Function at 0x43b250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x65a406
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x6af168]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push esi
push edi
mov eax, dword [0x6af168]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
lea ebx, [ecx + 0x89c]
mov dword [esp + 0x28], ecx
xor edi, edi
mov dword [esp + 0x48], ebx
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x43b2e5
mov eax, dword [ebx + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x43b2e5
test ecx, ecx
je 0x43b2c3
mov eax, dword [ebx + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x43b2c8
call fcn.0062492b
mov eax, dword [ebx + 4]
mov esi, dword [eax + edi*4]
test esi, esi
je 0x43b2e0
call fcn.00428bb0
push esi
call fcn.0062493b
add esp, 4
add edi, 1
jmp 0x43b2a0
mov edi, dword [ebx + 8]
cmp ecx, edi
jbe 0x43b2f1
call fcn.0062492b
mov esi, dword [ebx + 4]
cmp esi, dword [ebx + 8]
jbe 0x43b2fe
call fcn.0062492b
cmp esi, edi
je 0x43b32f
mov eax, dword [ebx + 8]
sub eax, edi
sar eax, 2
test eax, eax
lea ecx, [eax*4]
lea edx, [ecx + esi]
mov dword [esp + 0x14], edx
jle 0x43b328
push ecx
push edi
push ecx
push esi
call fcn.0062494f
add esp, 0x10
mov eax, dword [esp + 0x14]
mov dword [ebx + 8], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 0xbe8]
xor edx, edx
cmp dword [eax + 0x930], edx
je 0x43ba3d
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], 3
mov dword [esp + 0x58], 1
mov dword [esp + 0x5c], 2
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 0xbe8]
mov edi, dword [eax + 0x930]
mov ecx, dword [edi + 0x13c]
test ecx, ecx
mov dword [esp + 0x18], edx
jne 0x43b385
xor eax, eax
jmp 0x43b390
mov eax, dword [edi + 0x140]
sub eax, ecx
sar eax, 2
cmp edx, eax
jge 0x43ba3d
xor esi, esi
cmp ecx, esi
je 0x43b3af
mov eax, dword [edi + 0x140]
sub eax, ecx
sar eax, 2
cmp dword [esp + edx*4 + 0x50], eax
jb 0x43b3b8
call fcn.0062492b
mov edx, dword [esp + 0x18]
mov ecx, dword [edi + 0x13c]
mov edx, dword [esp + edx*4 + 0x50]
cmp dword [ecx + edx*4], esi
je case.default.0x43b7a9
push 0x88
call fcn.00624a6a
add esp, 4
cmp eax, esi
je 0x43b415
mov dword [eax + 0x14], esi
mov ecx, 0xf
mov dword [eax + 0x18], ecx
mov byte [eax + 4], 0
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x38], esi
mov byte [eax + 0x28], 0
mov dword [eax + 0x40], esi
mov dword [eax + 0x44], esi
mov dword [eax + 0x48], esi
mov dword [eax + 0x4c], esi
mov dword [eax + 0x1c], esi
mov dword [eax + 0x50], esi
mov dword [eax + 0x54], esi
mov dword [eax + 0x58], esi
mov byte [eax + 0x68], 0
mov edi, eax
jmp 0x43b417
xor edi, edi
mov ecx, dword [ebx + 4]
test ecx, ecx
mov dword [esp + 0x14], edi
jne 0x43b426
xor edx, edx
jmp 0x43b42e
mov edx, dword [ebx + 8]
sub edx, ecx
sar edx, 2
test ecx, ecx
je 0x43b44b
mov eax, dword [ebx + 0xc]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x43b44b
mov eax, dword [ebx + 8]
mov dword [eax], edi
add eax, 4
mov dword [ebx + 8], eax
jmp 0x43b46a
mov esi, dword [ebx + 8]
cmp ecx, esi
jbe 0x43b457
