov ebp, dword [esp + 0x34]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x440d5d
cmp ecx, edx
setl bl
xchg esi, ebx
sete bl
xchg esi, ebx
cmp eax, ebp
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x440d5d
mov ecx, edx
mov eax, ebp
jmp 0x440d5d
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
mov edx, dword [0x681614]
test edx, edx
jne 0x440d83
xor edx, edx
jmp 0x440dd4
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
call fcn.0041a840
movzx eax, byte [esp + 4]
test al, al
jne 0x440daf
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
xor edx, edx
jmp 0x440dd4
lea eax, [0x682000]
mov dword [esp], eax
call fcn.00422c20
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
mov edx, eax
mov eax, dword [esp + 0x34]
test dl, dl
je 0x440e00
lea eax, [0x681740]
mov dword [esp], eax
call fcn.0040aa90
mov eax, dword [esp + 4]
test eax, eax
jne 0x441694
lea eax, [0x682000]
mov dword [esp], eax
call fcn.00422d40
mov eax, dword [0x642990]
mov dword [esp + 0x9c], eax
mov ecx, dword [0x642994]
mov dword [esp + 0x5c], ecx
mov edx, dword [0x642998]
mov dword [esp + 0x60], edx
mov ebx, dword [0x6429a0]
mov dword [esp + 0x80], ebx
mov ebp, dword [0x6429a4]
mov dword [esp + 0x4c], ebp
mov esi, dword [0x6429a8]
mov dword [esp + 0x50], esi
mov edi, dword [0x6429b0]
mov dword [esp + 0x6c], edi
mov edi, dword [0x6429b4]
mov dword [esp + 0x2c], edi
mov edi, dword [0x6429b8]
mov dword [esp + 0x30], edi
nop
nop
lea edi, [0x643af8]
mov dword [esp], edi
call fcn.0040abd0
lea eax, [0x643b74]
mov dword [esp], eax
call fcn.004029e0
movzx eax, byte [esp + 4]
test al, al
jne 0x440e98
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 0x11a0]
test ecx, ecx
je 0x440eb1
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040adf0
mov eax, dword [esp + 0x7c]
jmp 0x440936
mov ecx, dword [0x643b3c]
test ecx, ecx
jne 0x441644
mov ecx, dword [esp + 0x7c]
movzx edx, byte [ecx + 0x88]
test dl, dl
je 0x440ed2
xor edx, edx
jmp 0x440ef5
lea eax, [0x643b30]
mov dword [esp], eax
call fcn.00402a30
cmp dword [esp + 4], 1
sete al
mov ecx, dword [esp + 0x7c]
mov edx, eax
mov eax, dword [esp + 0xa4]
test dl, dl
je 0x440f1a
mov dword [esp], ecx
call fcn.0043cb50
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040adf0
mov eax, dword [esp + 0x7c]
jmp 0x440936
call fcn.00446920
mov eax, dword [esp + 0xa4]
cmp dword [esp], eax
jne 0x4419ae
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], eax
call fcn.00448990
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
nop
nop
lea edx, [0x643af8]
mov dword [esp], edx
call fcn.0040adf0
mov eax, dword [esp + 0x7c]
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x2b], cl
test cl, cl
jne 0x440f87
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
jmp 0x4410bc
mov byte [eax + 0x88], 0
lea ecx, [0x643b2c]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.00402b30
mov eax, dword [esp + 8]
test eax, eax
jl 0x441998
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040abd0
mov eax, dword [0x643b3c]
test eax, eax
je 0x440fea
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00448c80
mov eax, dword [esp + 8]
test eax, eax
jne 0x4415d0
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040adf0
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x14], ebx
call fcn.004420c0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441059
mov dword [esp], eax
call fcn.00446720
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0043cb50
mov eax, dword [esp + 0x7c]
jmp 0x440936
call fcn.004422e0
mov eax, dword [esp]
test eax, eax
jne 0x441502
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
call fcn.004421c0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edx
lea eax, [0x681638]
mov dword [esp], eax
call fcn.00402a30
mov eax, dword [esp + 4]
test eax, eax
jne 0x4410e6
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
xor ecx, ecx
jmp 0x441154
lea eax, [0x68163c]
mov dword [esp], eax
call fcn.00402a30
mov eax, dword [esp + 4]
test eax, eax
ja 0x441114
mov eax, dword [esp + 0x38]
test eax, eax
setne cl
mov edx, dword [esp + 0x34]
test edx, edx
setne bl
or ecx, ebx
test cl, cl
je 0x441152
lea eax, [0x643ae8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00402c10
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
test eax, eax
setne al
or eax, ecx
mov edx, dword [esp + 0x34]
mov ecx, eax
mov eax, dword [esp + 0x38]
jmp 0x441154
xor ecx, ecx
test cl, cl
jne 0x4411eb
test eax, eax
setne cl
test edx, edx
setne bl
or ecx, ebx
test cl, cl
jne 0x441170
xor ecx, ecx
jmp 0x441191
lea eax, [0x681638]
mov dword [esp], eax
call fcn.00402a30
mov eax, dword [esp + 4]
test eax, eax
setne al
mov edx, dword [esp + 0x34]
mov ecx, eax
mov eax, dword [esp + 0x38]
test cl, cl
je 0x4414f4
nop
lea eax, [0x643af0]
mov dword [esp], eax
call fcn.00402b20
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test ecx, ecx
sete dl
test eax, eax
sete bl
and ebx, edx
test bl, bl
jne 0x4411e1
mov edx, dword [esp + 0x38]
cmp edx, ecx
setl cl
sete dl
mov ebx, dword [esp + 0x34]
cmp ebx, eax
setb al
and edx, eax
or edx, ecx
test dl, dl
je 0x4414f4
call fcn.00434110
jmp 0x4414f4
nop
lea ecx, [0x643af0]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00402ae0
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x441982
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x44196c
mov ecx, dword [esp + 0x34]
test ecx, ecx
setne dl
mov ebx, dword [esp + 0x38]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x44128b
mov edx, dword [esp + 0x40]
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x3c]
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, ebp
xchg edi, eax
test al, al
xchg edi, eax
je 0x44127d
nop
call fcn.0046a0f0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0x38]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x34]
sub ecx, esi
sbb ebx, edx
test ebx, ebx
jge 0x441295
xor ebx, ebx
xor ecx, ecx
jmp 0x441295
mov ebx, 0xffffffff
mov ecx, 0xffffffff
mov edx, dword [0x681748]
