Function at 0x43c520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb8
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 0x130]
test eax, eax
je 0x43c649
dec eax
cmp eax, 5
ja case.default.0x43c549
jmp dword [eax*4 + 0x43db1c]
mov edx, dword [edi - 0x128]
cmp dword [edi - 0x11c], 0xfffffffe
sbb ecx, ecx
mov eax, dword [edx]
inc ecx
and eax, 1
xor ecx, eax
push ecx
push edx
push edi
call fcn.0043f590
add esp, 0xc
cmp dword [edi - 0x11c], 0xfffffffe
jb 0x43c5a2
xor byte [edi + 0x7d], 1
cmp dword [edi + 0x130], 3
jne 0x43c5a2
movzx eax, word [edi + 6]
lea edx, [eax + eax*2]
mov eax, dword [edi + 0x1c]
movzx ecx, byte [eax + edx*4 - 2]
add ecx, dword [eax + edx*4 - 0xc]
mov eax, dword [edi + 0x20]
dec dword [eax + ecx*4 - 4]
mov ecx, edi
call fcn.0045b770
cmp dword [edi - 0x11c], 0xfffffffe
jb case.default.0x43c549
mov eax, dword [edi + 0x54]
mov edx, dword [edi + 0x6c]
mov ecx, dword [eax + 0x10]
xor eax, eax
test edx, edx
je case.default.0x43c549
mov esi, dword [edi + 0x64]
add ecx, 4
nop dword [eax + eax]
cmp dword [esi + eax*4], 0x2007ffd
jne 0x43c5de
cmp dword [ecx], 0xfffffffe
je 0x43c5e8
inc eax
add ecx, 8
cmp eax, edx
jb 0x43c5d0
jmp case.default.0x43c549
mov dword [esi + eax*4], 0x1007ffe
jmp case.default.0x43c549
mov eax, dword [edi + 0x54]
xor esi, esi
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x20], ecx
cmp dword [edi + 0x6c], esi
jbe case.default.0x43c549
mov eax, dword [edi + 0x64]
cmp dword [eax + esi*4], 0x7fff
jne 0x43c628
cmp dword [ecx + 4], 0xffffffff
je 0x43c628
push ecx
push edi
call fcn.0043bdb0
mov ecx, dword [edi + 0x64]
add esp, 8
mov dword [ecx + esi*4], eax
mov ecx, dword [esp + 0x20]
inc esi
add ecx, 8
mov dword [esp + 0x20], ecx
cmp esi, dword [edi + 0x6c]
jb 0x43c602
jmp case.default.0x43c549
mov eax, dword [edi + 0x58]
cmp byte [eax], 0x61
jae 0x43c67b
mov dword [edi + 0x130], 0
cmp byte [edi + 0x75], 0
je 0x43c66f
cmp dword [edi + 0x60], 0
mov byte [edi + 0x75], 0
je 0x43c662
push edi
call fcn.004396e0
add esp, 4
push edi
call fcn.004394d0
add esp, 4
mov byte [edi + 0x74], 1
mov al, byte [edi + 0x77]
test al, al
je 0x43c681
dec al
mov byte [edi + 0x77], al
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [edi + 0xb8], 0
mov esi, dword [edi + 0x58]
mov dword [esp + 0x1c], esi
jne 0x43c6a5
mov eax, esi
sub eax, dword [edi + 0xa0]
cmp eax, dword [edi + 0xa4]
jae 0x43dada
mov eax, dword [edi + 0x960]
test eax, eax
je 0x43c717
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x43c717
mov edx, dword [edi + 0x958]
mov dword [edi + 0x958], ecx
cmp ecx, edx
je 0x43c6d6
test edx, edx
je 0x43c6d6
mov dword [edi + 0x95c], 0xffffffff
jmp 0x43c6fa
cmp eax, 0x6c
jne 0x43c717
mov edx, esi
sub edx, ecx
sub edx, 0x40
sar edx, 2
call fcn.0040bdb0
mov ecx, dword [edi + 0x95c]
mov dword [edi + 0x95c], eax
cmp ecx, eax
je 0x43c717
xor eax, eax
mov dword [edi + 0x7a], 0x15800000
mov ecx, edi
mov word [edi + 0x78], ax
call fcn.0045b770
push edi
call fcn.004394d0
add esp, 4
mov eax, dword [edi + 0x54]
mov edx, dword [esi]
movzx ecx, dl
mov dword [esp + 0x24], ecx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x20], eax
mov eax, edx
shr eax, 8
movzx eax, al
mov esi, eax
mov dword [esp + 0x30], eax
lea eax, [ecx*2 + 0x4d7ff8]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x7c], eax
movzx eax, word [eax]
mov ecx, eax
mov dword [esp + 0xc], esi
and al, 7
mov dword [esp + 0x68], 0
mov dword [esp + 0x18], ecx
cmp al, 3
jne 0x43c7a5
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + esi*8]
mov ecx, dword [ecx + esi*8 + 4]
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x64]
mov dword [esp + 0x4c], ecx
mov eax, dword [eax + esi*4]
test eax, eax
jne 0x43c78d
push esi
push edi
call fcn.00441eb0
mov edx, dword [esp + 0x34]
add esp, 8
mov ecx, dword [esp + 0x7c]
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x68], esi
movzx eax, word [ecx]