call fcn.0062492b
push esi
push ebx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x2c]
push eax
mov eax, ebx
call fcn.00445bf0
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + esi*4 + 0x50]
push ebx
lea ecx, [esp + 0x64]
push str.Trophy:_d
push ecx
call fcn.004e7a20
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
mov ecx, edi
mov dword [esp + 0xbc], 0
call fcn.00401d10
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x78], 0x10
jb 0x43b4bb
mov edx, dword [esp + 0x64]
push edx
call fcn.0062493b
add esp, 4
fldz
mov byte [edi + 0x84], 0
fstp dword [edi + 0x7c]
add esi, 0x3e8
cmp ebx, 3
fld1
mov dword [edi + 0x74], ebx
fst dword [edi + 0x80]
mov dword [edi + 0x70], esi
fst dword [edi + 0x64]
mov dword [edi + 0x1c], 0
mov byte [edi + 0x68], 0
fstp dword [edi + 0x6c]
mov dword [edi + 0x78], 0xffffffff
ja case.default.0x43b504
mov eax, dword [esp + 0x18]
mov eax, dword [esp + eax*4 + 0x50]
jmp dword [eax*4 + 0x43c344]
mov ebx, dword [esp + 0x28]
mov ecx, dword [ebx + 0xbe8]
mov esi, dword [ecx + 0x930]
mov ecx, dword [esi + 0x13c]
add esi, 0x138
test ecx, ecx
je 0x43b538
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 3
ja 0x43b53d
call fcn.0062492b
mov edx, dword [esi + 4]
cmp dword [edx + 0xc], 0
je 0x43b5ca
mov eax, dword [ebx + 0xbe8]
mov esi, dword [eax + 0x930]
mov ecx, dword [esi + 0x13c]
add esi, 0x138
test ecx, ecx
je 0x43b573
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 1
ja 0x43b578
call fcn.0062492b
mov ecx, dword [esi + 4]
cmp dword [ecx + 4], 0
je 0x43b5ca
mov edx, dword [ebx + 0xbe8]
mov esi, dword [edx + 0x930]
mov ecx, dword [esi + 0x13c]
add esi, 0x138
test ecx, ecx
je 0x43b5aa
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 2
ja 0x43b5af
call fcn.0062492b
mov eax, dword [esi + 4]
cmp dword [eax + 8], 0
je 0x43b5ca
push str.All_trophies_located__You_are_maximum_
lea ecx, [edi + 0x24]
call fcn.004022b0
jmp case.default.0x43b504
mov ecx, dword [ebx + 0xbe8]
mov esi, dword [ecx + 0x930]
mov ecx, dword [esi + 0x13c]
add esi, 0x138
test ecx, ecx
je 0x43b5f3
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 3
ja 0x43b5f8
call fcn.0062492b
mov esi, dword [esi + 4]
mov edx, dword [ebx + 0xbe8]
add esi, 0xc
mov dword [esp + 0x14], esi
mov esi, dword [edx + 0x930]
mov ecx, dword [esi + 0x13c]
add esi, 0x138
test ecx, ecx
je 0x43b62b
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 1
ja 0x43b630
call fcn.0062492b
mov eax, dword [esp + 0x28]
mov ebx, dword [esi + 4]
mov ecx, dword [eax + 0xbe8]
mov esi, dword [ecx + 0x930]
mov ecx, dword [esi + 0x13c]
add esi, 0x138
add ebx, 4
test ecx, ecx
je 0x43b663
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 2
ja 0x43b668
call fcn.0062492b
mov edx, dword [esi + 4]
xor eax, eax
cmp dword [edx + 8], eax
mov edx, dword [esp + 0x14]
sete al
xor ecx, ecx
cmp dword [edx], ecx
sete cl
add eax, ecx
xor ecx, ecx
cmp dword [ebx], ecx
mov dword [esp + 0x9c], 0xf
sete cl
mov dword [esp + 0x98], 0
mov byte [esp + 0x88], 0
add eax, ecx
sub eax, 1
