Function at 0x43b3f0
Capabilities:
Capture screenshot
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x134
mov eax, dword [0x4ddbb0]
mov dl, 1
cmp dl, byte [ecx + 1]
push ebx
sbb ebx, ebx
mov dword [esp + 0x84], ecx
and ebx, dword [0x4ddbb4]
mov dword [esp + 0x58], eax
mov dword [esp + 0x80], ebx
push esi
push edi
test eax, eax
je 0x43b436
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, eax
call fcn.0047faa0
test ebx, ebx
je 0x43b449
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, ebx
call fcn.0047faa0
xorps xmm0, xmm0
lea edx, [esp + 0x74]
push 0
lea ecx, [esp + 0x74]
movlpd qword [esp + 0x74], xmm0
call fcn.0047de10
mov eax, dword [esp + 0x74]
add esp, 4
mov ecx, dword [esp + 0x74]
xor ebx, ebx
mov edi, dword [ebp + 0x18]
add dword [ebp + 8], eax
add dword [ebp + 0xc], ecx
add dword [ebp + 0x10], eax
add dword [ebp + 0x14], ecx
push 0x2e
push edi
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x5c], 0
mov dword [esp + 0x18], ebx
mov dword [esp + 0x38], ebx
call fcn.00496f12
mov esi, eax
add esp, 8
test esi, esi
je 0x43b4ff
add esi, 2
push 0x4d1338
push esi
call fcn.00499643
add esp, 8
test eax, eax
je 0x43b4e7
push 0x4d1340
push esi
call fcn.00499643
add esp, 8
test eax, eax
je 0x43b4e7
push 0x4d1348
push esi
call fcn.00499643
add esp, 8
test eax, eax
jne 0x43b4ff
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
call esi
mov ebx, eax
push 0x32
mov dword [esp + 0x14], ebx
call esi
mov dword [esp + 0x30], eax
mov esi, edi
movzx eax, word [esi]
cmp eax, 0x20
je 0x43b50e
cmp eax, 9
jne 0x43b513
add esi, 2
jmp 0x43b501
cmp eax, 0x2a
jne 0x43b743
nop dword [eax]
movzx eax, word [esi + 2]
add esi, 2
push eax
call fcn.004a1397
movzx eax, ax
add esp, 4
cmp eax, 0x48
je 0x43b712
cmp eax, 0x57
je 0x43b6ff
push 4
push str.Icon
push esi
call fcn.0049b726
add esp, 0xc
test eax, eax
jne 0x43b56c
add esi, 8
mov ecx, esi
call fcn.0040f490
mov dword [esp + 0x54], eax
jmp 0x43b62f
push 5
push str.Trans
push esi
call fcn.0049b726
add esp, 0xc
test eax, eax
jne 0x43b6c8
push 0x1f
add esi, 0xa
lea eax, [esp + 0x104]
push esi
push eax
call fcn.004a1eb4
xor eax, eax
lea ebx, [esp + 0x10c]
mov word [esp + 0x14a], ax
add esp, 0xc
mov ax, word [esp + 0x100]
test ax, ax
je 0x43b5fc
movzx edi, ax
nop dword [eax + eax]
mov ecx, 0x4ca844
mov edx, 0x20
nop word [eax + eax]
cmp di, dx
je 0x43b5f3
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x43b5d0
movzx eax, word [ebx + 2]
add ebx, 2
mov edi, eax
test ax, ax
jne 0x43b5c0
jmp 0x43b5fc
test ebx, ebx
je 0x43b5fc
xor eax, eax
mov word [ebx], ax
lea ecx, [esp + 0x100]
call fcn.0047dc40
mov ecx, eax
cmp ecx, 0xffffffff
jne 0x43b6a6
push 0x10
lea eax, [esp + 0x104]
push 0
push eax
call fcn.0049d195
add esp, 0xc
mov dword [esp + 0x14], eax
mov ebx, dword [esp + 0x10]
test esi, esi
je 0x43b675
movzx eax, word [esi]
test ax, ax
je 0x43b675
mov edi, eax
nop dword [eax]
mov eax, 0x4ca844
mov edx, 0x20
nop word [eax + eax]
cmp di, dx
je 0x43b723
movzx ecx, word [eax + 2]
