Function at 0x43ea60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xac8fb4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x48]
cmp eax, dword [ecx + 8]
jbe 0x43fbd2
sub esp, 0xc8
mov eax, dword [0xac8fb4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0xa0], eax
jmp 0x43ea9c
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xc4], ecx
lea edx, [0xaab614]
mov dword [esp], edx
call fcn.00476cf0
movzx eax, byte [esp + 4]
test al, al
je 0x43eacb
call fcn.0043e7b0
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
mov eax, dword [esp + 0xc4]
test byte [eax], al
mov ecx, dword [eax + 0x1190]
test ecx, ecx
je 0x43eaea
call fcn.0043ce30
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x1198]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00455700
movzx eax, byte [0xaaad30]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x54], ebp
test al, al
je 0x43eb3a
mov eax, 1
jmp 0x43eb63
nop
lea eax, [0xaaad3c]
mov dword [esp], eax
call fcn.00476cf0
movzx eax, byte [esp + 4]
test al, al
setne al
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
test al, al
je 0x43eb87
call fcn.00456fc0
mov eax, dword [esp]
test eax, eax
jne 0x43faa9
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
mov eax, dword [0xac8e94]
test eax, eax
je 0x43ebce
lea eax, [0xac9f60]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.0041f2c0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43fa8b
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebp
mov eax, dword [esp + 0xc4]
mov esi, dword [eax + 0xc]
imul esi, esi, 0xc10c9715
cmp esi, 0x4325c53
ja 0x43ec49
mov esi, dword [0xaab5dc]
test esi, esi
jle 0x43ec49
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00446740
mov eax, dword [esp + 8]
mov dword [esp + 0xb8], eax
nop
nop
lea ecx, [0xaab598]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0xb8]
test eax, eax
jne 0x43f57e
lea eax, [0xac8e7c]
mov dword [esp], eax
call fcn.00476d90
mov eax, dword [esp + 4]
and eax, 0xc
cmp eax, 0xc
jne 0x43ecad
lea eax, [0xac8e7c]
mov dword [esp], eax
mov dword [esp + 4], 0xd
mov dword [esp + 8], 1
call fcn.00476dc0
movzx eax, byte [esp + 0xc]
test al, al
je 0x43ec92
mov eax, dword [0xaa8508]
jmp 0x43ec94
xor eax, eax
test eax, eax
je 0x43ecad
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.0043ac50
mov eax, dword [0xa9924c]
mov eax, dword [eax]
test eax, eax
je 0x43ecc9
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00471f60
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00447180
mov eax, dword [esp + 4]
test eax, eax
jne 0x43fa69
mov eax, dword [0xaab5dc]
test eax, eax
je 0x43ed3f
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446740
mov eax, dword [esp + 8]
mov dword [esp + 0xb4], eax
nop
nop
lea ecx, [0xaab598]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x43fa4b
lea eax, [0xac8eb4]
mov dword [esp], eax
call fcn.00476d90
mov eax, dword [esp + 4]
test eax, eax
jne 0x43ed59
xor ecx, ecx
jmp 0x43ed95
lea eax, [0xac8fac]
mov dword [esp], eax
call fcn.00476d90
mov eax, dword [esp + 4]
test eax, eax
ja 0x43ed73
xor ecx, ecx
jmp 0x43ed95
lea eax, [0xaab588]
mov dword [esp], eax
call fcn.00476e90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x43edc1
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.004322d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x43f95a
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax + 0x88]
test cl, cl
je 0x43edda
mov ecx, 1
jmp 0x43ee1c
lea eax, [0xaab5cc]
mov dword [esp], eax
call fcn.00476e80
mov eax, dword [esp + 4]
shl eax, 1
mov dword [esp + 0x78], eax
lea ecx, [0xaab5c8]
mov dword [esp], ecx
call fcn.00476e80
mov eax, dword [0xac8f14]
sub eax, dword [esp + 4]
mov ecx, dword [esp + 0x78]
cmp eax, ecx
setg al
mov ecx, eax
mov eax, dword [esp + 0xa0]
test cl, cl
jne 0x43ee35
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
jmp 0x43eee6
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x43ee48
mov dword [esp], eax
call fcn.0043abf0
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0043fd10
mov eax, dword [esp + 8]
test eax, eax
jne 0x43f938
movzx eax, byte [esp + 0x20]
test al, al
je 0x43ee7d
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
setne dl
test ecx, ecx
setne bl
or edx, ebx
test dl, dl
je 0x43eed6
mov edx, dword [esp + 0x48]
test edx, edx
sete bl
mov ebp, dword [esp + 0x4c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and ebx, esi
test bl, bl
jne 0x43eede
cmp ecx, ebp
sete bl
xchg esi, ebx
setl bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and ebx, edi
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x43eede
mov ecx, ebp
mov eax, edx
jmp 0x43eede
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebp
mov ebx, dword [0xac8e94]
test ebx, ebx
jne 0x43ef04
xor ebx, ebx
jmp 0x43ef55
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.004182f0
movzx eax, byte [esp + 4]
test al, al
jne 0x43ef30
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
xor ebx, ebx
jmp 0x43ef55
lea eax, [0xac9f60]
mov dword [esp], eax
call fcn.00420800
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov ebx, eax
mov eax, dword [esp + 0x48]
test bl, bl
je 0x43ef81
lea eax, [0xac9020]
mov dword [esp], eax
call fcn.0040a6a0
mov eax, dword [esp + 4]
test eax, eax
jne 0x43f86a
lea eax, [0xac9f60]
mov dword [esp], eax
call fcn.00420920
mov eax, dword [0xaa8cd8]
mov dword [esp + 0xc0], eax