mov dword [esp + 0xb0], 1
lea ecx, [esp + 0x84]
je 0x43b6d5
sub eax, 1
je 0x43b6cc
push 0x14
push str.other_trophies_three
jmp 0x43b6dc
push 0x12
push str.other_trophies_two
jmp 0x43b6dc
push 0xc
push str.trophy_final
call fcn.00402300
mov eax, dword [esp + 0x88]
mov esi, 0x10
cmp dword [esp + 0x9c], esi
jae 0x43b6fd
lea eax, [esp + 0x88]
push eax
lea edx, [esp + 0x64]
push str.Glorious_completing__But_can_you_locate__s_
push edx
call fcn.004e7a20
add esp, 0xc
push 0xffffffffffffffff
push 0
lea ecx, [edi + 0x24]
push eax
mov byte [esp + 0xbc], 2
call fcn.00401d10
cmp dword [esp + 0x78], esi
jb 0x43b738
mov eax, dword [esp + 0x64]
push eax
call fcn.0062493b
add esp, 4
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x9c], esi
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
jb case.default.0x43b504
mov ecx, dword [esp + 0x88]
push ecx
call fcn.0062493b
add esp, 4
jmp case.default.0x43b504
push 0x22
push str.For_acing_all_levels__this_trophy_
jmp 0x43b78c
push 0x2d
push str.For_clearing_all_levels__this_shinier_trophy_
jmp 0x43b78c
push 0x30
push str.For_beating_all_challenges__this_shinest_trophy_
lea ecx, [edi + 0x24]
call fcn.00402300
mov edx, dword [esp + 0x18]
cmp dword [esp + edx*4 + 0x50], 3
ja case.default.0x43b7a9
mov eax, edx
mov eax, dword [esp + eax*4 + 0x50]
jmp dword [eax*4 + 0x43c354]
mov eax, 0x1d8
mov dword [edi + 0x40], eax
mov ecx, 0xde
mov dword [edi + 0x44], ecx
mov edx, 0x2a
mov dword [edi + 0x48], edx
mov esi, 0x55
mov dword [edi + 0x4c], esi
mov ecx, dword [edi + 0x40]
sub ecx, 7
mov dword [edi + 0x5c], ecx
mov edx, dword [edi + 0x44]
sub edx, 0x32
lea eax, [esi - 0x54]
mov dword [edi + 0x60], edx
call fcn.0041bc10
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x48]
mov dword [edi + 0x20], eax
add edx, 1
jmp 0x43b363
mov eax, 0x13e
mov dword [edi + 0x40], eax
mov ecx, 0xf3
mov dword [edi + 0x44], ecx
mov edx, 0x2a
mov dword [edi + 0x48], edx
mov esi, 0x4e
mov dword [edi + 0x4c], esi
mov eax, dword [edi + 0x40]
sub eax, 0xd
mov dword [edi + 0x5c], eax
mov ecx, dword [edi + 0x44]
sub ecx, 0x37
lea eax, [edx - 0x27]
mov dword [edi + 0x60], ecx
call fcn.0041bc10
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x48]
mov dword [edi + 0x20], eax
add edx, 1
jmp 0x43b363
mov eax, 0x1ac
mov dword [edi + 0x40], eax
mov ecx, 0x17a
mov dword [edi + 0x44], ecx
mov edx, 0x90
mov dword [edi + 0x48], edx
mov esi, 0x82
mov dword [edi + 0x4c], esi
mov edx, dword [edi + 0x40]
sub edx, 0x14
mov dword [edi + 0x5c], edx
mov eax, dword [edi + 0x44]
sub eax, 3
mov dword [edi + 0x60], eax
lea eax, [esi - 0x80]
call fcn.0041bc10
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x48]
mov dword [edi + 0x20], eax
add edx, 1
jmp 0x43b363
fldz
mov eax, 0x144
mov dword [edi + 0x40], eax
xor edx, edx
mov ecx, 0xa2
mov dword [edi + 0x44], ecx
mov dword [edi + 0x48], edx
xor esi, esi
mov dword [edi + 0x4c], esi
fstp dword [edi + 0x64]
mov ecx, dword [edi + 0x40]
sub ecx, 7
mov dword [edi + 0x5c], ecx
mov edx, dword [edi + 0x44]
