Function at 0x43eae0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xa6fb1c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x48]
cmp eax, dword [ecx + 8]
jbe 0x43fc52
sub esp, 0xc8
mov eax, dword [0xa6fb1c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0xa0], eax
jmp 0x43eb1c
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xc4], ecx
lea edx, [0xa52154]
mov dword [esp], edx
call fcn.00476c40
movzx eax, byte [esp + 4]
test al, al
je 0x43eb4b
call fcn.0043e830
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
mov eax, dword [esp + 0xc4]
test byte [eax], al
mov ecx, dword [eax + 0x1190]
test ecx, ecx
je 0x43eb6a
call fcn.0043ceb0
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x1198]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00455530
movzx eax, byte [0xa51870]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x50], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x4c], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x54], ebp
test al, al
je 0x43ebba
mov eax, 1
jmp 0x43ebe3
nop
lea eax, [0xa5187c]
mov dword [esp], eax
call fcn.00476c40
movzx eax, byte [esp + 4]
test al, al
setne al
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
test al, al
je 0x43ec07
call fcn.00456df0
mov eax, dword [esp]
test eax, eax
jne 0x43fb29
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
mov eax, dword [0xa6f9cc]
test eax, eax
je 0x43ec4e
lea eax, [0xa70a80]
mov dword [esp], eax
mov ecx, dword [esp + 0xc4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.0041f340
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43fb0b
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x48]
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebp
mov eax, dword [esp + 0xc4]
mov esi, dword [eax + 0xc]
imul esi, esi, 0xc10c9715
cmp esi, 0x4325c53
ja 0x43ecc9
mov esi, dword [0xa5211c]
test esi, esi
jle 0x43ecc9
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040a860
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00446570
mov eax, dword [esp + 8]
mov dword [esp + 0xb8], eax
nop
nop
lea ecx, [0xa520d8]
mov dword [esp], ecx
call fcn.0040aa80
mov eax, dword [esp + 0xb8]
test eax, eax
jne 0x43f5fe
lea eax, [0xa6f9b4]
mov dword [esp], eax
call fcn.00476ce0
mov eax, dword [esp + 4]
and eax, 0xc
cmp eax, 0xc
jne 0x43ed2d
lea eax, [0xa6f9b4]
mov dword [esp], eax
mov dword [esp + 4], 0xd
mov dword [esp + 8], 1
call fcn.00476d10
movzx eax, byte [esp + 0xc]
test al, al
je 0x43ed12
mov eax, dword [0xa4f074]
jmp 0x43ed14
xor eax, eax
test eax, eax
je 0x43ed2d
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.0043acd0
mov eax, dword [0xa409e8]
mov eax, dword [eax]
test eax, eax
je 0x43ed49
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00471d60
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00446fb0
mov eax, dword [esp + 4]
test eax, eax
jne 0x43fae9
mov eax, dword [0xa5211c]
test eax, eax
je 0x43edbf
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040a860
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446570
mov eax, dword [esp + 8]
mov dword [esp + 0xb4], eax
nop
nop
lea ecx, [0xa520d8]
mov dword [esp], ecx
call fcn.0040aa80
mov eax, dword [esp + 0xb4]
test eax, eax
jne 0x43facb
lea eax, [0xa6f9ec]
mov dword [esp], eax
call fcn.00476ce0
mov eax, dword [esp + 4]
test eax, eax
jne 0x43edd9
xor ecx, ecx
jmp 0x43ee15
lea eax, [0xa6fb14]
mov dword [esp], eax
call fcn.00476ce0
mov eax, dword [esp + 4]
test eax, eax
ja 0x43edf3
xor ecx, ecx
jmp 0x43ee15
lea eax, [0xa520c8]
mov dword [esp], eax
call fcn.00476de0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x43ee41
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00432350
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x43f9da
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax + 0x88]
test cl, cl
je 0x43ee5a
mov ecx, 1
jmp 0x43ee9c
lea eax, [0xa5210c]
mov dword [esp], eax
call fcn.00476dd0
mov eax, dword [esp + 4]
shl eax, 1
mov dword [esp + 0x78], eax
lea ecx, [0xa52108]
mov dword [esp], ecx
call fcn.00476dd0
mov eax, dword [0xa6fa4c]
sub eax, dword [esp + 4]
mov ecx, dword [esp + 0x78]
cmp eax, ecx
setg al
mov ecx, eax
mov eax, dword [esp + 0xa0]
test cl, cl
jne 0x43eeb5
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
jmp 0x43ef66
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x43eec8
mov dword [esp], eax
call fcn.0043ac70