movzx ecx, ax
mov dword [esp + 0x18], ecx
mov esi, edx
movzx eax, cx
shr edx, 0x10
shr esi, 0x18
test al, 0x78
mov dword [esp + 0x2c], edx
movzx edx, dl
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edx
movzx eax, cx
je 0x43c82d
mov ecx, dword [esp + 0x28]
and ecx, 0x78
cmp cl, 0x18
jne 0x43c83d
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + esi*8]
mov ecx, dword [ecx + esi*8 + 4]
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x64]
mov dword [esp + 0x3c], ecx
mov eax, dword [eax + esi*4]
test eax, eax
je 0x43c809
mov esi, eax
mov eax, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x10], esi
mov dword [esp + 0x60], esi
movzx eax, ax
jmp 0x43c83d
push esi
push edi
call fcn.00441eb0
mov edx, dword [esp + 0x1c]
mov esi, eax
mov dword [esp + 0x18], eax
add esp, 8
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x60], esi
movzx eax, word [eax]
movzx eax, ax
jmp 0x43c83d
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], edx
shr eax, 7
and eax, 0xf
add eax, 0xfffffffd
cmp eax, 7
ja case.0x43c84b.4
jmp dword [eax*4 + 0x43db34]
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + edx*8]
mov ecx, dword [ecx + edx*8 + 4]
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x64]
mov dword [esp + 0x44], ecx
mov esi, dword [eax + edx*4]
test esi, esi
jne 0x43c87b
push edx
push edi
call fcn.00441eb0
add esp, 8
mov esi, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x64], esi
jmp 0x43c8a5
mov eax, edx
imul edx, edx, 0xffffff
not eax
mov dword [esp + 0x44], eax
add edx, 0x7fff
mov dword [esp + 0x14], edx
mov dword [esp + 0x64], edx
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
cmp ecx, 0x60
ja case.0x43c8b9.95
movzx eax, byte [ecx + 0x43dc24]
jmp dword [eax*4 + 0x43db54]
mov eax, dword [edi + 0x60]
mov esi, dword [eax + 0x10]
mov eax, dword [esi + edx*8]
mov ecx, dword [esi + edx*8 + 4]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
cmp dword [esi + edx*8 + 4], 0xfffe7fff
jne 0x43c8fa
xor edx, edx
mov ecx, edi
call fcn.00451e80
mov esi, eax
or esi, 0x100000
mov dword [esp + 0x14], esi
mov dword [esp + 0x64], esi
jmp 0x43c8a5
movsd xmm0, qword [esi + edx*8]
sub esp, 8
movsd qword [esp], xmm0
push edi
call fcn.004524a0
mov esi, eax
add esp, 0xc
mov dword [esp + 0x14], esi
mov dword [esp + 0x64], esi
jmp 0x43c8a5
mov eax, dword [edi + 0x60]
not edx
push 4
mov eax, dword [eax + 0x10]
mov eax, dword [eax + edx*4]
push eax
push edi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], 0xfffffffb
call fcn.00452330
mov esi, eax
add esp, 0xc
mov dword [esp + 0x14], esi
mov dword [esp + 0x64], esi
jmp 0x43c8a5
mov edx, dword [esp + 0xc]
mov eax, edx
and eax, 0x1f000000
mov dword [esp + 0x28], eax
cmp eax, 0xa000000
je 0x43cbeb
mov eax, esi
and eax, 0x1f000000
mov dword [esp + 0x18], eax
cmp eax, 0xa000000
je 0x43cbeb
movzx eax, dx
mov ecx, 0x8000
mov dword [esp + 0x20], eax
movzx eax, si
mov dword [esp + 0x2c], eax
mov eax, edx
or eax, esi
cmp ax, cx
jae 0x43c9d6
mov eax, edx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43c9b4
cmp dword [esp + 0x28], 0x4000000
jne 0x43c9d6
mov eax, esi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d5a6
cmp dword [esp + 0x18], 0x4000000
je 0x43d5a6
mov ecx, edx
mov dword [esp + 0x18], 0x13
shr ecx, 0x18
and ecx, 0x1f
lea eax, [ecx - 0xf]
cmp eax, 4
mov eax, esi
cmovbe ecx, dword [esp + 0x18]
shr eax, 0x18
and eax, 0x1f
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x28], eax
add eax, 0xfffffff1
cmp eax, 4
mov eax, dword [esp + 0x28]
cmovbe eax, dword [esp + 0x18]
cmp ecx, eax
je 0x43caae
cmp ecx, 0x13
jne 0x43ca59
cmp eax, 0xe
jne 0x43d5a1
mov eax, dword [esp + 0x20]
mov ecx, edi
mov dword [edi + 0x7a], 0x5b0e01d3
mov word [edi + 0x78], ax
call fcn.0045b770
push edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], 0xe
call fcn.0043f600
mov ecx, dword [esp + 0x28]
add esp, 4
mov eax, ecx
