Function at 0x43b4c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b2db3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb1c
mov al, byte [esp + 2]
push ebx
push ebp
push esi
mov ebp, ecx
xor ebx, ebx
push edi
push ebx
lea ecx, [esp + 0x54]
mov byte [esp + 0x54], al
call fcn.0041c8a0
mov eax, dword [esp + 0xb3c]
lea ecx, [esp + 0x50]
push ecx
push eax
mov ecx, ebp
mov dword [esp + 0xb3c], ebx
mov dword [esp + 0x38], eax
call fcn.0043c410
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
lea esi, [eax - 1]
cmp eax, esi
jb 0x43b53d
cmp ecx, ebx
je 0x43b53d
lea ecx, [esp + 0x50]
call fcn.00443270
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x58]
lea edx, [ecx + esi*2]
jmp 0x43b542
mov edx, 0x4b896c
cmp word [edx], 0x42
jb 0x43b590
dec eax
lea edx, [esp + 0x104]
push eax
push ebx
push edx
lea ecx, [esp + 0x5c]
call fcn.0042d380
mov ecx, dword [0x4b8970]
mov byte [esp + 0xb34], 1
push ecx
push ebx
push eax
lea ecx, [esp + 0x5c]
call fcn.0041d020
push 1
lea ecx, [esp + 0x108]
mov byte [esp + 0xb38], 0
call fcn.0041c8a0
mov ecx, dword [esp + 0x54]
mov dl, byte [esp + 0x12]
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x38], dl
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp ecx, ebx
mov byte [esp + 0xb34], 2
mov eax, 0x4b896c
je 0x43b5b7
mov eax, ecx
lea ecx, [esp + 0x38]
push ecx
push eax
mov ecx, ebp
call fcn.0043b210
mov edx, dword [esp + 0xb40]
mov ecx, dword [edx + 0x2c]
mov eax, dword [edx + 0x30]
lea esi, [edx + 0x28]
push ecx
push eax
push eax
call fcn.004487c0
add esp, 0xc
mov edi, eax
mov eax, dword [esi + 8]
mov ecx, esi
push eax
push edi
call fcn.004436b0
mov dword [esi + 8], edi
mov al, byte [ebp + 4]
lea esi, [ebp + 4]
push ebx
lea ecx, [esp + 0xa8]
mov byte [esp + 0xa8], al
call fcn.0041c8a0
mov ecx, dword [0x4b8970]
push ecx
push ebx
push esi
lea ecx, [esp + 0xb0]
call fcn.0041d020
mov esi, dword [esi + 4]
mov byte [esp + 0xb34], 3
cmp esi, ebx
mov ecx, 0x4b896c
je 0x43b635
mov ecx, esi
mov edx, dword [esp + 0xb3c]
mov esi, 0x14
lea eax, [edx + 1]
cdq
idiv esi
lea eax, [esp + 0x32c]
mov esi, edx
push esi
push ecx
push 0x4d2a20
push eax
call fcn.00481a99
mov eax, dword [ebp + 0x78]
add esp, 0x10
mov ebx, dword [eax + esi*8]
mov ecx, dword [eax + esi*8 + 4]
mov dword [esp + 0x2c], ecx
mov esi, 2
mov dl, byte [ebx]
mov al, byte [ebx + 1]
mov byte [esp + 0x14], dl
mov byte [esp + 0x24], al
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
and eax, 0xff
and ecx, 0xff
mov edi, eax
shl edi, 8
sub edi, eax
mov eax, dword [esp + 0xb3c]
add edi, ecx
cmp edi, eax
je 0x43b6ec
cmp esi, dword [esp + 0x2c]
jge 0x43b88d
add esi, 0xd
mov ecx, ebp
push esi
push ebx
call fcn.004416e0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esp + 0x2c]
add eax, 0xfffffffe
lea esi, [esi + edx + 2]
cmp esi, eax
jge 0x43b6e3
push esi
push ebx
mov ecx, ebp
call fcn.004416e0
mov edi, eax
add esi, 2
cmp edi, dword [esp + 0xb3c]
jne 0x43b6a7
mov ecx, dword [esp + 0xb40]
push ecx
push edi
mov ecx, ebp
call fcn.0043c410
mov dl, byte [ebx + esi]
inc esi
mov byte [esp + 0x14], dl
mov edx, dword [esp + 0xb40]
mov eax, dword [esp + 0x14]
add esi, 2
and eax, 0xff
mov dword [edx + 0x18], eax
