Function at 0x426c38
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xa0
mov ebp, dword [esp + 0xb8]
mov esi, dword [esp + 0xb4]
mov dword [esp], 0x204b3ed8
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov eax, dword [esp]
cmp eax, 0xf46168c6
jle 0x426cbb
cmp eax, 0x3bf921af
jg 0x426d0d
cmp eax, 0x1ab0e90d
jg 0x426df2
cmp eax, 0xda8ad0c
jg 0x426f6f
cmp eax, 0xfe665aae
jle 0x4271ee
cmp eax, 0xfe665aaf
je 0x427569
cmp eax, 0x60ca634
je 0x427592
cmp eax, 0x64d2d51
jne 0x426c5d
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
jmp 0x4278cd
cmp eax, 0xc92049e6
jle 0x426d7c
cmp eax, 0xe183f7d1
jg 0x426e50
cmp eax, 0xd7df6f28
jg 0x426fae
cmp eax, 0xcdfae9e0
jle 0x42721f
cmp eax, 0xcdfae9e1
je 0x4275c9
cmp eax, 0xd40623ca
je 0x42760d
cmp eax, 0xd5aa8b2b
je 0x427c31
jmp 0x426c5d
cmp eax, 0x5b1bebb3
jg 0x426ea5
cmp eax, 0x4861e6c2
jg 0x42700f
cmp eax, 0x435e3da0
jle 0x42724a
cmp eax, 0x435e3da1
je 0x42763c
cmp eax, 0x4616c898
je 0x427648
cmp eax, 0x470e05cb
jne 0x426c5d
imul ecx, dword [esp + 4], 0x10260000
add ecx, 0xffffe424
mov dword [esp + 4], ecx
mov eax, 0x614631bb
cmp ecx, 0xd3
jge 0x427c09
mov eax, 0xe0f28195
jmp 0x427c09
cmp eax, 0xa53e1552
jle 0x426ef3
cmp eax, 0xb343ce13
jg 0x42705b
cmp eax, 0xab26b6cd
jle 0x42728a
cmp eax, 0xab26b6ce
je 0x42765f
cmp eax, 0xae3215e3
je 0x427675
cmp eax, 0xb215b350
jne 0x426c5d
mov eax, dword [esp + 8]
lea ecx, [eax + 0x70]
imul ecx, ecx
add eax, 0xf4
imul edx, ecx, 0x8395
dec edx
shr eax, 0xe
mov dword [esp + 8], eax
mov eax, 0xe88c259a
cmp edx, ecx
je 0x427c09
mov eax, 0x614631bb
jmp 0x427c09
cmp eax, 0x31be53bc
jg 0x4270b8
cmp eax, 0x2154265b
jle 0x4272c7
cmp eax, 0x2154265c
je 0x4276a3
cmp eax, 0x23667d06
je 0x4276bb
cmp eax, 0x2f4415a9
jne 0x426c5d
mov ecx, dword [esp + 4]
shl ecx, 0x12
add ecx, 0x464000
mov dword [esp + 4], ecx
mov eax, 0x17dbd9f7
cmp ecx, 0xb8
jge 0x427a8c
jmp 0x427c09
cmp eax, 0xe8b92921
jg 0x42710b
cmp eax, 0xe7685975
jle 0x4272e9
cmp eax, 0xe7685976
je 0x4276e6
cmp eax, 0xe7ed2c98
je 0x427702
cmp eax, 0xe88c259a
jne 0x426c5d
mov eax, dword [esp + 0x40]
movzx eax, word [eax]
imul ax, word [esp + 0x26]
mov word [esp + 0x12], ax
mov dword [esp], 0xd7df6f29
jmp 0x426c5d
cmp eax, 0x6d604314
jg 0x42714e
cmp eax, 0x614631ba
jle 0x427325
cmp eax, 0x614631bb
je 0x427718
cmp eax, 0x615b110f
je 0x42772f
cmp eax, 0x66024f5d
jne 0x426c5d
mov eax, dword [esp + 0x34]
mov dword [esp + 0x82], eax