jmp 0x43caca
cmp ecx, 0xe
jne 0x43ca92
cmp eax, 0x13
jne 0x43d5a1
mov eax, dword [esp + 0x2c]
mov ecx, edi
mov dword [edi + 0x7a], 0x5b0e01d3
mov word [edi + 0x78], ax
call fcn.0045b770
push edi
mov dword [esp + 0x18], eax
call fcn.0043f600
mov ecx, dword [esp + 0x28]
add esp, 4
mov eax, ecx
jmp 0x43caca
cmp ecx, 1
je 0x43caa0
cmp ecx, 2
jne 0x43d5a1
cmp eax, 1
je 0x43caae
cmp eax, 2
jne 0x43d5a1
push edi
call fcn.0043f600
mov ecx, dword [esp + 0x28]
add esp, 4
mov edx, dword [esp + 0x1c]
mov eax, ecx
mov dword [esp + 0x10], eax
cmp edx, 0xe
jne 0x43cb10
test cl, 1
je 0x43cad4
mov eax, ecx
xor eax, 4
movsd xmm0, qword [esp + 0x40]
mov esi, eax
push eax
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x5c]
movsd qword [esp], xmm0
call fcn.004527d0
mov ecx, esi
add esp, 0x14
xor ecx, 5
test eax, eax
cmovne ecx, esi
mov esi, dword [esp + 0x14]
mov dword [esp + 0x10], ecx
jmp 0x43cb9c
push ecx
cmp edx, 0x13
jne 0x43cb49
movsd xmm0, qword [esp + 0x44]
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esp + 0x5c]
movsd qword [esp], xmm0
call fcn.004527d0
add esp, 0x14
test eax, eax
jne 0x43cb98
mov ecx, dword [esp + 0x24]
xor ecx, 1
mov dword [esp + 0x10], ecx
jmp 0x43cb9c
cmp edx, 4
jne 0x43cbdb
push dword [esp + 0x44]
push dword [esp + 0x50]
call fcn.00452900
add esp, 0xc
test eax, eax
jne 0x43cb71
mov eax, dword [esp + 0x24]
xor eax, 1
mov dword [esp + 0x10], eax
push esi
push dword [esp + 0x10]
push 0
push edi
call fcn.004520a0
add esp, 0x10
mov dword [esp + 0xc], eax
xor edx, edx
mov ecx, edi
call fcn.00451e80
mov esi, eax
mov dword [esp + 0x1c], 0x13
mov ecx, dword [esp + 0x10]
mov eax, ecx
mov word [edi + 0x7a], si
shl eax, 8
mov ecx, edi
or eax, dword [esp + 0x1c]
or eax, 0x80
mov word [edi + 0x7c], ax
mov eax, dword [esp + 0xc]
mov word [edi + 0x78], ax
call fcn.0045b770
mov eax, dword [esp + 0x10]
xor eax, dword [esp + 0x24]
and eax, 1
push eax
push dword [edi + 0x58]
push edi
call fcn.0043f590
jmp 0x43d59a
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.00440980
jmp 0x43d59a
mov eax, ecx
and eax, 2
or eax, 0xc
shr eax, 1
push eax
push ecx
lea eax, [esp + 0x40]
push eax
push edi
call fcn.00440af0
add esp, 0x10
jmp case.0x43c8b9.39
mov edx, dword [esp + 0xc]
mov eax, edx
and eax, 0x1f000000
mov dword [esp + 0x18], eax
cmp eax, 0xa000000
je 0x43cdd9
mov eax, esi
and eax, 0x1f000000
cmp eax, 0xa000000
je 0x43cdd9
mov eax, edx
mov ecx, 0x8000
or eax, esi
cmp ax, cx
jae 0x43cc5a
mov eax, dword [esp + 0x18]
cmp eax, 0xb000000
je 0x43cc5a
cmp eax, 0xc000000
jne 0x43d5a6
push edi
call fcn.0043f600
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x50]
push eax
push esi
push dword [esp + 0x1c]
push edi
call fcn.0043e120
mov ecx, eax
add esp, 0x18
cmp ecx, 2
je 0x43cdba
mov eax, dword [esp + 0x18]
cmp eax, 0xb000000
je 0x43cc99
cmp eax, 0xc000000
jne 0x43cdba
cmp ecx, 1
jne case.0x43c8b9.39
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x38]
push 4
push eax
push edi
mov dword [esp + 0x48], ecx
call fcn.0043dc90
add esp, 0xc
test eax, eax
je case.0x43c8b9.39
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x40]
cmp edx, 0xfffffff4
jne 0x43cd09
cmp dword [ecx + 0x10], eax
jne 0x43cd09
mov dword [edi + 0x7a], 0x450b0005
jmp 0x43cd1a
cmp edx, 0xfffffff3
jne 0x43cd5b
cmp dword [ecx + 0x10], eax
jne 0x43cd5b
mov dword [edi + 0x7a], 0x450b000b
movzx eax, word [esp + 0x64]
mov ecx, edi
mov word [edi + 0x78], ax
call fcn.0045b770
mov ecx, 0x88b
mov word [edi + 0x78], ax
movzx eax, word [esp + 0x6c]
mov word [edi + 0x7c], cx
mov ecx, edi
mov word [edi + 0x7a], ax
call fcn.0045b770
push dword [esp + 0x24]
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004408d0
jmp 0x43d59a
mov eax, dword [esp + 0x64]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x38]
push 4
push eax
push edi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], edx
call fcn.0043dc90