movzx cx, byte [ebx + esi - 2]
mov eax, ecx
shl eax, 8
sub eax, ecx
movzx cx, byte [ebx + esi - 1]
add eax, ecx
and eax, 0xffff
inc esi
mov dword [edx + 0x1c], eax
mov dl, byte [ebx + esi - 1]
mov al, byte [ebx + esi]
mov cl, byte [ebx + esi + 1]
inc esi
mov byte [esp + 0x14], dl
inc esi
mov byte [esp + 0x20], cl
mov byte [esp + 0x24], al
mov eax, dword [esp + 0x20]
mov dl, byte [ebx + esi]
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x18], dl
mov edi, dword [esp + 0x18]
and edi, 0xff
mov edx, dword [esp + 0x14]
shl edi, 7
and eax, 0xff
and ecx, 0xff
add edi, eax
mov al, byte [ebx + esi + 1]
shl edi, 7
add edi, ecx
inc esi
shl edi, 7
mov cl, byte [ebx + esi + 1]
and edx, 0xff
add edi, edx
inc esi
inc esi
mov byte [esp + 0x14], al
mov byte [esp + 0x24], cl
mov dword [esp + 0x100], edi
mov dl, byte [ebx + esi]
mov al, byte [ebx + esi + 1]
inc esi
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x18]
mov byte [esp + 0x20], dl
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
and eax, 0xff
and ecx, 0xff
shl eax, 7
add eax, ecx
mov ecx, dword [esp + 0x14]
shl eax, 7
and edx, 0xff
and ecx, 0xff
add eax, edx
inc esi
shl eax, 7
add eax, ecx
xor ecx, ecx
mov cl, byte [ebx + esi]
mov dword [esp + 0x68], eax
mov edx, ecx
shl edx, 8
sub edx, ecx
xor ecx, ecx
mov cl, byte [ebx + esi + 1]
add esi, 2
add edx, ecx
mov ecx, dword [esp + 0xb40]
mov dword [ecx + 0x14], eax
mov eax, edx
test eax, eax
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x20], 0
jge 0x43b83d
mov eax, dword [esp + 0xb40]
mov ecx, pe_nt_image_headers32
mov edx, dword [eax + 0x24]
add edx, ecx
mov dword [eax + 0x24], edx
js 0x43b833
lea edx, [esp + 0x30]
lea eax, [esp + 0x48]
push edx
lea ecx, [ebp + 0x44]
push eax
call fcn.00446480
mov ecx, dword [eax]
lea edx, [esp + 0x4c]
mov dword [esp + 0x18], ecx
push edx
lea ecx, [ebp + 0x44]
call fcn.00444000
mov ecx, dword [esp + 0x18]
mov edx, dword [eax]
cmp ecx, edx
sete al
test al, al
jne 0x43b90f
mov edx, dword [esp + 0x30]
mov eax, ecx
cmp edx, dword [eax + 0xc]
jl 0x43b90f
lea eax, [esp + 0x18]
jmp 0x43b91f
cmp edi, dword [esp + 0xb3c]
je 0x43b6ec
push 1
lea ecx, [esp + 0xa8]
mov byte [esp + 0xb38], 2
call fcn.0041c8a0
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
cmp esi, edi
mov byte [esp + 0xb34], 0
je 0x43b8db
xor ebx, ebx
push ebx
mov ecx, esi
call fcn.004255c0
add esi, 0x10
cmp esi, edi
jne 0x43b8c6
mov esi, dword [esp + 0x3c]
jmp 0x43b8dd
xor ebx, ebx
push esi
call fcn.0049d2f9
add esp, 4
lea ecx, [esp + 0x50]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
push 1
mov dword [esp + 0x48], ebx
mov dword [esp + 0xb38], 0xffffffff
call fcn.0041c8a0
xor eax, eax
jmp 0x43c3f0
lea ecx, [esp + 0xc4]
push ecx
lea ecx, [ebp + 0x44]
call fcn.00444000
mov edx, dword [eax]
mov al, byte [esp + 0x12]
push 0
lea ecx, [esp + 0x70]
mov dword [esp + 0xc0], edx
mov byte [esp + 0x70], al
call fcn.0041c8a0
xor eax, eax
mov byte [esp + 0xb34], 4
push eax
mov dword [esp + 0x20], eax
mov dword [esp + 0xc4], 0xffffffff
mov byte [esp + 0x16], al
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], eax
call fcn.004820c2
lea ecx, [esp + 0x100]
mov dword [esp + 0x100], eax