mov dword [esp], 0x191d7f5e
jmp 0x426c5d
cmp eax, 0x934be26e
jg 0x427191
cmp eax, 0x8dbaef5a
jle 0x427347
cmp eax, 0x8dbaef5b
je 0x427746
cmp eax, 0x8e8d4c6f
je 0x427759
cmp eax, 0x92d2bce3
jne 0x426c5d
mov eax, dword [esp + 4]
mov edi, eax
shl edi, 5
sub edi, eax
sub edi, eax
add edi, 0x2ea6
mov dword [esp + 4], edi
call fcn.00427e16
push edi
push 0x472e
call fcn.00428091
add esp, 8
mov eax, 0x38ff502d
cmp edi, 0xe5
jge 0x427c09
mov eax, 0x4172d054
jmp 0x427c09
cmp eax, 0x16135bf6
jle 0x42737a
cmp eax, 0x16135bf7
je 0x427797
cmp eax, 0x17dbd9f7
je 0x4277a3
cmp eax, 0x191d7f5e
jne 0x426c5d
mov word [esp + 0x7e], 0
mov dword [esp], 0x60ca634
jmp 0x426c5d
cmp eax, 0xdee81454
jle 0x4273b5
cmp eax, 0xdee81455
je 0x4277d8
cmp eax, 0xdf88943f
je 0x427800
cmp eax, 0xe0f28195
jne 0x426c5d
imul eax, dword [esp + 4], 0x188
shr eax, 0xf
imul edi, eax, 0x69
add edi, 0xffffdaed
mov dword [esp + 4], edi
call fcn.00427f64
mov eax, 0xb343ce14
cmp edi, 0x1d
je 0x427c09
mov eax, 0xefae2415
jmp 0x427c09
cmp eax, 0x559a1bb6
jle 0x4273f2
cmp eax, 0x559a1bb7
je 0x427838
cmp eax, 0x56fb1c8d
je 0x42785d
cmp eax, 0x59b82ec3
jne 0x426c5d
imul eax, dword [esp + 8], 0x38e0
add eax, 0xfff78ec0
shr eax, 6
mov dword [esp + 8], eax
mov dword [esp], 0x39b38a12
jmp 0x426c5d
cmp eax, 0xbe8bd99f
jle 0x427425
cmp eax, 0xbe8bd9a0
je 0x427883
cmp eax, 0xc2d8eff3
je 0x427899
cmp eax, 0xc56673a5
jne 0x426c5d
imul eax, dword [esp + 4], 0x56c00000
or eax, 0x79
imul eax, eax, 0x6a
mov dword [esp + 4], eax
push 0x3cb8
push eax
push 0x1d77
call fcn.00426c38
add esp, 0xc
mov dword [esp], 0xe88c259a
jmp 0x426c5d
cmp eax, 0x374a509a
jle 0x427479
cmp eax, 0x374a509b
je 0x4278bd
cmp eax, 0x38ff502d
je 0x4278dd
cmp eax, 0x39b38a12
jne 0x426c5d
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
lea ecx, [eax*4 + 0x28]
mov edi, dword [ebp]
add edi, 0xe
mov eax, dword [esp + 0xc]
xchg esi, eax
rep movsb byte es:[edi], byte [esi]
xchg esi, eax
mov dword [esp], 0x6d604315
jmp 0x426c5d
cmp eax, 0xefae2414
jle 0x4274ab
cmp eax, 0xefae2415
je 0x427911
cmp eax, 0xf22e1b04
je 0x42793e
cmp eax, 0xf2bf8b37
jne 0x426c5d
mov eax, dword [esp + 0xc]
add eax, 0x24
mov dword [esp + 0x60], eax
mov dword [esp], 0xe8b92922
jmp 0x426c5d
cmp eax, 0x709e7a24
jle 0x4274f8
cmp eax, 0x709e7a25
je 0x42796b
cmp eax, 0x71c5912e
je 0x42799d
cmp eax, 0x79499e71
jne 0x426c5d
mov eax, dword [esp + 0xc]
add eax, 0x1c