add esp, 0xc
test eax, eax
je case.0x43c8b9.39
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x78]
push dword [esp + 0x34]
push edi
call fcn.0043e120
add esp, 0x14
test eax, eax
jne case.0x43c8b9.39
push dword [esp + 0x24]
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004408d0
jmp 0x43d59a
xor eax, eax
test ecx, ecx
mov ecx, dword [esp + 0x24]
setne al
and ecx, 1
xor eax, ecx
push eax
push dword [edi + 0x58]
push edi
call fcn.0043f590
jmp 0x43d59a
push 4
push ecx
lea eax, [esp + 0x40]
push eax
push edi
call fcn.00440af0
add esp, 0x10
jmp case.0x43c8b9.39
mov eax, esi
mov edx, 0x1000000
and eax, 0x1f000000
cmp edx, eax
sbb eax, eax
and ecx, 1
neg eax
xor edx, edx
cmp ecx, eax
cmove esi, edx
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0xc]
movzx eax, byte [ecx + 5]
mov ecx, 0x8000
cmp eax, dword [edi + 0x6c]
jae 0x43d5a6
mov dword [edi + 0x6c], eax
jmp 0x43d5a6
mov edx, dword [esp + 0xc]
cmp esi, 0xf
jne 0x43ce4e
mov ecx, edi
call fcn.00451f00
mov ecx, dword [esp + 0x30]
mov edx, eax
mov eax, dword [edi + 0x64]
mov dword [eax + ecx*4], edx
jmp 0x43d5a1
cmp esi, 5
jne 0x43ce5c
mov ecx, edi
call fcn.00451fa0
mov edx, eax
mov eax, dword [edi + 0x64]
mov ecx, dword [esp + 0x30]
mov dword [eax + ecx*4], edx
jmp 0x43d5a1
and esi, 0x1f000000
mov eax, 0x1000000
cmp eax, esi
sbb esi, esi
and esi, 0xff000001
add esi, 0x2007ffd
jmp case.0x43c8b9.39
mov eax, esi
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x43ceb2
mov ecx, edi
mov dword [edi + 0x7a], 0x45130000
mov word [edi + 0x78], si
call fcn.0045b770
mov esi, eax
jmp case.0x43c8b9.39
cmp eax, 0xb000000
jne 0x43ced2
mov ecx, edi
mov dword [edi + 0x7a], 0x49137fff
mov word [edi + 0x78], si
call fcn.0045b770
mov esi, eax
jmp case.0x43c8b9.39
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x80]
push 5
push eax
push edi
mov dword [esp + 0xb4], esi
mov dword [esp + 0x90], ecx
call fcn.0043dc90
add esp, 0xc
test eax, eax
je 0x43dae2
push 0x402cbb
push edi
call fcn.00440d90
mov ecx, dword [ebp + 8]
mov dword [esp + 0x18], eax
push 2
lea edi, [eax*4]
mov eax, dword [esp + 0xc4]
mov esi, dword [ecx + 0x64]
mov ecx, dword [ecx + 0x54]
add esi, edi
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x1c]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 0xa8]
mov dword [esi], eax
mov eax, dword [esp + 0xa4]
mov dword [edx + edi*8], eax
mov eax, edi
mov dword [edx + eax*8 + 4], ecx
mov eax, dword [esp + 0x20]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov dword [edx + edi*8 + 8], eax
mov eax, edi
push eax
mov dword [edx + eax*8 + 0xc], ecx
mov dword [esi + 8], 0x7fff
mov esi, dword [ebp + 8]
push esi
mov dword [edx + eax*8 + 0x14], 0xffffffff
call fcn.0043ef30
mov eax, dword [esp + 0x44]
mov edi, esi
inc dword [esi + 0xb8]
add eax, 4
add esp, 0x14
add dword [edi + 0x64], eax
mov eax, dword [esp + 0x10]
inc eax
add dword [edi + 0x70], eax
mov eax, dword [edi + 0x6c]
add eax, dword [edi + 0x70]
cmp eax, 0xfa
jae 0x43db12
xor esi, esi
jmp case.0x43c8b9.39
mov eax, esi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d005
mov eax, esi
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x43d005
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x38]
push 0x10
push eax
push edi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x48], ecx
call fcn.004407d0
mov esi, eax
jmp 0x43d59a
lea eax, [esp + 0x40]
push eax
push esi
push edi
call fcn.0045e1d0
mov esi, eax
jmp 0x43d59a
cmp dword [esp + 0x24], 0x1f
mov edi, esi
mov ecx, dword [esp + 0x10]
mov eax, ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x48], edx
mov dword [esp + 0x40], edx
mov edx, edi
mov edi, dword [ebp + 8]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x44], esi
je 0x43d0eb
jmp 0x43d06a
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x7c]
movzx esi, word [eax]
mov eax, edx
shr eax, 0x18
and eax, 0x1f
shr esi, 0xb
sub eax, 0xe
