Function at 0x10043580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xac
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov ebx, edx
imul eax, ebx, 0x544
xor esi, esi
push 0x2c
push esi
mov ecx, dword [edi + 0x28]
lea ebp, [edi + 0x2c]
mov dword [esp + 0x88], ecx
add ebp, eax
mov eax, dword [edi]
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 0x24]
mov dword [esp + 0x58], ebp
lea eax, [ecx + eax*4]
mov dword [esp + 0x90], eax
mov eax, dword [edi + 0xabc]
mov ecx, dword [eax + 0x28]
mov eax, 0x24924925
mul ecx
lea eax, [esp + 0x98]
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 3
push eax
mov dword [esp + 0x88], ecx
call fcn.101b7b50
mov eax, dword [ebp + 0x18]
add esp, 0xc
mov dword [ebp], esi
mov ecx, dword [edi + 0x18]
cdq
xor eax, edx
mov dword [esp + 0xac], 0x7d00
sub eax, edx
mov byte [esp + 0x90], 0
mov edx, dword [edi + 0x1c]
lea ecx, [ecx + ecx*4]
shl ecx, 3
add ecx, edx
mov dword [esp + 0x70], eax
mov dword [esp + 0x84], eax
test ebx, ebx
jne 0x1004364b
cmp edx, ecx
jae 0x10043665
movsx eax, word [edx + 0xc]
mov dword [edx + 0x18], eax
movsx eax, word [edx + 0xe]
mov dword [edx + 0x1c], eax
add edx, 0x28
cmp edx, ecx
jb 0x10043634
jmp 0x10043665
cmp edx, ecx
jae 0x10043665
nop
movsx eax, word [edx + 0xe]
mov dword [edx + 0x18], eax
movsx eax, word [edx + 0xc]
mov dword [edx + 0x1c], eax
add edx, 0x28
cmp edx, ecx
jb 0x10043650
mov eax, dword [esp + 0x80]
cmp eax, dword [esp + 0x88]
jae 0x10043f13
nop dword [eax]
mov ebx, dword [eax]
xor edx, edx
mov eax, 0x7d00
mov dword [esp + 0x10], edx
mov dword [esp + 0x34], eax
mov edi, 0xffff8300
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x2c], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x1c], edi
mov cl, byte [eax + 3]
movsx edx, cl
mov eax, edx
mov dword [esp + 0x28], edi
neg eax
mov dword [esp + 0x4c], 0x7d00
test cl, cl
mov dword [esp + 0x44], edi
mov dword [esp + 0x54], 0x7d00
cmovns eax, edx
mov dword [esp + 0x58], edi
mov dword [esp + 0x68], 0x7d00
mov dword [esp + 0x60], edi
cmp eax, dword [esp + 0x70]
jne 0x10043734
mov cl, byte [ebx + 3]
movsx edx, cl
mov eax, edx
neg eax
test cl, cl
cmovns eax, edx
cmp eax, dword [esp + 0x70]
jne 0x10043734
mov dword [esp + 0x78], ebx
mov ebx, dword [ebx + 0x24]
mov cl, byte [ebx + 3]
movsx edx, cl
mov eax, edx
neg eax
test cl, cl
cmovns eax, edx
cmp eax, dword [esp + 0x70]
jne 0x10043731
cmp ebx, dword [esp + 0x78]
jne 0x10043711
jmp 0x10043734
mov ebx, dword [ebx + 0x20]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x78], ebx
mov byte [esp + 0x32], 0
mov edx, edi
test eax, eax
je 0x10043ab3
mov edi, dword [ebx + 0x18]
mov ecx, edi
cmp edi, dword [esp + 0x34]
mov eax, dword [ebx + 0x1c]
cmovge ecx, dword [esp + 0x34]
cmp edi, edx
mov dword [esp + 0x34], ecx
cmovle edi, edx
mov dword [esp + 0x14], ecx
cmp eax, dword [esp + 0x20]
jge 0x1004377a
movzx ecx, word [ebx]
mov dword [esp + 0x20], eax
mov dword [esp + 0x40], ecx
cmp eax, dword [esp + 0x1c]
jle 0x1004378b
movzx ecx, word [ebx]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x3c], ecx
test byte [ebx], 3