add eax, 2
mov edx, ecx
test cx, cx
jne 0x43b650
movzx eax, word [esi + 2]
add esi, 2
mov edi, eax
test ax, ax
jne 0x43b640
mov eax, dword [0x4d98d8]
test byte [eax + 0x100], 1
jne 0x43c151
mov ecx, dword [0x4dc408]
push 1
push 0
push 0xffffffffffffffff
push 0x4ca8a4
call fcn.0047faa0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
movzx ebx, cl
movzx eax, cx
shl ebx, 8
shr eax, 8
or ebx, eax
shr ecx, 0x10
shl ebx, 8
movzx eax, cl
or ebx, eax
mov dword [esp + 0x14], ebx
jmp 0x43b62b
mov ecx, esi
call fcn.0040f490
mov ebx, eax
mov dword [esp + 0x18], ebx
test ebx, ebx
jns 0x43b6e6
mov dword [esp + 0x18], 0
jmp 0x43b62b
cmp ebx, 0xff
jle 0x43b62b
mov dword [esp + 0x18], 0xff
jmp 0x43b62b
lea ecx, [esi + 2]
call fcn.0040f490
mov ebx, eax
mov dword [esp + 0x10], ebx
jmp 0x43b62f
lea ecx, [esi + 2]
call fcn.0040f490
mov dword [esp + 0x30], eax
jmp 0x43b62f
lea edi, [esi + 2]
mov esi, edi
movzx eax, word [esi]
cmp eax, 0x20
je 0x43b735
cmp eax, 9
jne 0x43b73a
add esi, 2
jmp 0x43b728
cmp eax, 0x2a
je 0x43b520
push 0
lea eax, [esp + 0x23]
mov edx, ebx
push eax
push 0
push dword [esp + 0x60]
lea eax, [esp + 0x34]
mov ecx, edi
push eax
push dword [esp + 0x44]
call fcn.0047dfa0
mov ebx, eax
add esp, 0x18
mov dword [esp + 0x4c], ebx
test ebx, ebx
je 0x43b675
mov esi, dword [sym.imp.USER32.dll_GetDC]
push 0
call esi
mov dword [esp + 0x48], eax
test eax, eax
jne 0x43b7ad
cmp byte [esp + 0x1f], al
jne 0x43b675
cmp dword [esp + 0x24], 1
push ebx
jne 0x43b7a2
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x43b675
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x43b675
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor ecx, ecx
cmp dword [esp + 0x24], 1
mov dword [esp + 0x80], 0
mov dword [esp + 0x54], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x84], ecx
mov byte [esp + 0xf], cl
jne 0x43b98b
lea eax, [esp + 0xd8]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x43b835
mov edx, dword [esp + 0x48]
lea eax, [esp + 0x1e]
mov ecx, dword [esp + 0xe4]
push 1
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.0043a790
mov ebx, dword [sym.imp.GDI32.dll_DeleteObject]
add esp, 0x10
mov dword [esp + 0x2c], eax
push dword [esp + 0xe8]
call ebx
push dword [esp + 0xe4]
call ebx
xor ebx, ebx
push ebx
call esi
mov esi, eax
push esi
mov dword [esp + 0x6c], esi
call edi
mov edi, eax
test edi, edi
je 0x43b962
lea eax, [esp + 0xec]
push eax
push dword [esp + 0x50]
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x43b95b
lea eax, [esp + 0xc0]
push eax
push 0x18
push dword [esp + 0x104]
call dword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x43b941
push dword [esp + 0xc8]
push dword [esp + 0xc8]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebx, eax
test ebx, ebx
je 0x43b941
push ebx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x58], eax
test eax, eax
je 0x43b941
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xb8], ecx
mov ecx, dword [esp + 0xc8]
push 0xff000000