cmp eax, 5
jbe 0x43d092
mov eax, edx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x43d0b4
mov ecx, dword [esp + 0x14]
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d0c7
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x43d0c7
push esi
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004407d0
mov esi, eax
jmp 0x43d59a
lea eax, [esi + 0x1f]
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x40]
push eax
push ecx
push edx
push edi
call fcn.0045dd20
add esp, 0x18
mov esi, eax
jmp case.0x43c8b9.39
mov edx, dword [esp + 0x10]
mov eax, edx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d109
mov eax, edx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x43d12b
mov ecx, dword [esp + 0x14]
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d13f
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x43d13f
push 0xe
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004407d0
mov esi, eax
jmp 0x43d59a
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x3c]
push eax
push ecx
push edx
push edi
call fcn.0045dff0
add esp, 0x14
mov esi, eax
jmp case.0x43c8b9.39
mov ecx, dword [esp + 0x10]
mov eax, ecx
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d17d
mov eax, ecx
and eax, 0x1f000000
cmp eax, 0x4000000
jne 0x43d19b
mov eax, esi
shr eax, 0x18
and eax, 0x1f
sub eax, 0xe
cmp eax, 5
jbe 0x43d1af
mov eax, esi
and eax, 0x1f000000
cmp eax, 0x4000000
je 0x43d1af
push 0xf
lea eax, [esp + 0x3c]
push eax
push edi
call fcn.004407d0
mov esi, eax
jmp 0x43d59a
push 0x2e
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x40]
push eax
push esi
push ecx
push edi
call fcn.0045dd20
add esp, 0x18
mov esi, eax
jmp case.0x43c8b9.39
mov ecx, dword [esp + 0x10]
push esi
push ecx
push edi
call fcn.0043f2d0
mov esi, eax
jmp 0x43d59a
mov edx, dword [esp + 0xc]
mov ecx, 0x8000
cmp edx, dword [edi + 0x6c]
jbe 0x43d5a6
mov eax, dword [edi + 0x64]
mov dword [eax + edx*4 - 4], 0
jmp 0x43d5a6
movsx edx, si
mov ecx, edi
call fcn.00451e80
mov esi, eax
jmp case.0x43c8b9.39
mov edx, dword [esp + 0xc]
cmp edx, esi
ja 0x43d22f
nop dword [eax + eax]
mov eax, dword [edi + 0x64]
mov dword [eax + edx*4], 0x7fff
inc edx
cmp edx, esi
jbe 0x43d220
mov ecx, 0x8000
cmp esi, dword [edi + 0x6c]
jb 0x43d5a6
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
jmp 0x43d5a6
mov eax, dword [edi + 0x60]
not esi
push 0xa
mov eax, dword [eax + 0x10]
push dword [eax + esi*4]
push edi
call fcn.00452330
mov esi, eax
jmp 0x43d59a
push 0
push esi
push edi
call fcn.004412b0
mov esi, eax
jmp 0x43d59a
push esi
push dword [esp + 0x10]
push edi
call fcn.004412b0
jmp 0x43d59a
mov eax, dword [edi + 0x5c]
push edi
mov eax, dword [eax + 8]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0xfffffff4
call fcn.0043bc40
add esp, 4
movzx eax, ax
mov ecx, edi
mov dword [edi + 0x7a], 0x450b0001
mov word [edi + 0x78], ax
call fcn.0045b770
mov dword [esp + 0x60], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x74], 0x64
push eax
push edi
call fcn.0043be30
add esp, 8
mov esi, eax
jmp case.0x43c8b9.39
movd xmm0, esi
mov edx, esi
cvtdq2pd xmm0, xmm0
mov ecx, edi
movsd qword [esp + 0x40], xmm0
call fcn.00451e80
mov dword [esp + 0x64], eax
jmp case.0x43c8b9.56
lea eax, [esp + 0x38]
mov dword [esp + 0x74], 0
push eax
push edi
call fcn.0043be30
add esp, 8
mov esi, eax
jmp case.0x43c8b9.39
mov eax, dword [edi + 0x54]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x20], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
sub eax, edx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xc]
sar eax, 3
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], edx
mov eax, dword [eax + edx*8 - 8]
mov dword [esp + 0x80], eax
mov eax, dword [edi + 0x64]
mov dword [esp + 0x84], 0xfffffff4
mov eax, dword [eax + edx*4 - 4]
test eax, eax
jne 0x43d36d
lea eax, [edx - 1]
push eax
push edi
call fcn.00441eb0
mov edx, dword [esp + 0x14]