mov ebp, dword [0x68174c]
test edx, edx
setne dl
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4412bb
xor ebx, ebx
xor ecx, ecx
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00434210
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x44], eax
nop
call fcn.0046a0f0
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x40], ecx
nop
lea edx, [0x643af0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00402ae0
nop
lea eax, [0x643ae8]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 8], ecx
call fcn.00402ae0
mov eax, dword [0x681748]
mov ecx, dword [0x68174c]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x44135c
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x44135c
call fcn.0043fb40
mov eax, dword [esp + 0x7c]
jmp 0x440936
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040abd0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.00448b10
mov eax, dword [esp + 8]
mov dword [esp + 0x70], eax
nop
nop
lea ecx, [0x643af8]
mov dword [esp], ecx
call fcn.0040adf0
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4414cc
mov dword [esp], eax
call fcn.00446720
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x4413f0
movzx eax, byte [esp + 0x2b]
test al, al
je 0x440932
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0043cb50
jmp 0x440932
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0xa4], eax
nop
nop
test eax, eax
je 0x441404
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x44], ecx
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00442610
nop
mov eax, dword [esp + 0x54]
test eax, eax
je 0x44142c
nop
lea ecx, [0x68163c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00402ba0
call fcn.0045a130
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043d430
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4414a7
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045b260
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.0045a240
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00442610
nop
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4414f4
nop
lea ecx, [0x68163c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00402ba0
call fcn.0043fb40
mov eax, dword [esp + 0x7c]
jmp 0x440936
mov dword [esp + 0x74], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x84], eax
call fcn.00446720
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0043cb50
mov eax, dword [esp + 0x74]
mov dword [eax + 0x970], 3
call fcn.0045a130
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0x84]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043d430
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4415ab
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x84]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045b260
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.0045a240
mov eax, dword [esp + 0x84]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0x78], eax
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004486f0
mov eax, dword [esp + 8]
test eax, eax
je 0x441956
mov dword [esp + 0x88], eax
nop
nop
lea eax, [0x643af8]
mov dword [esp], eax
call fcn.0040adf0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00446720
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0043cb50
mov eax, dword [esp + 0x88]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004486f0
mov eax, dword [esp + 8]
mov dword [esp + 0x8c], eax
nop
nop
lea ecx, [0x643af8]
mov dword [esp], ecx
call fcn.0040adf0
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov ecx, dword [esp + 0xa4]
mov dword [ecx + 0x970], 3
mov eax, dword [eax + 0xc]
mov dword [esp + 0xa4], eax
call fcn.0045a130
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043d430
mov eax, dword [esp + 0x64]
test eax, eax
je 0x44172a
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045b260
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.0045a240
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
movzx ecx, byte [esp + 0xc]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], cl
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0x58], ecx
mov dword [esp + 0xa4], eax
nop
nop
test eax, eax
je 0x441789
mov edx, dword [eax + 0x58]
mov dword [esp + 0x48], edx
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.00442610
nop
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4417b1
nop
lea ecx, [0x68163c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00402ba0
call fcn.0045a130
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0xa4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043d430
mov eax, dword [esp + 0x64]
test eax, eax
je 0x44182c
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045b260
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.0045a240
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
movzx ecx, byte [esp + 8]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], cl
mov byte [esp + 0xb1], 0
add esp, 0xa8
ret
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 1
add esp, 0xa8
ret
mov dword [esp + 0x98], eax
call fcn.0045a130
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp]
mov dword [esp + 0xa0], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043d430
mov eax, dword [esp + 0x64]
test eax, eax
je 0x441931
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x98]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045b260
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
call fcn.0045a240
mov eax, dword [esp + 0x98]
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 1
add esp, 0xa8
ret
lea eax, [0x5642cd]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.004389f0
lea eax, [0x563225]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.004389f0
lea eax, [0x5614b8]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.004389f0
lea eax, [0x562b45]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.004389f0
lea eax, [0x55f07c]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.004389f0
nop
call fcn.00467f80
jmp fcn.00440900