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xc0], ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov esi, eax
lea eax, [esp + 0xb0]
push esi
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
push 3
push 0
push 0
push dword [esp + 0xd4]
push dword [esp + 0xd4]
push dword [esp + 0x60]
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_DrawIconEx]
push dword [esp + 0x58]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, dword [esp + 0x68]
push dword [esp + 0xfc]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [esp + 0xf8]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [esp + 0x4c]
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [esp + 0x4c], ebx
test ebx, ebx
je 0x43b675
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov eax, dword [esp + 0x48]
push 8
lea ecx, [esp + 0x22]
mov edx, eax
push ecx
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x50]
push ecx
mov ecx, ebx
call fcn.0043a790
add esp, 0x10
mov dword [esp + 0x28], eax
test eax, eax
je 0x43c036
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
sub ebx, dword [ebp + 8]
sub esi, dword [ebp + 0xc]
inc ebx
push dword [esp + 0x48]
inc esi
call edi
mov edi, eax
mov dword [esp + 0x80], edi
test edi, edi
je 0x43c036
push esi
push ebx
push dword [esp + 0x50]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esp + 0x54], eax
test eax, eax
je 0x43c036
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x84], eax
test eax, eax
je 0x43c036
push 0xcc0020
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [esp + 0x54]
push esi
push ebx
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x43c036
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x37]
push 8
push eax
lea eax, [esp + 0x74]
mov edx, edi
push eax
lea eax, [esp + 0x48]
push eax
call fcn.0043a790
mov edx, eax
add esp, 0x10
mov dword [esp + 0x10], edx
test edx, edx
je 0x43c036
mov ebx, dword [esp + 0x3c]
mov eax, ebx
mov edi, dword [esp + 0x44]
imul edi, dword [esp + 0x64]
imul eax, dword [esp + 0x6c]
cmp byte [esp + 0x1e], 0
mov dword [esp + 0x30], edi
mov dword [esp + 0x38], eax
jne 0x43ba87
cmp byte [esp + 0x37], 0
je 0x43bbc6
mov eax, dword [esp + 0x14]
mov esi, eax
and esi, 0xf8f8f8
cmp eax, 0xffffffff
cmove esi, eax
mov eax, dword [esp + 0x38]
xor ecx, ecx
test eax, eax
jle 0x43bb2c
cmp eax, 0x10
jb 0x43bb1b
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x43bab8
dec eax
or eax, 0xfffffff0
inc eax
mov edx, dword [esp + 0x38]
movaps xmm2, xmmword [0x4d47f0]
sub edx, eax
mov eax, dword [esp + 0x10]
add eax, 0x20
nop dword [eax]
movups xmm0, xmmword [eax - 0x20]
lea eax, [eax + 0x40]
add ecx, 0x10
movaps xmm1, xmm2
pand xmm1, xmm0
movups xmmword [eax - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x50]
pand xmm0, xmm2
movups xmmword [eax - 0x50], xmm0
movups xmm0, xmmword [eax - 0x40]
pand xmm1, xmm0
movups xmmword [eax - 0x40], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x30]
pand xmm1, xmm0
movups xmmword [eax - 0x30], xmm1
cmp ecx, edx
jl 0x43bad0