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0043fd90
mov eax, dword [esp + 8]
test eax, eax
jne 0x43f9b8
movzx eax, byte [esp + 0x20]
test al, al
je 0x43eefd
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test eax, eax
setne dl
test ecx, ecx
setne bl
or edx, ebx
test dl, dl
je 0x43ef56
mov edx, dword [esp + 0x48]
test edx, edx
sete bl
mov ebp, dword [esp + 0x4c]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and ebx, esi
test bl, bl
jne 0x43ef5e
cmp ecx, ebp
sete bl
xchg esi, ebx
setl bl
xchg esi, ebx
cmp eax, edx
xchg edi, ebx
setb bl
xchg edi, ebx
and ebx, edi
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x43ef5e
mov ecx, ebp
mov eax, edx
jmp 0x43ef5e
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ebp
mov ebx, dword [0xa6f9cc]
test ebx, ebx
jne 0x43ef84
xor ebx, ebx
jmp 0x43efd5
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00418370
movzx eax, byte [esp + 4]
test al, al
jne 0x43efb0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
xor ebx, ebx
jmp 0x43efd5
lea eax, [0xa70a80]
mov dword [esp], eax
call fcn.00420880
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov ebx, eax
mov eax, dword [esp + 0x48]
test bl, bl
je 0x43f001
lea eax, [0xa6fb78]
mov dword [esp], eax
call fcn.0040a720
mov eax, dword [esp + 4]
test eax, eax
jne 0x43f8ea
lea eax, [0xa70a80]
mov dword [esp], eax
call fcn.004209a0
mov eax, dword [0xa4f950]
mov dword [esp + 0xc0], eax
mov ecx, dword [0xa4f954]
mov dword [esp + 0x70], ecx
mov edx, dword [0xa4f958]
mov dword [esp + 0x74], edx
mov ebx, dword [0xa4f960]
mov dword [esp + 0xa4], ebx
mov ebp, dword [0xa4f964]
mov dword [esp + 0x60], ebp
mov esi, dword [0xa4f968]
mov dword [esp + 0x64], esi
mov edi, dword [0xa4f970]
mov dword [esp + 0x90], edi
mov edi, dword [0xa4f974]
mov dword [esp + 0x40], edi
mov edi, dword [0xa4f978]
mov dword [esp + 0x44], edi
nop
nop
lea edi, [0xa520d8]
mov dword [esp], edi
call fcn.0040a860
lea eax, [0xa52154]
mov dword [esp], eax
call fcn.00476c40
movzx eax, byte [esp + 4]
test al, al
jne 0x43f09c
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x1190]
test ecx, ecx
je 0x43f0b8
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040aa80
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
mov ecx, dword [0xa5211c]
test ecx, ecx
jne 0x43f89a
mov ecx, dword [esp + 0xa0]
movzx edx, byte [ecx + 0x88]
test dl, dl
je 0x43f0dc
xor edx, edx
jmp 0x43f102
lea eax, [0xa52110]
mov dword [esp], eax
call fcn.00476ce0
cmp dword [esp + 4], 1
sete al
mov ecx, dword [esp + 0xa0]
mov edx, eax
mov eax, dword [esp + 0xc4]
test dl, dl
je 0x43f12a
mov dword [esp], ecx
call fcn.0043ac70
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040aa80
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
call fcn.00444790
mov eax, dword [esp + 0xc4]
cmp dword [esp], eax
jne 0x43fc3b
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], eax
call fcn.00446760
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x54], ecx
nop
nop
lea edx, [0xa520d8]
mov dword [esp], edx
call fcn.0040aa80
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x2b], cl
test cl, cl
jne 0x43f19a
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
jmp 0x43f2dc
mov byte [eax + 0x88], 0
lea ecx, [0xa5210c]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.00476df0
mov eax, dword [esp + 8]
test eax, eax
jl 0x43fc25
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040a860
mov eax, dword [0xa5211c]
test eax, eax
je 0x43f1fd
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.00446a90
mov eax, dword [esp + 8]
test eax, eax
jne 0x43f81d
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040aa80
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x74]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x14], ebx
call fcn.00440360
mov eax, dword [esp + 0x18]
test eax, eax
je 0x43f272
mov dword [esp], eax
call fcn.00444580
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac70
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
call fcn.00440580
mov eax, dword [esp]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x43f739
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1c], eax
call fcn.00440460
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], ebx
lea eax, [0xa6f9ec]
mov dword [esp], eax
call fcn.00476ce0
mov eax, dword [esp + 4]
test eax, eax
jne 0x43f306