add esp, 8
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xbc], 0
cmp edx, dword [esp + 0x10]
jae 0x43d5a1
mov esi, dword [esp + 0x30]
nop dword [eax]
movd xmm0, ecx
mov edx, ecx
cvtdq2pd xmm0, xmm0
mov ecx, edi
movsd qword [esp + 0x88], xmm0
call fcn.00451e80
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xac], eax
mov eax, dword [ecx + esi*8]
mov ecx, dword [ecx + esi*8 + 4]
mov dword [esp + 0x90], eax
mov eax, dword [edi + 0x64]
mov dword [esp + 0x94], ecx
mov eax, dword [eax + esi*4]
test eax, eax
je 0x43d3dd
mov dword [esp + 0xb0], eax
jmp 0x43d441
mov eax, dword [edi + 0x54]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + esi*8 + 4]
cmp eax, 0xfffffff2
jae 0x43d3f3
mov eax, 0xe
jmp 0x43d3f5
not eax
mov dword [esp + 0x2c], eax
mov ecx, edi
or eax, 0x4780
mov word [edi + 0x7c], ax
mov ax, word [edi + 0x70]
add ax, si
mov word [edi + 0x78], ax
mov eax, 4
mov word [edi + 0x7a], ax
call fcn.00451d80
mov ecx, dword [esp + 0x2c]
mov edx, eax
cmp ecx, 2
ja 0x43d434
imul edx, ecx, 0xffffff
add edx, 0x7fff
mov eax, dword [edi + 0x64]
mov dword [eax + esi*4], edx
mov dword [esp + 0xb0], edx
lea eax, [esp + 0x80]
push eax
push edi
call fcn.0043be30
mov ecx, dword [esp + 0x28]
inc esi
inc ecx
add esp, 8
mov dword [esp + 0x20], ecx
cmp esi, dword [esp + 0x10]
jb 0x43d390
mov esi, dword [esp + 0x14]
jmp case.0x43c8b9.39
mov eax, esi
mov ecx, 0x801
and eax, 0x7ff
shr esi, 0xb
cmp eax, 0x7ff
mov word [edi + 0x7a], si
cmove eax, ecx
mov ecx, 0x518b
mov word [edi + 0x7c], cx
mov ecx, edi
mov word [edi + 0x78], ax
call fcn.0045b770
mov esi, eax
jmp case.0x43c8b9.39
mov eax, dword [edi + 0x60]
not esi
push 0xb
mov eax, dword [eax + 0x10]
push dword [eax + esi*4]
push edi
call fcn.00452330
add esp, 0xc
movzx eax, ax
mov ecx, edi
mov dword [edi + 0x7a], 0x528b0000
mov word [edi + 0x78], ax
call fcn.0045b770
mov esi, eax
jmp case.0x43c8b9.39
mov edx, dword [esp + 0xc]
mov eax, dword [edi + 0x64]
lea ecx, [edx - 3]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x43d4f6
push ecx
push edi
call fcn.00441eb0
mov edx, dword [esp + 0x14]
add esp, 8
mov ecx, dword [edi + 0x64]
mov dword [ecx + edx*4], eax
lea ecx, [edx - 2]
mov eax, dword [edi + 0x64]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x43d517
push ecx
push edi
call fcn.00441eb0
mov edx, dword [esp + 0x14]
add esp, 8
mov ecx, dword [edi + 0x64]
mov dword [ecx + edx*4 + 4], eax
mov eax, dword [edi + 0x64]
mov eax, dword [eax + edx*4 - 4]
test eax, eax
jne 0x43d53a
lea eax, [edx - 1]
push eax
push edi
call fcn.00441eb0
mov edx, dword [esp + 0x14]
add esp, 8
mov ecx, dword [edi + 0x64]
mov esi, dword [esp + 0xc]
mov dword [ecx + edx*4 + 8], eax
mov eax, dword [edi + 0x54]
mov ecx, dword [esp + 0xc]
mov edx, dword [eax + 0x10]
mov eax, dword [edx + ecx*8 - 0x18]
mov ecx, dword [edx + ecx*8 - 0x14]
mov dword [edx + esi*8], eax
mov eax, esi
mov dword [edx + eax*8 + 4], ecx
mov ecx, esi
mov eax, dword [edx + eax*8 - 0x10]
mov dword [edx + esi*8 + 8], eax
mov eax, esi
mov ecx, dword [edx + ecx*8 - 0xc]
mov dword [edx + eax*8 + 0xc], ecx
mov ecx, esi
mov eax, dword [edx + eax*8 - 8]
mov dword [edx + esi*8 + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x14]
mov ecx, dword [edx + ecx*8 - 4]
mov dword [edx + eax*8 + 0x14], ecx
lea eax, [esi - 1]
push eax
push dword [esp + 0x10]
push edi
call fcn.0043bd60
add esp, 0xc
mov edx, dword [esp + 0xc]
mov ecx, 0x8000
mov eax, dword [esp + 0x7c]
mov al, byte [eax]
and al, 7
cmp al, 1
jne 0x43d5c7
test esi, esi
je 0x43d5c7
mov eax, dword [edi + 0x64]
mov dword [eax + edx*4], esi
cmp edx, dword [edi + 0x6c]
jb 0x43d5c7
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x610]
add eax, 0x8001
cmp dword [edi + 8], eax
ja 0x43daea
sub ecx, dword [edi + 0x614]
cmp dword [edi + 0x14], ecx
jb 0x43daea
jmp 0x43c67b
mov eax, dword [edi + 0x54]
mov esi, dword [eax + 0x14]