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
cmp ecx, eax
jge 0x43bb2c
nop
and dword [edx + ecx*4], 0xf8f8f8
inc ecx
cmp ecx, eax
jl 0x43bb20
xor ecx, ecx
mov edx, esi
mov dword [esp + 0x14], edx
test edi, edi
jle 0x43bbe2
cmp edi, 0x10
jb 0x43bba4
mov eax, edi
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x43bb4f
dec eax
or eax, 0xfffffff0
inc eax
movaps xmm2, xmmword [0x4d47f0]
mov edx, edi
sub edx, eax
mov eax, dword [esp + 0x28]
add eax, 0x20
movups xmm0, xmmword [eax - 0x20]
lea eax, [eax + 0x40]
add ecx, 0x10
movaps xmm1, xmm2
pand xmm1, xmm0
movups xmmword [eax - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x50]
pand xmm0, xmm2
movups xmmword [eax - 0x50], xmm0
movups xmm0, xmmword [eax - 0x40]
pand xmm1, xmm0
movups xmmword [eax - 0x40], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x30]
pand xmm1, xmm0
movups xmmword [eax - 0x30], xmm1
cmp ecx, edx
jl 0x43bb61
mov eax, dword [esp + 0x28]
mov edx, esi
mov dword [esp + 0x14], edx
cmp ecx, edi
jge 0x43bbce
and dword [eax + ecx*4], 0xf8f8f8
inc ecx
cmp ecx, edi
jl 0x43bbb2
mov edx, esi
mov dword [esp + 0x14], edx
jmp 0x43bbce
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
test edi, edi
jle 0x43bbe2
add eax, 3
mov ecx, edi
mov byte [eax], 0
lea eax, [eax + 4]
sub ecx, 1
jne 0x43bbd7
cmp dword [esp + 0x18], 1
jge 0x43bd4b
mov esi, dword [esp + 0x38]
test esi, esi
jle 0x43bc0b
mov eax, dword [esp + 0x10]
mov ecx, esi
add eax, 3
nop
mov byte [eax], 0
lea eax, [eax + 4]
sub ecx, 1
jne 0x43bc00
xor edi, edi
mov dword [esp + 0x20], edi
test esi, esi
jle 0x43c016
mov eax, dword [esp + 0x28]
xor esi, esi
mov dword [esp + 0x40], esi
mov eax, dword [eax]
mov dword [esp + 0x18], eax
nop dword [eax]
mov ecx, dword [esp + 0x10]
cmp dword [esi + ecx], eax
je 0x43bc4e
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x43bc46
cmp dword [ecx], 0
jne 0x43bc4e
cmp eax, edx
jne 0x43bd30
mov eax, edi
mov ecx, dword [esp + 0x6c]
cdq
idiv ebx
sub ecx, eax
cmp dword [esp + 0x64], ecx
jg 0x43bd28
mov eax, ebx
sub eax, edx
cmp dword [esp + 0x44], eax
jg 0x43bd28
xor edx, edx
mov byte [esp + 0xf], 1
xor ebx, ebx
mov dword [esp + 0x5c], ebx
cmp dword [esp + 0x30], edx
jle 0x43bf55
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x50], eax
mov eax, esi
mov esi, dword [esp + 0x40]
mov dword [esp + 0x24], esi
mov esi, dword [esp + 0x28]
sub esi, ecx
mov byte [esp + 0xf], 1
mov dword [esp + 0x58], esi
nop dword [eax]
mov ebx, dword [esp + 0x10]
mov esi, dword [esi + ecx]
cmp dword [eax + ebx], esi
mov ebx, dword [esp + 0x5c]
je 0x43bcd2
cmp dword [esp + 0x2c], 0
je 0x43bccc
cmp dword [ecx], 0
jne 0x43bcd2
cmp esi, dword [esp + 0x14]
jne 0x43bd1c
inc edx
cmp edx, dword [esp + 0x44]
jge 0x43bcdf
inc edi
add eax, 4
jmp 0x43bd04
mov edi, dword [esp + 0x3c]
xor edx, edx
mov esi, dword [esp + 0x24]
lea eax, [edi*4]
add esi, eax
mov eax, dword [esp + 0x50]
add eax, edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x50], eax
mov edi, eax
mov eax, esi