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
xor ecx, ecx
jmp 0x43f372
lea eax, [0xa6fb14]
mov dword [esp], eax
call fcn.00476ce0
mov eax, dword [esp + 4]
test eax, eax
ja 0x43f334
mov eax, dword [esp + 0x48]
test eax, eax
setne cl
mov edx, dword [esp + 0x4c]
test edx, edx
setne bl
or ecx, ebx
test cl, cl
je 0x43f370
lea eax, [0xa520c8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00476ed0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
test eax, eax
setne al
or ecx, eax
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
jmp 0x43f372
xor ecx, ecx
test cl, cl
jne 0x43f409
test eax, eax
setne cl
test edx, edx
setne bl
or ecx, ebx
test cl, cl
jne 0x43f38e
xor ecx, ecx
jmp 0x43f3af
lea eax, [0xa6f9ec]
mov dword [esp], eax
call fcn.00476ce0
mov eax, dword [esp + 4]
test eax, eax
setne al
mov edx, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
test cl, cl
je 0x43f728
nop
lea eax, [0xa520d0]
mov dword [esp], eax
call fcn.00476de0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
test eax, eax
sete dl
test ecx, ecx
sete bl
and edx, ebx
test dl, dl
jne 0x43f3ff
mov edx, dword [esp + 0x4c]
cmp edx, ecx
sete cl
setl dl
mov ebx, dword [esp + 0x48]
cmp ebx, eax
setb al
and ecx, eax
or edx, ecx
test dl, dl
je 0x43f728
call fcn.00432240
jmp 0x43f728
nop
lea ecx, [0xa520d0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00476da0
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x43fc0f
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x43fbf9
mov ecx, dword [esp + 0x48]
test ecx, ecx
setne dl
mov ebx, dword [esp + 0x4c]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
je 0x43f4ad
mov edx, dword [esp + 0x54]
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov esi, dword [esp + 0x50]
test esi, esi
xchg edi, ebx
sete bl
xchg edi, ebx
and ebp, edi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x43f49f
nop
call fcn.00472e90
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0x4c]
mov edx, ecx
mov esi, eax
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x48]
sub ecx, esi
sbb ebx, edx
test ebx, ebx
jge 0x43f4b7
xor ebx, ebx
xor ecx, ecx
jmp 0x43f4b7
mov ebx, 0xffffffff
mov ecx, 0xffffffff
mov edx, dword [0xa6fb80]
mov ebp, dword [0xa6fb84]
test edx, edx
setne dl
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
je 0x43f4db
xor ebx, ebx
xor ecx, ecx
mov dword [esp], ecx
mov dword [esp + 4], ebx
call fcn.00432350
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x58], eax
nop
call fcn.00472e90
mov eax, dword [esp]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x54], ecx
nop
lea edx, [0xa520d0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00476da0
nop
lea eax, [0xa520c8]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
call fcn.00476da0
mov eax, dword [0xa6fb80]
mov ecx, dword [0xa6fb84]
test ecx, ecx
setne cl
test eax, eax
setne al
or ecx, eax
test cl, cl
je 0x43f57f
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x43f57f
call fcn.0043de50
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040a860
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00446920
mov eax, dword [esp + 8]
mov dword [esp + 0x94], eax
nop
nop
lea ecx, [0xa520d8]
mov dword [esp], ecx
call fcn.0040aa80
mov eax, dword [esp + 0x94]
test eax, eax
je 0x43f700
mov dword [esp], eax
call fcn.00444580
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x43f61c
movzx eax, byte [esp + 0x2b]
test al, al
je 0x43eb15
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac70
jmp 0x43eb15
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xc4], eax
nop
nop
test eax, eax
je 0x43f630
mov ecx, dword [eax + 0x5c]
mov dword [esp + 0x58], ecx
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.004408b0
nop
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43f658
nop
lea ecx, [0xa6fb14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476e60
movzx eax, byte [0xa51870]
test al, al
jne 0x43f669
xor ecx, ecx
xor eax, eax
jmp 0x43f675
call fcn.0045d060
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x7c], eax
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b570
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x43f6db
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e230
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.0045d190
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.004408b0