sub edx, 0x13
mov dword [edi + 0x60], edx
mov eax, dword [0x6b8580]
push 0x88
mov dword [edi + 0x20], eax
call fcn.00624a6a
add esp, 4
cmp eax, esi
je 0x43b91c
mov dword [eax + 0x14], esi
mov ecx, 0xf
mov dword [eax + 0x18], ecx
mov byte [eax + 4], 0
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x38], esi
mov byte [eax + 0x28], 0
mov dword [eax + 0x40], esi
mov dword [eax + 0x44], esi
mov dword [eax + 0x48], esi
mov dword [eax + 0x4c], esi
mov dword [eax + 0x1c], esi
mov dword [eax + 0x50], esi
mov dword [eax + 0x54], esi
mov dword [eax + 0x58], esi
mov byte [eax + 0x68], 0
mov dword [esp + 0x1c], eax
jmp 0x43b920
mov dword [esp + 0x1c], esi
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x48]
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], ecx
call fcn.00443000
mov dl, byte [edi + 0x84]
mov esi, dword [esp + 0x1c]
mov byte [esi + 0x84], dl
fld dword [edi + 0x7c]
fstp dword [esi + 0x7c]
mov eax, dword [edi + 0x74]
mov dword [esi + 0x74], eax
fld dword [edi + 0x80]
fstp dword [esi + 0x80]
mov ecx, dword [edi + 0x70]
mov dword [esi + 0x70], ecx
mov edx, dword [edi + 0x1c]
mov dword [esi + 0x1c], edx
mov eax, dword [edi + 0x78]
push 0xffffffffffffffff
mov dword [esi + 0x78], eax
xor ebx, ebx
lea eax, [edi + 0x24]
push ebx
lea ecx, [esi + 0x24]
push eax
call fcn.00401d10
push str._anim
lea ecx, [esp + 0x64]
push edi
push ecx
call fcn.0044cf70
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
mov dword [esp + 0xbc], 3
call fcn.00401d10
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x78], 0x10
jb 0x43b9c8
mov edx, dword [esp + 0x64]
push edx
call fcn.0062493b
add esp, 4
mov eax, dword [esp + 0x1c]
fld dword [0x686cdc]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
mov ecx, dword [edi + 0x40]
mov edi, dword [edi + 0x44]
add ecx, 0x25
mov dword [eax + 0x40], ecx
mov edx, 0x6c
add edi, 0x22
mov dword [eax + 0x44], edi
mov dword [eax + 0x48], edx
lea esi, [edx + 0x4c]
mov dword [eax + 0x4c], esi
mov ecx, dword [eax + 0x40]
sub ecx, 7
mov dword [eax + 0x5c], ecx
mov edx, dword [eax + 0x44]
sub edx, 0x1a
mov dword [eax + 0x60], edx
fstp dword [eax + 0x64]
mov ecx, dword [0x6b8560]
fld dword [0x687490]
mov dword [eax + 0x20], ecx
mov byte [eax + 0x68], 1
fstp dword [eax + 0x6c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x48]
add edx, 1
jmp 0x43b363
xor edi, edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov edx, dword [esp + 0x28]
mov dword [esp + 0xb0], 4
mov eax, dword [edx + 0xbe8]
mov eax, dword [eax + 0x90c]
add eax, 0xc
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], edi
call fcn.004427f0
test eax, eax
jbe 0x43bece
mov edi, edi
xor eax, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x30], eax
mov esi, dword [esp + 0x34]
mov ecx, dword [esi + 4]
test ecx, ecx
mov edi, dword [esp + 0x18]
je 0x43baa5
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x43baaa
call fcn.0062492b
mov esi, dword [esi + 4]
lea eax, [edi*4]
mov eax, dword [esi + eax]
mov edx, dword [eax + 0x98]
test edx, edx