mov ecx, dword [0xaa8cdc]
mov dword [esp + 0x70], ecx
mov edx, dword [0xaa8ce0]
mov dword [esp + 0x74], edx
mov ebx, dword [0xaa8ce8]
mov dword [esp + 0xa4], ebx
mov ebp, dword [0xaa8cec]
mov dword [esp + 0x60], ebp
mov esi, dword [0xaa8cf0]
mov dword [esp + 0x64], esi
mov edi, dword [0xaa8cf8]
mov dword [esp + 0x90], edi
mov edi, dword [0xaa8cfc]
mov dword [esp + 0x40], edi
mov edi, dword [0xaa8d00]
mov dword [esp + 0x44], edi
nop
nop
lea edi, [0xaab598]
mov dword [esp], edi
call fcn.0040a7e0
lea eax, [0xaab614]
mov dword [esp], eax
call fcn.00476cf0
movzx eax, byte [esp + 4]
test al, al
jne 0x43f01c
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x1190]
test ecx, ecx
je 0x43f038
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
mov ecx, dword [0xaab5dc]
test ecx, ecx
jne 0x43f81a
mov ecx, dword [esp + 0xa0]
movzx edx, byte [ecx + 0x88]
test dl, dl
je 0x43f05c
xor edx, edx
jmp 0x43f082
lea eax, [0xaab5d0]
mov dword [esp], eax
call fcn.00476d90
cmp dword [esp + 4], 1
sete al
mov ecx, dword [esp + 0xa0]
mov edx, eax
mov eax, dword [esp + 0xc4]
test dl, dl
je 0x43f0aa
mov dword [esp], ecx
call fcn.0043abf0
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
call fcn.00444960
mov eax, dword [esp + 0xc4]
cmp dword [esp], eax
jne 0x43fbbb
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.00446930
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
nop
nop
lea edx, [0xaab598]
mov dword [esp], edx
call fcn.0040aa00
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x2b], cl
test cl, cl
jne 0x43f11a
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
jmp 0x43f25c
mov byte [eax + 0x88], 0
lea ecx, [0xaab5cc]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.00476ea0
mov eax, dword [esp + 8]
test eax, eax
jl 0x43fba5
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [0xaab5dc]
test eax, eax
je 0x43f17d
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00446c60
mov eax, dword [esp + 8]
test eax, eax
jne 0x43f79d
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
call fcn.004402e0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x43f1f2
mov dword [esp], eax
call fcn.00444750
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043abf0
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
call fcn.00440500
mov eax, dword [esp]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x43f6b9
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1c], eax
call fcn.004403e0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], ebx
lea eax, [0xac8eb4]
mov dword [esp], eax
call fcn.00476d90
mov eax, dword [esp + 4]
test eax, eax
jne 0x43f286
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
xor ecx, ecx
jmp 0x43f2f2
lea eax, [0xac8fac]
mov dword [esp], eax
call fcn.00476d90
mov eax, dword [esp + 4]
test eax, eax
ja 0x43f2b4
mov eax, dword [esp + 0x48]
test eax, eax
setne cl
mov edx, dword [esp + 0x4c]
test edx, edx
setne bl
or ecx, ebx
test cl, cl
je 0x43f2f0
lea eax, [0xaab588]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00476f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
test eax, eax
setne al
or ecx, eax
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
jmp 0x43f2f2
xor ecx, ecx
test cl, cl
jne 0x43f389
test eax, eax
setne cl
test edx, edx
setne bl
or ecx, ebx
test cl, cl
jne 0x43f30e
xor ecx, ecx
jmp 0x43f32f
lea eax, [0xac8eb4]
mov dword [esp], eax
call fcn.00476d90
mov eax, dword [esp + 4]
test eax, eax
setne al
mov edx, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
test cl, cl
je 0x43f6a8
nop
lea eax, [0xaab590]
mov dword [esp], eax
call fcn.00476e90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
sete dl
test ecx, ecx
sete bl
and edx, ebx
test dl, dl
jne 0x43f37f
mov edx, dword [esp + 0x4c]
cmp edx, ecx
sete cl
setl dl
mov ebx, dword [esp + 0x48]
cmp ebx, eax
setb al
and ecx, eax
or edx, ecx
test dl, dl
je 0x43f6a8
call fcn.004321c0
jmp 0x43f6a8
nop
lea ecx, [0xaab590]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00476e50
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x43fb8f
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x43fb79
mov ecx, dword [esp + 0x48]
test ecx, ecx
setne dl
mov ebx, dword [esp + 0x4c]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
je 0x43f42d
mov edx, dword [esp + 0x54]
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x50]
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and ebp, edi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x43f41f
nop
call fcn.00473090
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0x4c]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x48]
sub ecx, esi
sbb ebx, edx
test ebx, ebx
jge 0x43f437
xor ebx, ebx
xor ecx, ecx
jmp 0x43f437
mov ebx, 0xffffffff
mov ecx, 0xffffffff
mov edx, dword [0xac9028]
mov ebp, dword [0xac902c]
test edx, edx
setne dl
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
je 0x43f45b
xor ebx, ebx
xor ecx, ecx
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.004322d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x58], eax
nop
call fcn.00473090
mov eax, dword [esp]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x54], ecx
nop
lea edx, [0xaab590]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00476e50
nop
lea eax, [0xaab588]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
call fcn.00476e50
mov eax, dword [0xac9028]