push ecx
call fcn.004828c4
mov edx, dword [eax + 8]
mov eax, dword [eax + 4]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x60]
add esp, 8
mov dword [esp + 0xc4], edx
test eax, eax
ja 0x43b9aa
call fcn.00494788
mov eax, dword [esp + 0x54]
test eax, eax
je 0x43b9de
mov cl, byte [eax - 1]
test cl, cl
je 0x43b9d2
cmp cl, 0xff
je 0x43b9d2
mov ecx, dword [esp + 0x58]
push 0
push ecx
lea ecx, [esp + 0x58]
call fcn.0041ca30
mov eax, dword [esp + 0x54]
test eax, eax
je 0x43b9de
mov byte [eax - 1], 0xff
mov eax, dword [esp + 0x54]
mov dl, byte [eax]
mov ecx, ebp
push edx
call fcn.0043f7f0
push esi
push ebx
mov ecx, ebp
mov dword [esp + 0xc0], eax
call fcn.004416e0
add esi, 2
test eax, eax
jle 0x43c11c
mov dword [esp + 0xb4], eax
push esi
push ebx
mov ecx, ebp
call fcn.004416e0
add esi, 2
mov dword [esp + 0x8c], eax
mov al, byte [ebx + esi]
inc esi
mov byte [esp + 0x14], al
mov edx, dword [esp + 0x14]
and edx, 0xff
inc esi
mov dword [esp + 0x7c], edx
mov cl, byte [ebx + esi - 1]
mov byte [esp + 0x14], cl
mov edi, dword [esp + 0x14]
and edi, 0xff
inc esi
mov dword [esp + 0x80], edi
mov al, byte [ebx + esi - 1]
mov byte [esp + 0x14], al
mov ecx, dword [esp + 0x14]
and ecx, 0xff
inc esi
mov dword [esp + 0x84], ecx
mov al, byte [ebx + esi - 1]
mov cl, byte [ebx + esi]
mov byte [esp + 0x14], al
mov byte [esp + 0x24], cl
mov ecx, dword [esp + 0x14]
and ecx, 0xff
inc esi
mov eax, ecx
shl eax, 8
sub eax, ecx
mov ecx, dword [esp + 0x24]
and ecx, 0xff
add eax, ecx
mov ecx, dword [esp + 0xbc]
cmp ecx, dword [ebp + 0x48]
mov dword [esp + 0x88], eax
je 0x43bb3d
mov edx, ecx
lea ecx, [edx + 0x10]
lea edx, [esp + 0x38]
push edx
push eax
lea eax, [esp + 0x10c]
push ecx
push eax
mov ecx, ebp
call fcn.0043b350
mov ecx, dword [0x4b8970]
mov byte [esp + 0xb34], 5
push ecx
push 0
push eax
lea ecx, [esp + 0x78]
call fcn.0041d020
mov eax, dword [esp + 0x108]
mov byte [esp + 0xb34], 4
test eax, eax
je 0x43bb14
mov cl, byte [eax - 1]
test cl, cl
je 0x43bb08
cmp cl, 0xff
je 0x43bb08
dec cl
mov byte [eax - 1], cl
jmp 0x43bb14
add eax, 0xfffffffe
push eax
call fcn.0049d2f9
add esp, 4
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
xor eax, eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [ebp + 0xf4]
mov dword [esp + 0x4c], edx
cmp ecx, 2
mov dword [esp + 0x48], edi
jne 0x43bc4c
test eax, eax
mov dword [esp + 0x94], 0
mov byte [esp + 0x98], 0
jle 0x43bc4c
mov eax, dword [esp + 0x60]
push edi
push edx
mov edx, dword [esp + 0x34]
push edx
push eax
mov ecx, ebp
call fcn.0043b460
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x28]
sub ecx, edx
mov edi, eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x34], edi
fild dword [esp + 0x28]
fstp dword [esp + 0x28]
fild dword [esp + 0x34]
fmul qword [0x4bb7a8]
fdivr dword [esp + 0x28]
call fcn.004811c4
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x94], eax
cmp eax, ecx
mov dword [esp + 0x34], edi
jle 0x43bc07
add dword [esp + 0x34], 0x5a0
fild dword [esp + 0x34]
fmul qword [0x4bb7a8]
fdivr dword [esp + 0x28]
call fcn.004811c4
mov cl, byte [esp + 0x12]
mov dword [esp + 0x94], eax
test cl, cl
jne 0x43bbfa
inc dword [esp + 0x1c]
jmp 0x43bbfe
inc dword [esp + 0x18]