je 0x43beae
mov ecx, dword [eax + 0x9c]
sub ecx, edx
mov eax, 0x2fa0be83
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x4c], eax
jae 0x43beae
test esi, esi
je 0x43bafe
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx + 8]
sub eax, esi
sar eax, 2
cmp dword [esp + 0x18], eax
jb 0x43bb03
call fcn.0062492b
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 4]
add ecx, ecx
add ecx, ecx
mov esi, dword [eax + ecx]
add eax, ecx
mov eax, dword [esi + 0x98]
test eax, eax
je 0x43bb40
mov ecx, dword [esi + 0x9c]
sub ecx, eax
mov eax, 0x2fa0be83
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x4c], eax
jb 0x43bb45
call fcn.0062492b
mov esi, dword [esi + 0x98]
add esi, dword [esp + 0x30]
push 0x88
mov dword [esp + 0x20], esi
call fcn.00624a6a
add esp, 4
test eax, eax
je 0x43bb9f
xor esi, esi
mov dword [eax + 0x14], esi
mov ecx, 0xf
mov dword [eax + 0x18], ecx
mov byte [eax + 4], 0
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x38], esi
mov byte [eax + 0x28], 0
mov dword [eax + 0x40], esi
mov dword [eax + 0x44], esi
mov dword [eax + 0x48], esi
mov dword [eax + 0x4c], esi
mov dword [eax + 0x1c], esi
mov dword [eax + 0x50], esi
mov dword [eax + 0x54], esi
mov dword [eax + 0x58], esi
mov byte [eax + 0x68], 0
mov ebx, eax
jmp 0x43bba3
xor ebx, ebx
xor esi, esi
mov edi, dword [esp + 0x48]
mov ecx, dword [edi + 4]
cmp ecx, esi
mov dword [esp + 0x14], ebx
jne 0x43bbb6
xor edx, edx
jmp 0x43bbbe
mov edx, dword [edi + 8]
sub edx, ecx
sar edx, 2
cmp ecx, esi
je 0x43bbdb
mov eax, dword [edi + 0xc]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x43bbdb
mov eax, dword [edi + 8]
mov dword [eax], ebx
add eax, 4
mov dword [edi + 8], eax
jmp 0x43bbfd
mov esi, dword [edi + 8]
cmp ecx, esi
jbe 0x43bbe7
call fcn.0062492b
push esi
push edi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
push ecx
mov eax, edi
call fcn.00445bf0
mov esi, dword [esp + 0x1c]
cmp dword [esi + 0x18], 0x10
jb 0x43bc0c
mov eax, dword [esi + 4]
jmp 0x43bc0f
lea eax, [esi + 4]
mov edx, dword [esi + 0x24]
push edx
push eax
lea eax, [esp + 0x68]
push str.Decal:_s_d
push eax
call fcn.004e7a20
add esp, 0x10
push 0xffffffffffffffff
push 0
push eax
mov ecx, ebx
mov byte [esp + 0xbc], 5
call fcn.00401d10
mov byte [esp + 0xb0], 4
cmp dword [esp + 0x78], 0x10
jb 0x43bc56
mov ecx, dword [esp + 0x64]
push ecx
call fcn.0062493b
add esp, 4
mov edx, dword [esi + 0x1c]
mov dword [ebx + 0x5c], edx
mov eax, dword [esi + 0x20]
mov dword [ebx + 0x60], eax
mov ecx, dword [esi + 0x2c]
mov dword [ebx + 0x40], ecx
mov edx, dword [esi + 0x30]
mov dword [ebx + 0x44], edx
mov eax, dword [esi + 0x34]
mov dword [ebx + 0x48], eax
mov ecx, dword [esi + 0x38]
push 0xffffffffffffffff
push 0
lea edx, [esi + 0x3c]
mov dword [ebx + 0x4c], ecx
lea ecx, [ebx + 0x24]
push edx
call fcn.00401d10
mov eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x28]
push 1
mov dword [ebx + 0x70], eax
mov edx, dword [ecx + 0x888]
push 0
push edx
mov ecx, esi
call fcn.00466d30
test eax, eax
mov dword [ebx + 0x20], eax