sub esi, dword [eax + 0x10]
sar esi, 3
sub esi, dword [esp + 0xc]
jmp case.0x43c8b9.66
mov eax, dword [edi + 0x54]
mov ecx, dword [esp + 0xc]
mov esi, dword [eax + 0x14]
sub esi, dword [eax + 0x10]
sar esi, 3
sub esi, ecx
jmp 0x43d619
mov ecx, dword [esp + 0xc]
lea eax, [esi - 1]
mov dword [esp + 0x18], ecx
push eax
push ecx
push edi
call fcn.0043ef30
mov eax, dword [edi + 0x54]
add esp, 0xc
mov eax, dword [eax + 0x10]
mov ecx, dword [eax - 4]
mov eax, ecx
and eax, 7
cmp al, 3
jne 0x43d664
sar ecx, 3
add dword [edi + 0xb8], 0xffffffff
js 0x43daf2
sub dword [edi + 0x70], ecx
mov eax, ecx
neg eax
shl eax, 2
add dword [edi + 0x64], eax
mov eax, dword [esp + 0xc]
add eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [edi + 0x6c]
mov ecx, dword [edi + 0x64]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [esp + 0x1c]
lea eax, [ecx + eax*4]
push eax
lea eax, [ecx - 4]
push eax
call fcn.0046bff0
inc dword [edi + 0xb4]
add esp, 0xc
mov eax, dword [edi + 0xb4]
cmp eax, dword [edi + 0xb0]
jg 0x43dafa
jmp case.0x43c8b9.39
mov eax, dword [esp + 0x10]
dec eax
push eax
push dword [esp + 0x10]
push edi
call fcn.004416e0
jmp 0x43d59a
mov eax, dword [edi + 0x54]
mov esi, dword [eax + 0x14]
sub esi, dword [eax + 0x10]
sar esi, 3
sub esi, dword [esp + 0xc]
inc esi
cmp dword [edi + 0x960], 0x66
jne 0x43d6f9
xor eax, eax
mov dword [edi + 0x7a], 0x15800000
mov ecx, edi
mov word [edi + 0x78], ax
call fcn.0045b770
push edi
mov dword [edi + 0x958], 0
call fcn.004394d0
add esp, 4
lea eax, [esi - 1]
push eax
push dword [esp + 0x10]
push edi
call fcn.0043e220
jmp 0x43d59a
mov ecx, dword [esp + 0x1c]
push 0
push ecx
push edi
call fcn.0043f640
mov edx, dword [esp + 0x18]
add esp, 0xc
mov ecx, 0x8000
test eax, eax
je 0x43d5a6
mov eax, dword [edi + 8]
mov dword [edi + 0x11c], eax
jmp 0x43d5a6
mov ecx, dword [esp + 0x1c]
push 0
push ecx
push edi
call fcn.0043f640
add esp, 0xc
test eax, eax
je case.0x43c8b9.39
mov eax, dword [esp + 0x1c]
movzx eax, word [eax + esi*4 - 0x1fffe]
push eax
push 1
push edi
call fcn.0043ed20
jmp 0x43d59a
mov eax, dword [esp + 0x1c]
push 1
lea eax, [eax + esi*4]
add eax, 0xfffe0000
push eax
push edi
call fcn.0043f640
push eax
push dword [esp + 0x2c]
push edi
call fcn.00440630
add esp, 0x18
jmp case.0x43c8b9.39
mov eax, dword [esp + 0x1c]
push dword [eax]
push edi
call fcn.00440410
push eax
push dword [esp + 0x28]
push edi
call fcn.00440630
add esp, 0x14
jmp case.0x43c8b9.39
mov ecx, dword [esp + 0x10]
push ecx
push dword [esp + 0x10]
push edi
call fcn.00440480
push eax
push dword [esp + 0x2c]
push edi
call fcn.00440630
add esp, 0x18
jmp case.0x43c8b9.39
push 1
push dword [esp + 0x10]
push edi
call fcn.00440610
push eax
push dword [esp + 0x2c]
push edi
call fcn.00440630
add esp, 0x18
jmp case.0x43c8b9.39
mov eax, dword [edi + 0x138]
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffe0000
push 1
mov eax, dword [eax + esi*4]
movzx eax, word [eax + 0x2e]
lea eax, [ecx + eax*4]
push eax
push edi
call fcn.0043f640
push eax
push esi
push edi
call fcn.00440750
add esp, 0x18
jmp case.0x43c8b9.39
mov eax, dword [edi + 0x138]
mov eax, dword [eax + esi*4]
push dword [eax + 0x2c]
push edi
call fcn.00440410
push eax
push esi
push edi
call fcn.00440750
add esp, 0x14
jmp case.0x43c8b9.39
mov eax, dword [edi + 0x138]
mov eax, dword [eax + esi*4]
mov eax, dword [eax + 0x2c]
and eax, 0xff
cmp eax, 0x49
je 0x43d876
cmp eax, 0x4a
je 0x43d876
cmp eax, 0x4b
je 0x43d876
cmp eax, 0x4c
je 0x43d876
mov eax, 1
jmp 0x43d878
xor eax, eax
push eax
push dword [esp + 0x10]
push edi
call fcn.00440610
push eax
push esi
push edi
call fcn.00440750
add esp, 0x18
jmp case.0x43c8b9.39
mov edx, dword [esp + 0xc]
mov ecx, 0x8000
cmp edx, dword [edi + 0x6c]
jae 0x43d5a6
mov dword [edi + 0x6c], edx
jmp 0x43d5a6
mov eax, dword [edi + 0x54]
mov ecx, dword [esp + 0xc]
add ecx, 0xfffffffd
mov edx, dword [eax + 0x10]