mov edx, dword [esp + 0x28]
jne 0x100437aa
mov ecx, dword [esp + 0x18]
cmp eax, ecx
cmovl ecx, eax
cmp eax, edx
mov dword [esp + 0x18], ecx
cmovg edx, eax
mov dword [esp + 0x28], edx
movsx eax, byte [ebx + 3]
cmp eax, dword [esp + 0x84]
jne 0x100437c1
cmp ebx, dword [esp + 0x78]
jne 0x10043ee9
mov eax, dword [esp + 0x38]
test eax, eax
je 0x10043a0d
mov eax, dword [eax + 0x28]
cmp dword [esi + 0x24], eax
jne 0x10043a0d
mov al, byte [eax + 2]
cmp al, byte [ebx + 2]
jne 0x100438bf
mov eax, dword [esp + 0x14]
mov ecx, eax
cmp dword [esp + 0x4c], eax
mov eax, dword [esp + 0x54]
cmovl ecx, dword [esp + 0x4c]
cmp dword [esp + 0x44], edi
mov dword [esp + 0x34], ecx
cmovg edi, dword [esp + 0x44]
cmp eax, dword [esp + 0x20]
jge 0x1004381a
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x64]
movzx eax, ax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x58]
cmp eax, dword [esp + 0x1c]
jle 0x10043833
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
movzx eax, ax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x68], eax
mov esi, dword [esp + 0x38]
cmovl eax, dword [esp + 0x68]
cmp dword [esp + 0x60], edx
mov dword [esp + 0x18], eax
lea eax, [edi + ecx]
cmovg edx, dword [esp + 0x60]
sar eax, 1
mov word [esi + 2], ax
mov eax, edi
sub eax, ecx
mov dword [esp + 0x28], edx
sar eax, 1
mov word [esi + 4], ax
mov al, byte [esp + 0x3c]
or al, byte [esp + 0x40]
mov dword [esi + 0x28], ebx
test al, 3
je 0x10043888
mov eax, edx
sub eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x7c]
jge 0x10043888
or byte [esi], 1
jmp 0x1004388b
and byte [esi], 0xfe
mov eax, dword [esp + 0x20]
xor edx, edx
movzx ecx, ax
mov eax, dword [esp + 0x1c]
movzx eax, ax
mov word [esi + 8], ax
sub eax, ecx
mov word [esi + 6], cx
mov ecx, dword [esp + 0x38]
mov word [esi + 0xa], ax
dec dword [ebp]
xor esi, esi
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], edx
jmp 0x10043abf
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x54]
cdq
mov ecx, eax
mov eax, dword [esp + 0x1c]
sub eax, dword [esp + 0x20]
xor ecx, edx
sub ecx, edx
cdq
xor eax, edx
sub eax, edx
cmp ecx, eax
jle 0x1004392e
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x4c]
cmp edx, esi
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x38]
cmovl esi, edx
cmp edi, eax
mov dword [esp + 0x4c], esi
cmovg eax, edi
mov dword [esp + 0x44], eax
add eax, esi
sar eax, 1
mov word [ecx + 2], ax
mov eax, dword [esp + 0x44]
sub eax, esi
mov dword [ecx + 0x28], ebx
sar eax, 1
mov word [ecx + 4], ax
mov eax, edx
dec dword [ebp]
xor edx, edx
mov dword [esp + 0x34], eax
xor esi, esi
mov dword [esp + 0x10], edx
jmp 0x10043abf
mov eax, dword [esp + 0x14]
mov ecx, eax
cmp dword [esp + 0x4c], eax
mov dword [esi + 0x28], ebx
cmovl ecx, dword [esp + 0x4c]
cmp dword [esp + 0x44], edi
mov dword [esp + 0x34], ecx
cmovg edi, dword [esp + 0x44]
lea eax, [edi + ecx]
sar eax, 1
mov word [esi + 2], ax
mov eax, edi
sub eax, ecx
sar eax, 1
mov word [esi + 4], ax
mov al, byte [esp + 0x3c]
or al, byte [esp + 0x40]
test al, 3
je 0x1004397d
mov edx, dword [esp + 0x28]
sub edx, dword [esp + 0x18]