cmp eax, dword [esp + 0xb8]
jg 0x43bbca
mov edx, dword [esp + 0xf8]
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x64]
push eax
push ecx
push edx
mov ecx, ebp
call fcn.0043b460
cmp eax, edi
setl cl
test cl, cl
mov byte [esp + 0x98], cl
je 0x43bc41
sub edi, eax
mov dword [esp + 0x9c], edi
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x48]
cmp eax, edx
mov dword [esp + 0x2c], ecx
jle 0x43bc88
mov al, byte [esp + 0x12]
test al, al
jne 0x43bc84
cmp dword [ebp + 0xf4], 2
je 0x43bc80
inc dword [esp + 0x1c]
test al, al
je 0x43bc88
inc dword [esp + 0x18]
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x12e]
mov word [esp + 0x12c], 0
rep stosd dword es:[edi], eax
mov ecx, dword [ebp + 0xf4]
mov byte [esp + 0x13], 0
stosw word es:[edi], ax
mov eax, dword [esp + 0x8c]
cmp ecx, 2
mov dword [esp + 0x114], 0xffffffff
jne 0x43bccb
mov eax, 0x4000
mov edx, dword [esp + 0x30]
push eax
push edx
lea eax, [esp + 0x134]
push 0x4d2ac8
push eax
call fcn.00481a99
mov ecx, dword [esp + 0x28]
mov edx, dword [ebp + 0xc8]
add esp, 0x10
push ecx
push edx
mov ecx, ebp
call fcn.0043c720
mov edi, eax
mov al, byte [esp + 0x12]
mov byte [esp + 0xc8], al
lea ecx, [esp + 0x12c]
xor eax, eax
push ecx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
call fcn.00481157
add esp, 4
lea edx, [esp + 0x12c]
lea ecx, [esp + 0xc8]
push eax
push edx
call fcn.0041f100
lea eax, [esp + 0x114]
lea edx, [esp + 0xc8]
push eax
push edi
lea ecx, [ebp + 0xf8]
push edx
mov byte [esp + 0xb40], 6
call fcn.0044c630
mov eax, dword [esp + 0xcc]
mov byte [esp + 0xb34], 4
test eax, eax
je 0x43bd98
mov cl, byte [eax - 1]
test cl, cl
je 0x43bd8c
cmp cl, 0xff
je 0x43bd8c
dec cl
mov byte [eax - 1], cl
jmp 0x43bd98
add eax, 0xfffffffe
push eax
call fcn.0049d2f9
add esp, 4
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x114]
cmp eax, 0xffffffff
jne 0x43bea5
cmp dword [ebp + 0xf4], 2
jne 0x43bf15
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea edx, [esp + 0x134]
push 0x4d2ac8
push edx
call fcn.00481a99
mov al, byte [esp + 0x22]
lea ecx, [esp + 0x13c]
mov byte [esp + 0xe8], al
xor eax, eax
push ecx
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], eax
call fcn.00481157
add esp, 0x14
lea edx, [esp + 0x12c]
lea ecx, [esp + 0xd8]
push eax
push edx
call fcn.0041f100
lea eax, [esp + 0x114]
lea ecx, [esp + 0xd8]
push eax
push edi
push ecx
lea ecx, [ebp + 0xf8]
mov byte [esp + 0xb40], 7
call fcn.0044c630
mov ecx, dword [esp + 0xdc]
mov byte [esp + 0xb34], 4
test ecx, ecx
je 0x43be87
mov al, byte [ecx - 1]
test al, al
je 0x43be7b
cmp al, 0xff
je 0x43be7b
dec al
mov byte [ecx - 1], al
jmp 0x43be87
lea eax, [ecx - 2]
push eax
call fcn.0049d2f9
add esp, 4
xor eax, eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x114]
cmp eax, 1
jne 0x43bece
cmp dword [ebp + 0xf4], 2
jne 0x43bf44
mov eax, dword [esp + 0x20]
mov byte [esp + 0x13], 1
mov dword [esp + 0x90], eax
inc eax
mov dword [esp + 0x20], eax
jmp 0x43bf44
test eax, eax
jne 0x43bf15
mov eax, dword [esp + 0x124]
mov edx, dword [esp + 0x120]
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0xb40]
mov dword [esp + 0x90], eax
inc eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x20], eax