inc ebx
add ecx, 4
mov dword [esp + 0x5c], ebx
cmp ebx, dword [esp + 0x30]
jge 0x43bf55
mov esi, dword [esp + 0x58]
jmp 0x43bcb0
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x3c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
inc edi
add esi, 4
mov dword [esp + 0x20], edi
mov dword [esp + 0x40], esi
cmp edi, dword [esp + 0x38]
jl 0x43bc30
jmp 0x43c016
xor edi, edi
mov dword [esp + 0x20], edi
cmp dword [esp + 0x38], edi
jle 0x43c016
xor esi, esi
mov dword [esp + 0x24], esi
mov eax, edi
mov ecx, dword [esp + 0x6c]
cdq
idiv ebx
sub ecx, eax
cmp dword [esp + 0x64], ecx
jg 0x43c000
mov eax, ebx
sub eax, edx
cmp dword [esp + 0x44], eax
jg 0x43c000
xor eax, eax
mov byte [esp + 0xf], 1
mov dword [esp + 0x40], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], edi
cmp dword [esp + 0x30], eax
jle 0x43bf55
mov esi, dword [esp + 0x28]
lea eax, [ebx*4]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x2c]
sub eax, esi
mov byte [esp + 0xf], 1
mov dword [esp + 0x68], edi
mov dword [esp + 0x50], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0xa4], eax
mov dl, byte [esi + 2]
movzx ebx, word [esi]
mov al, dl
sub al, byte [esp + 0x18]
shr ebx, 8
movzx eax, al
mov dword [esp + 0x7c], ebx
xor ebx, ebx
movzx ecx, dl
cmp dword [esp + 0x18], ecx
mov dword [esp + 0x90], ecx
cmovle ebx, eax
xor ecx, ecx
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x7c]
mov al, bl
movzx edi, bl
mov ebx, dword [esp + 0x18]
sub al, bl
movzx eax, al
cmp ebx, edi
mov dword [esp + 0x94], edi
cmovle ecx, eax
movzx eax, word [esi]
movzx edi, al
sub al, bl
mov dword [esp + 0xac], ecx
xor ecx, ecx
cmp ebx, edi
movzx eax, al
mov dword [esp + 0x98], edi
mov edi, dword [esp + 0x94]
cmovle ecx, eax
mov eax, 0xff
mov dword [esp + 0xa0], ecx
sub eax, dword [esp + 0x90]
mov ecx, ebx
cmp ecx, eax
jle 0x43be6a
or bh, 0xff
jmp 0x43be6e
mov bh, cl
add bh, dl
mov eax, 0xff
sub eax, edi
cmp ecx, eax
jle 0x43be7e
or bl, 0xff
jmp 0x43be84
mov bl, cl
add bl, byte [esp + 0x7c]
mov eax, 0xff
sub eax, dword [esp + 0x98]
cmp ecx, eax
jle 0x43be99
or cl, 0xff
jmp 0x43be9e
movzx eax, word [esi]
add cl, al
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x50]
mov ch, byte [edi + eax + 2]
movzx edx, word [edi + eax]
mov eax, edx
shr eax, 8
cmp ch, byte [esp + 0x9c]
jb 0x43beda
cmp ch, bh
ja 0x43beda
cmp al, byte [esp + 0xac]
jb 0x43beda
cmp al, bl
ja 0x43beda
cmp dl, byte [esp + 0xa0]
jb 0x43beda
cmp dl, cl
jbe 0x43befa
cmp dword [esp + 0x2c], 0
je 0x43beee
mov eax, dword [esp + 0xa4]
cmp dword [esi + eax], 0
jne 0x43befa
mov eax, dword [esp + 0x14]
cmp dword [esi], eax
jne 0x43bff4
mov eax, dword [esp + 0x40]
inc eax
mov dword [esp + 0x40], eax
cmp eax, dword [esp + 0x44]
jge 0x43bf16
inc dword [esp + 0x5c]
add edi, 4
mov dword [esp + 0x50], edi
jmp 0x43bf3f
mov ecx, dword [esp + 0x78]
xor eax, eax
add ecx, dword [esp + 0xa8]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x68]
add eax, dword [esp + 0x3c]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x58]