cmp edx, dword [esp + 0x7c]
jge 0x1004397d
or byte [esi], 1
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
movzx ecx, ax
mov eax, dword [esp + 0x1c]
mov word [esi + 6], cx
movzx eax, ax
mov word [esi + 8], ax
sub eax, ecx
mov ecx, dword [esp + 0x38]
mov word [esi + 0xa], ax
movups xmm0, xmmword [esi]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x1c]
movups xmmword [ecx], xmm0
mov dword [esp + 0x58], edx
movups xmm0, xmmword [esi + 0x10]
mov edx, dword [esp + 0x40]
movzx edx, dx
movups xmmword [ecx + 0x10], xmm0
mov dword [esp + 0x64], edx
movq xmm0, qword [esi + 0x20]
movq qword [ecx + 0x20], xmm0
mov eax, dword [esi + 0x28]
mov esi, dword [esp + 0x3c]
movzx edx, si
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x28]
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x34]
dec dword [ebp]
mov dword [esp + 0x60], edx
xor edx, edx
mov dword [esp + 0x4c], eax
xor esi, esi
mov dword [esp + 0x44], edi
mov dword [esp + 0x10], edx
jmp 0x10043abf
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
add eax, edi
sar eax, 1
mov word [esi + 2], ax
mov eax, edi
sub eax, dword [esp + 0x14]
sar eax, 1
mov word [esi + 4], ax
mov al, byte [esp + 0x3c]
or al, byte [esp + 0x40]
mov dword [esi + 0x28], ebx
test al, 3
je 0x10043a45
mov eax, edx
sub eax, ecx
cmp eax, dword [esp + 0x7c]
jge 0x10043a45
or byte [esi], 1
mov eax, dword [esp + 0x20]
movzx ecx, ax
mov eax, dword [esp + 0x1c]
mov word [esi + 6], cx
movzx eax, ax
mov word [esi + 8], ax
sub eax, ecx
mov word [esi + 0xa], ax
mov ecx, esi
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x40]
movzx ebp, si
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x64], ebp
movzx ebp, si
mov esi, dword [esp + 0x18]
mov dword [esp + 0x60], edx
xor edx, edx
mov dword [esp + 0x68], esi
xor esi, esi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], eax
mov dword [esp + 0x10], edx
jmp 0x10043abf
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x2c]
movzx edx, dx
mov dword [esp + 0x5c], edx
movzx edx, bp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x3c]
movzx edx, dx
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x40]
movzx edx, dx
mov dword [esp + 0x14], edx
cmp ebx, dword [esp + 0x78]
jne 0x10043bd5
cmp byte [esp + 0x32], 0
jne 0x10043ef5
cmp dword [esp + 0x6c], 0
mov edx, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x14]
movzx eax, dx
mov dword [esp + 0x2c], eax
movzx eax, dx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x40], eax
movzx eax, dx
mov dword [esp + 0x48], eax
movzx eax, dx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x58], eax
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x8c]
movzx eax, cx
mov dword [esp + 0x8c], eax
movzx eax, cx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x64], eax
movzx eax, cx
mov dword [esp + 0x5c], eax
movzx eax, cx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x60], eax
mov byte [esp + 0x32], 1
jne 0x10043ee9
mov dl, byte [ebx + 3]
movsx ecx, dl
mov eax, ecx
mov byte [esp + 0x33], dl
neg eax
test dl, dl
cmovns eax, ecx
cmp eax, dword [esp + 0x70]