nop
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43f728
nop
lea ecx, [0xa6fb14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476e60
call fcn.0043de50
mov eax, dword [esp + 0xa0]
jmp 0x43eb1c
mov dword [esp + 0x98], eax
mov dword [esp + 0xa8], ecx
call fcn.00444580
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac70
mov eax, dword [esp + 0x98]
mov dword [eax + 0x960], 3
movzx eax, byte [0xa51870]
test al, al
jne 0x43f77d
xor ecx, ecx
xor eax, eax
jmp 0x43f789
call fcn.0045d060
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x80], eax
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b570
mov eax, dword [esp + 0x30]
test eax, eax
je 0x43f7f8
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xa8]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e230
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
call fcn.0045d190
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0x9c], eax
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446570
mov eax, dword [esp + 8]
test eax, eax
je 0x43fbe3
mov dword [esp + 0xac], eax
nop
nop
lea eax, [0xa520d8]
mov dword [esp], eax
call fcn.0040aa80
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call fcn.00444580
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.0043ac70
mov eax, dword [esp + 0xac]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00446570
mov eax, dword [esp + 8]
mov dword [esp + 0xb0], eax
nop
nop
lea ecx, [0xa520d8]
mov dword [esp], ecx
call fcn.0040aa80
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov ecx, dword [esp + 0xc4]
mov dword [ecx + 0x960], 3
mov eax, dword [eax + 0xc]
movzx ecx, byte [0xa51870]
mov dword [esp + 0xc4], eax
test cl, cl
jne 0x43f916
xor ecx, ecx
xor edx, edx
jmp 0x43f92b
call fcn.0045d060
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x84], edx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b570
mov eax, dword [esp + 0x34]
test eax, eax
je 0x43f993
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e230
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0045d190
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
movzx ecx, byte [esp + 0xc]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xc4], eax
nop
nop
test eax, eax
je 0x43f9f2
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x5c], edx
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.004408b0
nop
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x43fa1a
nop
lea ecx, [0xa6fb14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476e60
movzx eax, byte [0xa51870]
test al, al
jne 0x43fa2b
xor ecx, ecx
xor eax, eax
jmp 0x43fa37
call fcn.0045d060
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0xc4]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b570
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x43faa6
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xc4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e230
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
call fcn.0045d190
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
movzx ecx, byte [esp + 8]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], cl
mov byte [esp + 0xd1], 0
add esp, 0xc8
ret
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 1
add esp, 0xc8
ret
mov dword [esp + 0xbc], eax
movzx ecx, byte [0xa51870]
test cl, cl
jne 0x43fb41
xor ecx, ecx
xor edx, edx
jmp 0x43fb56
call fcn.0045d060
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x38], ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0043b570
mov eax, dword [esp + 0x38]
test eax, eax
je 0x43fbbe
mov ecx, dword [esp + 0x8c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xbc]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0045e230
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0045d190
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xcc], eax
mov byte [esp + 0xd0], 0
mov byte [esp + 0xd1], 1
add esp, 0xc8
ret
lea eax, [0x79e3d4]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046baa0
lea eax, [0x79c3ab]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046baa0
lea eax, [0x798da8]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0046baa0
lea eax, [0x79b699]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0046baa0
lea eax, [0x794e02]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0046baa0
nop
call fcn.00470cd0
jmp fcn.0043eae0