je 0x43be95
mov eax, dword [esp + 0x18]
fld1
mov dword [ebx + 0x74], 0xffffffff
mov dword [ebx + 0x78], eax
fstp dword [ebx + 0x80]
fld dword [esi + 0x28]
fstp dword [ebx + 0x64]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
mov dword [esp + 0x20], eax
jbe 0x43bcea
call fcn.0062492b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
mov dword [esp + 0x2c], eax
jbe 0x43bcff
call fcn.0062492b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
mov edi, ecx
jbe 0x43bd12
call fcn.0062492b
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
cmp edi, dword [esp + 0x2c]
mov dword [esp + 0x14], edi
mov edx, edi
je 0x43bd31
mov edi, edi
mov edi, dword [esp + 0x18]
cmp dword [edx], edi
je 0x43bd31
add edx, 4
cmp edx, dword [esp + 0x2c]
jne 0x43bd20
cmp edx, dword [esp + 0x20]
je 0x43bd8a
test ecx, ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x20], edx
je 0x43bd66
mov edi, dword [esp + 0x44]
mov edx, eax
sub edx, ecx
sub edi, ecx
sar edx, 2
sar edi, 2
cmp edx, edi
jae 0x43bd66
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x40], eax
jmp 0x43bd8a
cmp ecx, eax
mov edi, eax
jbe 0x43bd71
call fcn.0062492b
push edi
lea eax, [esp + 0x3c]
push eax
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x48]
call fcn.00444710
fldz
fstp dword [ebx + 0x7c]
mov byte [ebx + 0x84], 0
cmp dword [esi + 0x6c], 0
jne 0x43bda5
mov dword [ebx + 0x50], 0
jmp 0x43bdde
push 0x90
call fcn.00624a6a
add esp, 4
test eax, eax
je 0x43bdbd
call fcn.00431fc0
jmp 0x43bdbf
xor eax, eax
mov edi, dword [esp + 0x1c]
add edi, 0x58
mov esi, eax
mov dword [ebx + 0x50], eax
call fcn.00432cd0
mov ecx, dword [ebx + 0x50]
mov esi, dword [esp + 0x1c]
mov dword [ecx + 0x20], 1
cmp dword [esi + 0x88], 0
jne 0x43bdf0
mov dword [ebx + 0x54], 0
jmp 0x43be29
push 0x90
call fcn.00624a6a
add esp, 4
test eax, eax
je 0x43be08
call fcn.00431fc0
jmp 0x43be0a
xor eax, eax
mov edi, dword [esp + 0x1c]
add edi, 0x74
mov esi, eax
mov dword [ebx + 0x54], eax
call fcn.00432cd0
mov edx, dword [ebx + 0x54]
mov esi, dword [esp + 0x1c]
mov dword [edx + 0x20], 1
cmp dword [esi + 0xa4], 0
jne 0x43be4b
add dword [esp + 0x4c], 1
add dword [esp + 0x30], 0xac
mov dword [ebx + 0x58], 0
jmp 0x43ba8a
push 0x90
call fcn.00624a6a
add esp, 4
test eax, eax
je 0x43be63
call fcn.00431fc0
jmp 0x43be65
xor eax, eax
mov edi, dword [esp + 0x1c]
add edi, 0x90
mov esi, eax
mov dword [ebx + 0x58], eax
call fcn.00432cd0
mov eax, dword [ebx + 0x58]
add dword [esp + 0x4c], 1
add dword [esp + 0x30], 0xac
mov dword [eax + 0x20], 1
jmp 0x43ba8a
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x43beae
mov eax, dword [edi + 8]
mov edx, eax
sub edx, ecx
sar edx, 2
je 0x43beae
add eax, 0xfffffffc
mov dword [edi + 8], eax
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x34]
add esi, 1
mov dword [esp + 0x18], esi
call fcn.004427f0
cmp esi, eax
jb 0x43ba80
mov edi, dword [esp + 0x40]
cmp dword [esp + 0x3c], edi
jbe 0x43bed9
call fcn.0062492b
mov esi, dword [esp + 0x3c]
cmp esi, dword [esp + 0x40]
jbe 0x43bee8
call fcn.0062492b