add esi, 4
inc eax
mov dword [esp + 0x58], eax
cmp eax, dword [esp + 0x30]
jl 0x43bdd5
mov ebx, dword [esp + 0x20]
push dword [esp + 0x48]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp byte [esp + 0x1f], 0
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
jne 0x43bf78
push dword [esp + 0x4c]
call edi
mov esi, dword [esp + 0x80]
test esi, esi
je 0x43bf9d
mov eax, dword [esp + 0x84]
test eax, eax
je 0x43bf96
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x54]
test eax, eax
je 0x43bfa8
push eax
call edi
mov eax, dword [esp + 0x28]
test eax, eax
je 0x43bfb9
push eax
call fcn.0049b8d4
add esp, 4
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x43bfca
push eax
call fcn.0049b8d4
add esp, 4
mov eax, dword [esp + 0x10]
test eax, eax
je 0x43b675
push eax
call fcn.0049b8d4
add esp, 4
cmp byte [esp + 0xf], 0
jne 0x43c042
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x24]
inc edi
add esi, 4
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], esi
cmp edi, dword [esp + 0x38]
jl 0x43bd61
mov ecx, dword [0x4dc408]
push 1
push 0
push 0xffffffffffffffff
push 0x4ca34c
call fcn.0047faa0
mov byte [esp + 0xf], 0
jmp 0x43bf55
mov ebx, dword [esp + 0x8c]
jmp 0x43bf59
cmp dword [esp + 0x60], 0
mov edi, dword [esp + 0x3c]
je 0x43c0c1
mov eax, ebx
cdq
idiv edi
mov eax, dword [esp + 0x60]
mov esi, edx
sub esi, dword [esp + 0x70]
add esi, dword [ebp + 8]
cmp byte [eax + 0x17], 0
jne 0x43c070
mov eax, dword [eax + 0xc]
mov dword [esp + 0x60], eax
mov cl, byte [eax + 0x15]
test cl, 2
je 0x43c08d
and cl, 0x3d
mov byte [eax + 0x15], cl
mov ecx, dword [eax]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov eax, dword [esp + 0x60]
mov cl, byte [eax + 0x15]
mov eax, esi
and cl, 0x9b
mov esi, dword [esp + 0x60]
or cl, 0x18
cdq
mov dword [esi], eax
mov dword [esi + 4], edx
mov byte [esi + 0x15], cl
jge 0x43c0b1
mov ecx, esi
call fcn.00401330
and byte [esi + 0x15], 0x8f
jmp 0x43c0c1
cmp dword [0x4dc430], 0
je 0x43c0c1
mov ecx, esi
call fcn.00401330
cmp dword [esp + 0x88], 0
je 0x43c132
mov eax, ebx
mov ebx, dword [esp + 0x88]
cdq
idiv edi
mov esi, eax
sub esi, dword [esp + 0x74]
add esi, dword [ebp + 0xc]
cmp byte [ebx + 0x17], 0
jne 0x43c0e9
mov ebx, dword [ebx + 0xc]
mov cl, byte [ebx + 0x15]
test cl, 2
je 0x43c102
and cl, 0x3d
mov byte [ebx + 0x15], cl
mov ecx, dword [ebx]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov cl, byte [ebx + 0x15]
mov eax, esi
and cl, 0x9b
cdq
or cl, 0x18
mov dword [ebx], eax
mov dword [ebx + 4], edx
mov byte [ebx + 0x15], cl
jge 0x43c122
mov ecx, ebx
call fcn.00401330
and byte [ebx + 0x15], 0x8f
jmp 0x43c132
cmp dword [0x4dc430], 0
je 0x43c132
mov ecx, ebx
call fcn.00401330
mov ecx, dword [0x4dc408]
push 1
push 0
push 0xffffffffffffffff
push 0x4b716c
call fcn.0047faa0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov ecx, dword [esp + 0x8c]
push 0x4b70dc
push 0
push 0x4ca8a4
call fcn.0042fd40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14