je 0x10043bf7
cmp ebx, dword [ebx + 0x24]
jne 0x10043ee9
mov edi, ebp
mov dword [esp + 0x84], ecx
xor edx, edx
xor esi, esi
mov dword [esp + 0x24], edx
mov eax, dword [edi]
cmp eax, 0x12
jge 0x10043c2a
cmp dword [edi + 8], edx
jne 0x10043e14
lea eax, [edi + 0x1c]
mov dword [edi + 4], 0x12
mov dword [edi + 8], eax
jmp 0x10043e14
mov ecx, dword [edi + 4]
mov dword [esp + 0x6c], ecx
cmp eax, ecx
jl 0x10043e14
cmp ecx, 0x2e8ba2e
jge 0x10043fb0
mov ebp, ecx
sar ebp, 2
add ebp, 4
add ebp, ecx
cmp ebp, ecx
jl 0x10043c5b
cmp ebp, 0x2e8ba2e
jle 0x10043c60
mov ebp, 0x2e8ba2e
mov edx, dword [edi + 8]
lea eax, [edi + 0x1c]
mov dword [esp + 0x5c], edx
cmp edx, eax
jne 0x10043d2b
test ebp, ebp
js 0x10043f94
je 0x10043d0b
cmp ebp, 0x2e8ba2e
jg 0x10043f7f
mov eax, dword [esp + 0x74]
mov ecx, eax
imul edx, ebp, 0x2c
mov eax, dword [eax + 4]
call eax
mov ecx, eax
xor edx, edx
test ecx, ecx
mov dword [esp + 0x6c], ecx
mov eax, 0x40
mov dword [esp + 0x14], ecx
cmovne eax, edx
mov edx, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x10], edx
je 0x10043ce1
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
test ebp, ebp
jle 0x10043ce1
imul eax, ebp, 0x2c
push eax
push 0
push ecx
call fcn.101b7b50
mov eax, dword [esp + 0x78]
add esp, 0xc
mov edx, dword [esp + 0x24]
jmp 0x10043d13
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], edx
mov dword [edi + 8], eax
cmp dword [esp + 0x10], esi
jne 0x10043e1f
lea esi, [edi + 0x1c]
mov ecx, 0xc6
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x50]
jmp 0x10043e11
xor eax, eax
xor edx, edx
mov dword [esp + 0x24], edx
mov dword [edi + 8], eax
lea esi, [edi + 0x1c]
mov ecx, 0xc6
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x50]
jmp 0x10043e11
mov dword [esp + 0x14], esi
test ecx, ecx
js 0x10043fd7
test ebp, ebp
js 0x10043fd7
je 0x10043df9
cmp ebp, 0x2e8ba2e
jg 0x10043fc2
imul eax, ebp, 0x2c
test ecx, ecx
jne 0x10043d8d
mov edx, eax
mov eax, dword [esp + 0x74]
mov ecx, eax
mov eax, dword [eax + 4]
call eax
mov edx, eax
xor ecx, ecx
test edx, edx
mov dword [esp + 0x10], edx
mov eax, 0x40
cmovne eax, ecx
mov ecx, edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], eax
je 0x10043de6
mov dword [esp + 0x28], edx
mov dword [esp + 0x14], eax
jmp 0x10043db5
push edx
push eax
mov eax, dword [esp + 0x7c]
imul edx, ecx, 0x2c
mov ecx, eax
mov eax, dword [eax + 0xc]
call eax
mov edx, eax
mov dword [esp + 0x28], edx
test edx, edx
je 0x10043fa9
xor eax, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x6c]
cmp ebp, ecx
jle 0x10043de2
mov eax, ebp
sub eax, ecx
imul eax, eax, 0x2c
push eax
imul eax, ecx, 0x2c
push 0
add eax, edx
push eax
call fcn.101b7b50
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov edx, dword [esp + 0x24]
mov dword [edi + 8], eax
jmp 0x10043e11
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x14]
mov edx, eax
mov dword [esp + 0x24], edx
mov dword [edi + 8], ecx
test eax, eax
jne 0x10043e1f
jmp 0x10043e11
test edx, edx
je 0x10043e08
mov eax, dword [esp + 0x74]
mov ecx, eax
mov eax, dword [eax + 8]
call eax
xor edx, edx
mov dword [edi + 8], esi