cmp dword [edx + ecx*8 + 4], 0xfffffff7
jne 0x43db0a
mov eax, dword [edx + ecx*8]
cmp byte [eax + 6], 4
jne 0x43db0a
cmp dword [edx + ecx*8 + 0xc], 0xfffffff4
jne 0x43db0a
cmp dword [edx + ecx*8 + 0x14], 0xffffffff
jne 0x43db0a
mov eax, dword [edi + 0x64]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x43d8fc
push ecx
push edi
call fcn.00441eb0
add esp, 8
mov ecx, edi
mov dword [edi + 0x7a], 0x45100003
mov word [edi + 0x78], ax
call fcn.0045b770
mov edx, 4
mov ecx, edi
mov esi, eax
call fcn.00451e80
movzx ecx, ax
mov eax, 0x893
mov word [edi + 0x7a], cx
mov ecx, edi
mov word [edi + 0x7c], ax
mov word [edi + 0x78], si
call fcn.0045b770
mov esi, dword [esp + 0xc]
mov eax, dword [edi + 0x64]
lea ecx, [esi - 2]
cmp dword [eax + ecx*4], 0
jne 0x43d951
push ecx
push edi
call fcn.00441eb0
add esp, 8
mov eax, dword [edi + 0x64]
cmp dword [eax + esi*4 - 4], 0
jne 0x43d968
lea eax, [esi - 1]
push eax
push edi
call fcn.00441eb0
add esp, 8
xor edx, edx
mov ecx, edi
call fcn.00451e80
mov edx, dword [esp + 0xc]
or eax, 0x100000
mov ecx, dword [edi + 0x64]
mov esi, dword [esp + 0x14]
mov dword [ecx + edx*4 - 4], eax
mov dword [edi + 0x6c], edx
jmp 0x43d5a1
push edi
call fcn.0043fd90
mov eax, dword [edi + 0x138]
add esp, 4
mov eax, dword [eax + esi*4]
mov dword [esp + 0x30], eax
cmp byte [eax + 0x4c], 7
jne 0x43d9d2
push esi
push edi
call fcn.0043b7d0
mov ecx, dword [edi + 0x58]
add esp, 8
mov eax, dword [ecx]
mov dword [edi + 0x934], eax
mov eax, dword [esp + 0x30]
mov dword [edi + 0x930], ecx
mov eax, dword [eax + 0x2c]
mov dword [ecx], eax
jmp case.0x43c8b9.39
mov eax, dword [edi + 0x58]
mov dword [edi + 0xac], 0
cmp eax, dword [edi + 0x920]
jne 0x43da07
mov eax, dword [edi + 0xbc]
add eax, dword [edi + 0xb8]
jne 0x43da07
movzx eax, word [edi + 0x40]
push eax
push 3
push edi
call fcn.0043ed20
jmp 0x43d59a
push esi
push 1
push edi
call fcn.0043ed20
jmp 0x43d59a
mov eax, dword [edi + 0x60]
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x30], eax
inc edx
mov dword [esp + 0x28], edx
movzx eax, byte [eax + 7]
add eax, dword [edi + 0x70]
add eax, edx
cmp eax, 0xfa
jae 0x43db12
mov ecx, dword [edi + 0x64]
shl edx, 2
mov dword [esp + 0x18], edx
mov eax, dword [ecx - 4]
mov dword [ecx + edx - 4], eax
mov eax, dword [esp + 0x30]
movzx ecx, byte [eax + 6]
cmp ecx, dword [edi + 0x6c]
cmovae ecx, dword [edi + 0x6c]
xor edx, edx
mov dword [esp + 0x30], ecx
test ecx, ecx
je 0x43da8a
mov esi, dword [esp + 0x18]
mov ecx, dword [edi + 0x64]
lea esi, [esi + 4]
mov eax, dword [ecx + edx*4]
mov dword [esi + ecx - 4], eax
mov eax, dword [edi + 0x64]
mov ecx, dword [esp + 0x30]
mov dword [eax + edx*4], 0x7fff
inc edx
cmp edx, ecx
jb 0x43da66
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
add dword [edi + 0x64], eax
inc dword [edi + 0xb8]
mov eax, dword [esp + 0x28]
add dword [edi + 0x70], eax
mov dword [edi + 0x6c], ecx
push edi
call fcn.0043fd90
push 0
push edi
call fcn.0043b7d0
jmp 0x43d59a
push edi
call fcn.00461d20
add esp, 4
jmp case.0x43c8b9.39
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
push 7
push edi
movsd qword [edi + 0x950], xmm0
call fcn.00414d20
push 8
push edi
call fcn.00414ce0
push 0x12
push edi
call fcn.00414ce0
div byte [ecx - 3]
jno 0x43dae6
jmp [edx + 2]
push 2
push edi
call fcn.00414ce0
push 0x10
push edi
call fcn.00414ce0
push 0xa
push edi
call fcn.00414ce0
push 5
push edi
call fcn.00414ce0
push 0
push edi
call fcn.00414ce0
push 3
push edi
call fcn.00414ce0
nop
push eax
lds eax, [ebx]
jb 0x43dae7
inc ebx
add byte [edx - 0x3b], dh
inc ebx
add byte [ecx - 0xeffbc3b], ch
lds eax, [ebx]
aaa
mov byte [ebx], 82
enter 0x43, 0xffffffffffffffa1
enter 0x43, 0xffffffffffffffa1
enter 0x43, 0xffffffffffffffa1
enter 0x43, 0xffffffffffffffa1
enter 0x43, 0xffffffffffffff85
enter 0x43, 0xffffffffffffffc0
enter 0x43, 0x1c
leave
inc ebx
add byte [esi - 0x37], cl
inc ebx
add byte [edx], cl
int3