cmp esi, edi
je 0x43bef6
push edi
push esi
call fcn.0044da20
add esp, 8
xor edi, edi
mov dword [esp + 0x30], edi
mov esi, dword [esp + 0x48]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x43c2cd
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x43c2cd
test ecx, ecx
je 0x43bf2b
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x43bf30
call fcn.0062492b
cmp byte [ebp + 8], 0
mov eax, dword [esi + 4]
mov ebx, dword [eax + edi*4]
je 0x43c2bf
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 0xbe8]
mov eax, dword [edx + 0x930]
test eax, eax
je 0x43c2bf
mov ecx, dword [eax + 0xac]
add eax, 0xa4
cmp dword [eax + 4], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], ecx
jbe 0x43bf75
call fcn.0062492b
mov esi, dword [esp + 0x28]
mov eax, dword [esi + 0xbe8]
mov eax, dword [eax + 0x930]
mov ecx, dword [eax + 0xac]
add eax, 0xa4
cmp dword [eax + 4], ecx
mov dword [esp + 0x14], ecx
jbe 0x43bf9e
call fcn.0062492b
mov ecx, dword [esi + 0xbe8]
mov eax, dword [ecx + 0x930]
mov esi, dword [eax + 0xa8]
add eax, 0xa4
cmp esi, dword [eax + 8]
mov dword [esp + 0x2c], eax
jbe 0x43bfc3
call fcn.0062492b
cmp esi, dword [esp + 0x14]
mov edi, esi
je 0x43c02a
jmp 0x43bfd0
cmp dword [ebx + 0x18], 0x10
jb 0x43bfdb
mov edx, dword [ebx + 4]
jmp 0x43bfde
lea edx, [ebx + 4]
mov esi, dword [edi + 0x14]
mov eax, esi
cmp eax, esi
jae 0x43bfe7
mov ecx, dword [ebx + 0x14]
cmp esi, ecx
jae 0x43bff0
mov ecx, esi
cmp dword [edi + 0x18], 0x10
jb 0x43bffb
mov eax, dword [edi + 4]
jmp 0x43bffe
lea eax, [edi + 4]
push ecx
push edx
push eax
call fcn.00402c10
add esp, 0xc
test eax, eax
jne 0x43c021
mov eax, dword [ebx + 0x14]
cmp esi, eax
jb 0x43c021
xor edx, edx
cmp esi, eax
setne dl
mov eax, edx
test eax, eax
je 0x43c02a
add edi, 0x1c
cmp edi, dword [esp + 0x14]
jne 0x43bfd0
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x2c], eax
je 0x43c039
call fcn.0062492b
cmp edi, dword [esp + 0x34]
jne 0x43c2bf
cmp dword [ebx + 0x78], 0xffffffff
fld dword [0x687490]
fstp dword [esp + 0x14]
je 0x43c0c8
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
mov edi, ecx
jbe 0x43c06e
call fcn.0062492b
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
mov esi, eax
jbe 0x43c081
call fcn.0062492b
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
cmp esi, edi
je 0x43c093
mov edx, dword [ebx + 0x78]
cmp dword [esi], edx
je 0x43c093
add esi, 4
cmp esi, edi
jne 0x43c088
cmp eax, ecx
mov edi, eax
jbe 0x43c09e
call fcn.0062492b
sub esi, edi
sar esi, 2
mov dword [esp + 0x20], esi
fild dword [esp + 0x20]
fmul qword [0x686e28]
call fcn.0062a660
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fadd qword [0x686e20]
fstp dword [esp + 0x14]
mov edi, dword [esp + 0x28]
mov ecx, dword [edi + 0xbe8]
mov esi, dword [ecx + 0x930]
push ebx
add esi, 0xa4
call fcn.00441bd0
fld dword [esp + 0x14]
mov edx, dword [edi + 0xbe8]
fldz
mov eax, dword [edx + 0x930]
fsubrp st(1)
mov byte [eax + 0xec], 1
mov ecx, dword [ebx + 0x20]
fstp dword [ebx + 0x80]
cmp ecx, dword [0x6b8560]