lea ecx, [edx + 0x28]
jmp 0x43bf2f
mov eax, dword [esp + 0x20]
mov dword [esp + 0x90], eax
inc eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xb40]
lea ecx, [eax + 0x28]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x6c]
push edx
push 1
push eax
call fcn.00445580
mov byte [esp + 0x13], 1
mov al, byte [ebp + 0xcc]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x58], esp
mov dword [esp + 0x5c], edi
mov byte [edi], al
mov ecx, dword [ebp + 0xd0]
test ecx, ecx
jne 0x43bf67
xor eax, eax
jmp 0x43bf72
mov eax, dword [ebp + 0xd4]
sub eax, ecx
sar eax, 2
test eax, eax
jge 0x43bf78
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.0049d2d0
mov dword [edi + 4], eax
mov edx, dword [ebp + 0xd4]
mov ecx, dword [ebp + 0xd0]
add esp, 4
cmp ecx, edx
mov dword [esp + 0x58], ecx
je 0x43bfb5
test eax, eax
je 0x43bfab
mov edi, dword [ecx]
mov dword [eax], edi
mov edi, dword [esp + 0x5c]
add ecx, 4
add eax, 4
cmp ecx, edx
jne 0x43bf9f
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov edx, dword [esp + 0x9c]
mov ecx, ebp
push edx
call fcn.0043b1c0
test al, al
je 0x43c0f5
mov al, byte [esp + 0x13]
test al, al
je 0x43c0f5
mov eax, dword [esp + 0xb40]
cmp dword [eax + 0x20], 2
je 0x43c0f5
mov ecx, dword [esp + 0x1c]
mov edx, dword [ebp + 0xc8]
neg ecx
push ecx
push edx
mov ecx, ebp
mov byte [esp + 0x1a], 1
call fcn.0043c720
mov edi, eax
mov eax, dword [esp + 0x30]
push 0x4000
push eax
lea ecx, [esp + 0x134]
push 0x4d2ac8
push ecx
call fcn.00481a99
mov dl, byte [esp + 0x22]
xor eax, eax
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], eax
lea eax, [esp + 0x13c]
push eax
mov byte [esp + 0xfc], dl
call fcn.00481157
add esp, 0x14
lea ecx, [esp + 0x12c]
push eax
push ecx
lea ecx, [esp + 0xf0]
call fcn.0041f100
lea edx, [esp + 0x114]
lea eax, [esp + 0xe8]
push edx
push edi
push eax
lea ecx, [ebp + 0xf8]
mov byte [esp + 0xb40], 8
call fcn.0044c630
mov eax, dword [esp + 0xec]
mov byte [esp + 0xb34], 4
test eax, eax
je 0x43c0c4
mov cl, byte [eax - 1]
test cl, cl
je 0x43c0b8
cmp cl, 0xff
je 0x43c0b8
dec cl
mov byte [eax - 1], cl
jmp 0x43c0c4
add eax, 0xfffffffe
push eax
call fcn.0049d2f9
add esp, 4
xor eax, eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x114]
cmp eax, 1
jne 0x43c0f5
mov ecx, dword [esp + 0xb40]
mov dword [ecx + 0x20], 2
mov eax, dword [esp + 0xb4]
mov edx, dword [esp + 0x7c]
dec eax
mov dword [esp + 0xc0], edx
mov dword [esp + 0xb4], eax
jne 0x43ba0a
mov edi, dword [esp + 0x100]
mov ebx, dword [esp + 0xb40]
xor esi, esi
cmp dword [ebx + 0x20], 2
jne 0x43c206
mov ecx, dword [esp + 0x70]
cmp ecx, esi
je 0x43c155
mov al, byte [ecx - 1]
test al, al
je 0x43c149
cmp al, 0xff
je 0x43c149
dec al
mov byte [ecx - 1], al
jmp 0x43c155
lea eax, [ecx - 2]
push eax
call fcn.0049d2f9
add esp, 4
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x70], esi
cmp ecx, esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], esi
je 0x43c18a
mov al, byte [ecx - 1]
test al, al
je 0x43c17e
cmp al, 0xff
je 0x43c17e
dec al
mov byte [ecx - 1], al
jmp 0x43c18a
lea eax, [ecx - 2]
push eax
call fcn.0049d2f9
add esp, 4
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
xor ebx, ebx