mov dword [esp + 0x24], edx
mov dword [edi + 4], ebp
mov eax, dword [edi]
imul esi, eax, 0x2c
add esi, dword [edi + 8]
inc eax
mov dword [edi], eax
test edx, edx
jne 0x10044018
movups xmm0, xmmword [esp + 0x90]
mov al, byte [esp + 0x33]
movups xmmword [esi], xmm0
movups xmm0, xmmword [esp + 0xa0]
movups xmmword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0xb0]
movq qword [esi + 0x20], xmm0
mov byte [esi + 1], al
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
cmp dword [esp + 0x38], edx
je 0x10043e66
lea eax, [esi - 0x2c]
mov dword [esp + 0x38], eax
movzx eax, word [ebx]
mov ecx, dword [ebx + 0x1c]
mov edx, eax
mov edi, dword [ebx + 0x18]
mov dword [esp + 0x3c], edx
movzx edx, dx
mov dword [esp + 0x34], edi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x40], edx
test al, 3
je 0x10043e9e
mov dword [esp + 0x18], 0x7d00
mov dword [esp + 0x28], 0xffff8300
jmp 0x10043ea8
mov eax, ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov eax, 1
mov dword [esp + 0x10], eax
cmp ebx, dword [ebx + 0x24]
jne 0x10043edd
mov word [esi + 2], di
test byte [ebx], 3
je 0x10043ec1
or byte [esi], al
movzx eax, word [ebx + 0x1c]
mov word [esi + 6], ax
movzx eax, word [ebx + 0x1c]
mov word [esi + 8], ax
xor eax, eax
mov word [esi + 0xa], ax
xor esi, esi
mov dword [esp + 0x10], eax
mov ebp, dword [esp + 0x50]
mov ebx, dword [ebx + 0x20]
jmp 0x10043741
mov eax, dword [esp + 0x10]
mov ebx, dword [ebx + 0x20]
jmp 0x10043741
mov eax, dword [esp + 0x80]
add eax, 4
mov dword [esp + 0x80], eax
cmp eax, dword [esp + 0x88]
jb 0x10043680
mov eax, dword [ebp + 8]
test eax, eax
je 0x10044014
imul edx, dword [ebp], 0x2c
add edx, eax
cmp eax, edx
jae 0x10044014
sub edx, eax
lea ecx, [eax + 0xa]
dec edx
mov eax, 0xba2e8ba3
mul edx
mov ebx, edx
shr ebx, 5
inc ebx
nop
mov eax, dword [ecx + 0x1a]
mov edi, dword [ecx + 0x1e]
mov esi, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
mov edx, dword [edi + 0x1c]
mov eax, dword [eax + 0x1c]
cmp esi, edx
jge 0x10043fec
cmp eax, esi
jge 0x10043f65
sub esi, eax
sar esi, 1
add word [ecx], si
mov eax, dword [edi + 0x20]
mov eax, dword [eax + 0x1c]
cmp eax, edx
jle 0x10044008
sub eax, edx
sar eax, 1
add word [ecx], ax
jmp 0x10044008
mov dword [edi + 8], esi
mov edx, 0xa
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0xac
ret
mov dword [edi + 8], esi
mov edx, 6
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0xac
ret
mov eax, dword [esp + 0x5c]
mov dword [edi + 8], eax
pop edi
pop esi
mov edx, 0x40
pop ebp
mov eax, edx
pop ebx
add esp, 0xac
ret
mov dword [edi + 8], edx
mov edx, 0xa
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0xac
ret
mov dword [edi + 8], edx
mov edx, 6
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0xac
ret
cmp eax, esi
jle 0x10043ff7
sub eax, esi
sar eax, 1
add word [ecx], ax
mov eax, dword [edi + 0x20]
mov eax, dword [eax + 0x1c]
cmp eax, edx
jge 0x10044008
sub edx, eax
sar edx, 1
add word [ecx], dx
add ecx, 0x2c
sub ebx, 1
jne 0x10043f40
mov edx, dword [esp + 0x24]
pop edi
pop esi
pop ebp
mov eax, edx
pop ebx
add esp, 0xac
ret