jne 0x43c11a
mov dword [edi + 0xe8], 0
cmp dword [ebx + 0x48], 0
je 0x43c2bf
cmp dword [ebx + 0x4c], 0
je 0x43c2bf
push 0x2a8
call fcn.00624a6a
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov byte [esp + 0xb0], 6
je 0x43c153
push eax
call fcn.00435d60
jmp 0x43c155
xor eax, eax
mov byte [esp + 0xb0], 4
mov edi, 0x1b2
mov dword [ebx + 0x1c], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x2c], 6
mov eax, dword [ebx + 0x1c]
lea esi, [eax + 0x288]
mov eax, dword [esi + 4]
test eax, eax
mov dword [esp + 0x20], edi
jne 0x43c189
xor edx, edx
jmp 0x43c191
mov edx, dword [esi + 8]
sub edx, eax
sar edx, 2
test eax, eax
je 0x43c1ae
mov ecx, dword [esi + 0xc]
sub ecx, eax
sar ecx, 2
cmp edx, ecx
jae 0x43c1ae
mov eax, dword [esi + 8]
mov dword [eax], edi
add eax, 4
mov dword [esi + 8], eax
jmp 0x43c1d1
mov edi, dword [esi + 8]
cmp eax, edi
jbe 0x43c1ba
call fcn.0062492b
push edi
push esi
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x5c]
push eax
mov eax, esi
call fcn.00444710
mov edi, dword [esp + 0x14]
add edi, 1
sub dword [esp + 0x2c], 1
mov dword [esp + 0x14], edi
jne 0x43c171
push 0x25
push str.b0_1_0_1___K_5U___gl4____vC_v
lea ecx, [esp + 0x8c]
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
call fcn.00402300
mov byte [esp + 0xb0], 7
mov esi, dword [ebx + 0x1c]
add esi, 0x48
lea edi, [esp + 0x84]
call fcn.00432cd0
mov byte [esp + 0xb0], 4
cmp dword [esp + 0x9c], 0x10
jb 0x43c24c
mov ecx, dword [esp + 0x88]
push ecx
call fcn.0062493b
add esp, 4
mov eax, dword [ebx + 0x48]
cdq
sub eax, edx
mov edx, dword [ebx + 0x1c]
sar eax, 1
add eax, dword [ebx + 0x40]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fstp dword [edx + 0x10]
mov eax, dword [ebx + 0x4c]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebx + 0x44]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
mov eax, dword [ebx + 0x1c]
fstp dword [eax + 0x14]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x48]
fld1
mov dword [ecx + 0x20], edx
mov eax, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x4c]
mov dword [eax + 0x24], ecx
mov edx, dword [ebx + 0x1c]
mov byte [edx + 0x18], 0
mov eax, dword [ebx + 0x1c]
mov byte [eax + 0x19], 1
mov ecx, dword [ebx + 0x1c]
fstp dword [ecx + 0x40]
mov edx, dword [ebx + 0x1c]
mov dword [edx + 0x1c], 0x190
fld dword [ebx + 0x64]
fmul qword [0x687770]
mov eax, dword [ebx + 0x1c]
fstp qword [eax + 0x38]
add dword [esp + 0x30], 1
mov edi, dword [esp + 0x30]
jmp 0x43befc
mov edi, dword [esi + 8]
cmp ecx, edi
mov byte [esp + 0x20], 0
jbe 0x43c2de
call fcn.0062492b
mov ebx, dword [esi + 4]
cmp ebx, dword [esi + 8]
jbe 0x43c2eb
call fcn.0062492b
cmp esi, esi
je 0x43c2f4
call fcn.0062492b
mov ecx, dword [esp + 0x20]
mov edx, edi
push ecx
sub edx, ebx
sar edx, 2
push edx
push edi
push ebx
call fcn.0044e500
mov eax, dword [esp + 0x4c]
add esp, 0x10
test eax, eax
je 0x43c31c
push eax
call fcn.0062493b
add esp, 4
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x90]
xor ecx, esp
call fcn.00624940
mov esp, ebp
pop ebp
ret 4