Function at 0x43fcd0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4a4938
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebp
push edi
mov edi, ecx
xor ebp, ebp
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x48]
push ebp
push eax
push ecx
lea ecx, [edi + 0x104]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
call fcn.0043abd0
test eax, eax
jne 0x43fd3c
push ebp
push 0x4c8fbc
mov ecx, edi
call fcn.0043ef50
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
pop edi
pop ebp
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 0x10
mov edx, dword [esp + 0x48]
push ebx
mov ebx, dword [esp + 0x50]
push esi
push ebp
push ebp
push ebx
lea ecx, [edx + 0x14]
call fcn.0043a600
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.0042a0a0
push ebx
mov dword [esp + 0x4c], ebp
call fcn.0043ad80
add esp, 4
test eax, eax
je 0x43fddf
add esi, 0x18
push esi
call fcn.0047a880
add esi, eax
push esi
call fcn.0047a880
mov ecx, dword [esp + 0x60]
add esp, 8
cmp ecx, 3
lea eax, [esi + eax + 8]
ja case.default.0x43fe44
jmp dword [ecx*4 + 0x440120]
add eax, 4
push eax
call fcn.0043b8c0
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x4400e6
mov eax, dword [eax]
shr eax, 2
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x4400e6
mov eax, dword [eax]
shr eax, 1
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x4400e6
mov eax, dword [eax]
not eax
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x4400e6
mov eax, dword [esi]
push ebp
push eax
mov ecx, edi
call fcn.0043f090
mov ebx, dword [esp + 0x58]
mov ebp, eax
lea edi, [esi + 0x18]
mov edx, dword [ebp + 0x28]
lea ecx, [ebx + ebx*4]
mov esi, edi
lea eax, [edx + ecx*4]
push esi
mov dword [esp + 0x5c], eax
call fcn.0047a880
add esi, eax
push esi
call fcn.0047a880
add esi, eax
add esp, 8
mov esi, dword [esi]
test esi, esi
je 0x43fe30
mov ecx, dword [esi + 0x1c]
push ecx
nop
nop
nop
nop
nop
nop
test eax, eax
je 0x43fe30
mov eax, 1
jmp 0x43fe32
xor eax, eax
cmp ebx, 8
jge 0x440097
cmp ebx, 7
ja case.default.0x43fe44
jmp dword [ebx*4 + 0x440130]
cmp eax, 1
jne 0x43fea4
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x1c]
push edx
push eax
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x1c]
push ecx
nop
nop
nop
nop
nop
nop
push eax
call fcn.00499e2a
mov edi, eax
test edi, edi
je 0x43fe8f
mov ecx, esi
call fcn.0049c692
test eax, 0x80000000
jne 0x43fe8f
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.0049ec5d
mov eax, dword [esp + 0x1c]
test ebx, ebx
je 0x43fe9b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
jmp 0x4400e6
push edi
call fcn.0047a880
add edi, eax
push edi
call fcn.0047a880
add esp, 8
cmp ebx, 1
lea eax, [edi + eax + 4]
jne 0x43fec1
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x14], eax
jmp 0x4400e6
cmp eax, 1
jne 0x43ff0b
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push eax
push ecx
nop
nop
nop
nop
nop
nop
cmp ebx, 2
jne 0x43fef8
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
sub eax, ecx
mov dword [esp + 0x14], eax
jmp 0x4400e6
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
sub eax, ecx
mov dword [esp + 0x14], eax
jmp 0x4400e6
push edi
call fcn.0047a880
add edi, eax
push edi
call fcn.0047a880
add esp, 8
cmp ebx, 3
lea eax, [edi + eax + 0xc]
jne 0x43fec1
add eax, 4
mov eax, dword [eax]
mov dword [esp + 0x14], eax
jmp 0x4400e6
push edi
call fcn.0047a880
add edi, eax
push edi
call fcn.0047a880
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea eax, [ecx + eax + 4]
push eax
call fcn.0043b8c0
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x4400e6
cmp eax, 1
jne 0x43ff88
mov edx, dword [esi + 0x1c]
push edx
nop
nop
nop
nop
nop
nop
xor ecx, ecx
test eax, eax
setne cl
mov eax, ecx
mov dword [esp + 0x14], eax
jmp 0x4400e6
push edi
call fcn.0047a880
add edi, eax
push edi
call fcn.0047a880
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea esi, [ecx + eax + 4]
push esi
call fcn.0047a880
mov eax, dword [eax + esi + 4]
add esp, 0xc
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x4400e6
cmp eax, 1
jne 0x43ffdd
mov ecx, esi
call fcn.0049c821
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x14], eax
jmp 0x4400e6
push edi
call fcn.0047a880
add edi, eax
push edi
call fcn.0047a880
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
lea esi, [eax + ecx + 4]
push esi
call fcn.0047a880
mov eax, dword [eax + esi + 4]
add esp, 0xc
shr eax, 1
and eax, 1
mov dword [esp + 0x14], eax
jmp 0x4400e6
push edi
call fcn.0047a880
add edi, eax
push edi
call fcn.0047a880
mov edx, dword [edi + eax + 0x1c]
lea eax, [edi + eax + 0x1c]
add esp, 8
mov ecx, dword [eax + edx*4 + 4]
lea eax, [eax + edx*4 + 4]
cmp ecx, 4
jb 0x440084
mov dword [esp + 0x3c], 0
mov ecx, dword [eax]
add eax, 4
push ecx
push eax
lea ecx, [esp + 0x34]
call fcn.0042a810
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
neg esi
sbb esi, esi
and esi, eax
mov edx, dword [esi]
push edx
call fcn.00448610
mov dword [esi], eax
mov eax, dword [esp + 0x40]
push eax
push esi
call fcn.0043b950
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x4400e6
add eax, 4
push ecx
push eax
call fcn.0043b950
add esp, 8
mov dword [esp + 0x14], eax
jmp 0x4400e6
test eax, eax
jne 0x4400aa
mov ecx, dword [esp + 0x10]
push eax
push 0x4c8fa8
call fcn.0043ef50
push 6
call dword [ebp + 0x2c]
lea edx, [esp + 0x1c]
xor ecx, ecx
add ebx, 0xfffffff8
push edx
mov dword [esp + 0x20], ecx
push ebx
push esi
mov dword [esp + 0x2c], ecx
call eax
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x14]
lea ecx, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x18]
push edx
push eax
call fcn.004405f0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0x2c], 0x4b1568
call fcn.0042a2a0
mov ecx, dword [esp + 0x40]
mov eax, esi
pop esi
mov edx, edi
pop ebx
pop edi
pop ebp
mov dword fs:[0], ecx
add esp, 0x3c
ret 0x10