mov ecx, dword [0xac902c]
test ecx, ecx
setne cl
test eax, eax
setne al
or ecx, eax
test cl, cl
je 0x43f4ff
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x43f4ff
call fcn.0043ddd0
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040a7e0
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00446af0
mov eax, dword [esp + 8]
mov dword [esp + 0x94], eax
nop
nop
lea ecx, [0xaab598]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0x94]
test eax, eax
je 0x43f680
mov dword [esp], eax
call fcn.00444750
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x43f59c
movzx eax, byte [esp + 0x2b]
test al, al
je 0x43ea95
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043abf0
jmp 0x43ea95
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xc4], eax
nop
nop
test eax, eax
je 0x43f5b0
mov ecx, dword [eax + 0x5c]
mov dword [esp + 0x58], ecx
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00440830
nop
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43f5d8
nop
lea ecx, [0xac8fac]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476f10
movzx eax, byte [0xaaad30]
test al, al
jne 0x43f5e9
xor ecx, ecx
xor eax, eax
jmp 0x43f5f5
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x7c], eax
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b4f0
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x43f65b
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e400
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.0045d360
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00440830
nop
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43f6a8
nop
lea ecx, [0xac8fac]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476f10
call fcn.0043ddd0
mov eax, dword [esp + 0xa0]
jmp 0x43ea9c
mov dword [esp + 0x98], eax
mov dword [esp + 0xa8], ecx
call fcn.00444750
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043abf0
mov eax, dword [esp + 0x98]
mov dword [eax + 0x960], 3
movzx eax, byte [0xaaad30]
test al, al
jne 0x43f6fd
xor ecx, ecx
xor eax, eax
jmp 0x43f709
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x80], eax
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b4f0
mov eax, dword [esp + 0x30]
test eax, eax
je 0x43f778
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e400
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0045d360
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0x9c], eax
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446740
mov eax, dword [esp + 8]
test eax, eax
je 0x43fb63
mov dword [esp + 0xac], eax
nop
nop
lea eax, [0xaab598]
mov dword [esp], eax
call fcn.0040aa00
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00444750
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043abf0
mov eax, dword [esp + 0xac]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446740
mov eax, dword [esp + 8]
mov dword [esp + 0xb0], eax
nop
nop
lea ecx, [0xaab598]
mov dword [esp], ecx
call fcn.0040aa00
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov ecx, dword [esp + 0xc4]
mov dword [ecx + 0x960], 3
mov eax, dword [eax + 0xc]
movzx ecx, byte [0xaaad30]
mov dword [esp + 0xc4], eax
test cl, cl
jne 0x43f896
xor ecx, ecx
xor edx, edx
jmp 0x43f8ab
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x84], edx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b4f0
mov eax, dword [esp + 0x34]
test eax, eax
je 0x43f913
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e400
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0045d360
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
movzx ecx, byte [esp + 0xc]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xc4], eax
nop
nop
test eax, eax
je 0x43f972
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x5c], edx
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.00440830
nop
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x43f99a
nop
lea ecx, [0xac8fac]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476f10
movzx eax, byte [0xaaad30]
test al, al
jne 0x43f9ab
xor ecx, ecx
xor eax, eax
jmp 0x43f9b7
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b4f0
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x43fa26
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e400
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.0045d360
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
movzx ecx, byte [esp + 8]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 1
add esp, 0xc8
ret
mov dword [esp + 0xbc], eax
movzx ecx, byte [0xaaad30]
test cl, cl
jne 0x43fac1
xor ecx, ecx
xor edx, edx
jmp 0x43fad6
call fcn.0045d230
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x38], ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b4f0
mov eax, dword [esp + 0x38]
test eax, eax
je 0x43fb3e
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e400
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0045d360
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 1
add esp, 0xc8
ret
lea eax, [0x7c1d44]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046bc70
lea eax, [0x7bca92]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046bc70
lea eax, [0x7b78d4]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0046bc70
lea eax, [0x7baaa7]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0046bc70
lea eax, [0x7b3847]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0046bc70
nop
call fcn.00470ed0
jmp fcn.0043ea60