cmp esi, edi
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov byte [esp + 0xb34], bl
je 0x43c1c8
push 1
mov ecx, esi
call fcn.0041c8a0
add esi, 0x10
cmp esi, edi
jne 0x43c1b4
mov esi, dword [esp + 0x3c]
push esi
call fcn.0049d2f9
mov ecx, dword [esp + 0x58]
add esp, 4
cmp ecx, ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
je 0x43c3ec
mov al, byte [ecx - 1]
test al, al
je 0x43c3e0
cmp al, 0xff
je 0x43c3e0
dec al
mov byte [ecx - 1], al
jmp 0x43c3ec
mov eax, dword [ebp + 0xd0]
cmp eax, esi
je 0x43c220
mov ecx, dword [ebp + 0xd4]
sub ecx, eax
test ecx, 0xfffffffc
jne 0x43c224
mov dword [esp + 0x1c], esi
mov edx, dword [esp + 0x1c]
mov eax, dword [ebp + 0xc8]
neg edx
push edx
push eax
mov ecx, ebp
call fcn.0043c720
cmp eax, edi
mov dword [ebx + 0x38], eax
jl 0x43c246
cmp eax, dword [esp + 0x68]
jle 0x43c255
xor ecx, ecx
cmp eax, edi
setge cl
dec ecx
and ecx, 0xfffffffe
inc ecx
mov dword [ebx + 0x20], ecx
mov edx, dword [ebp + 0xc8]
push edx
push edi
call fcn.00434330
mov edx, dword [esp + 0x24]
mov edi, eax
mov eax, dword [ebp + 0x98]
add esp, 8
sub edi, edx
mov esi, 1
test eax, eax
mov dword [esp + 0xa0], esi
mov dword [esp + 0x64], esi
jne 0x43c28b
xor ecx, ecx
jmp 0x43c296
mov ecx, dword [ebp + 0x9c]
sub ecx, eax
sar ecx, 4
mov eax, dword [ebx + 0x24]
cmp eax, ecx
jae 0x43c2e0
mov ebp, dword [ebp + 0x98]
shl eax, 4
add eax, ebp
mov eax, dword [eax + 4]
test eax, eax
jne 0x43c2b4
mov eax, 0x4b896c
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x64]
push ecx
push edx
push 0x4d2ab8
push eax
call fcn.004822db
mov esi, dword [esp + 0x74]
add esp, 0x10
test esi, esi
jne 0x43c2e0
mov esi, 1
mov dword [esp + 0x64], esi
mov eax, edi
cdq
fld qword [0x4bb788]
idiv esi
mov dword [esp + 0x68], edx
fild dword [esp + 0x68]
call fcn.00482450
call fcn.004811c4
mov edx, dword [esp + 0xa0]
and eax, edx
cmp esi, 1
je 0x43c317
cmp eax, 1
jge 0x43c317
mov dword [ebx + 0x20], 2
mov ecx, dword [esp + 0x70]
xor ebx, ebx
cmp ecx, ebx
je 0x43c33f
mov al, byte [ecx - 1]
test al, al
je 0x43c333
cmp al, 0xff
je 0x43c333
dec al
mov byte [ecx - 1], al
jmp 0x43c33f
lea eax, [ecx - 2]
push eax
call fcn.0049d2f9
add esp, 4
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x70], ebx
cmp ecx, ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
je 0x43c374
mov al, byte [ecx - 1]
test al, al
je 0x43c368
cmp al, 0xff
je 0x43c368
dec al
mov byte [ecx - 1], al
jmp 0x43c374
lea eax, [ecx - 2]
push eax
call fcn.0049d2f9
add esp, 4
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x3c]
cmp esi, edi
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov byte [esp + 0xb34], 0
je 0x43c3b1
push 1
mov ecx, esi
call fcn.0041c8a0
add esi, 0x10
cmp esi, edi
jne 0x43c39d
mov esi, dword [esp + 0x3c]
push esi
call fcn.0049d2f9
mov ecx, dword [esp + 0x58]
add esp, 4
cmp ecx, ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
je 0x43c3ec
mov al, byte [ecx - 1]
test al, al
je 0x43c3e0
cmp al, 0xff
je 0x43c3e0
dec al
mov byte [ecx - 1], al
jmp 0x43c3ec
add ecx, 0xfffffffe
push ecx
call fcn.0049d2f9
add esp, 4
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xb2c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb28
ret 8