mov dword [esp + 0x58], eax
mov dword [esp], 0xdee81455
jmp 0x426c5d
cmp eax, 0x99952f50
jg 0x427530
cmp eax, 0x934be26f
je 0x4279d4
cmp eax, 0x945d5f9c
jne 0x427c25
mov eax, dword [esp + 8]
shr eax, 1
and eax, 0xfffff
imul ecx, eax, 0x1fa0
imul eax, eax
imul edx, eax, 0xe7f
dec edx
add ecx, 0xffff17c1
mov dword [esp + 8], ecx
mov ecx, 0xda8ad0d
cmp edx, eax
je 0x42778f
mov ecx, 0xae3215e3
jmp 0x42778f
cmp eax, 0xf46168c7
je 0x4279f3
cmp eax, 0xfc8aaaee
jne 0x426c5d
imul eax, dword [esp + 8], 0x72500000
add eax, 0xffffff84
mov dword [esp + 8], eax
mov dword [esp], 0x8dbaef5b
jmp 0x426c5d
cmp eax, 0xc92049e7
je 0x427a44
cmp eax, 0xca7d9612
jne 0x426c5d
movzx eax, word [esp + 0x12]
mov dword [esp + 0x2c], eax
mov dword [esp], 0x709e7a25
jmp 0x426c5d
cmp eax, 0x3bf921b0
je 0x427a6a
cmp eax, 0x4172d054
jne 0x426c5d
imul ecx, dword [esp + 4], 0x3580
add ecx, 0x141000
mov dword [esp + 4], ecx
mov eax, 0x1ab0e90e
cmp ecx, 0x17
jl 0x427c09
mov eax, 0xf46168c7
jmp 0x427c09
cmp eax, 0xa53e1553
je 0x427a96
cmp eax, 0xa540ef89
jne 0x426c5d
mov ecx, dword [esp + 4]
mov eax, 0xffffff6e
add ecx, eax
mov dword [esp + 4], ecx
mov eax, 0xc56673a5
cmp ecx, 0x6b
jge 0x427c09
mov eax, 0x2f4415a9
jmp 0x427c09
cmp eax, 0x1ab0e90e
je 0x427aa9
cmp eax, 0x204b3ed8
jne 0x426c5d
mov dword [esp], 0x17dbd9f7
jmp 0x426c5d
cmp eax, 0xe183f7d2
je 0x427ac0
cmp eax, 0xe3a20264
jne 0x426c5d
lea eax, [esp + 0x8c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
imul eax, dword [esp + 0x2c]
mov dword [esp + 0x44], eax
mov dword [esp], 0x5577d6d4
jmp 0x426c5d
cmp eax, 0x5b1bebb4
je 0x427ad8
cmp eax, 0x603edea5
jne 0x426c5d
mov dword [esp], 0xf2bf8b37
jmp 0x426c5d
cmp eax, 0x852c33ef
je 0x427aee
cmp eax, 0x8a7477c9
jne 0x426c5d
call ebx
push 0x28
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esp + 0xc], eax
mov dword [esp], 0x435e3da1
jmp 0x426c5d
cmp eax, 0xda8ad0d
je 0x427afa
cmp eax, 0xeec6e15
jne 0x426c5d
mov eax, dword [esp + 8]
mov ecx, 0xfffff
and eax, ecx
lea eax, [eax*8 - 0xb3]
shr eax, 2
mov dword [esp + 8], eax
mov dword [esp], 0x79499e71
jmp 0x426c5d
cmp eax, 0xd7df6f29
je 0x427b10
cmp eax, 0xd91beb26
jne 0x426c5d
mov eax, dword [esp + 0xc]
xor edx, edx
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov dword [eax + 0x14], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], edx
mov dword [esp], 0xeec6e15
jmp 0x426c5d
cmp eax, 0x4861e6c3
je 0x427b4d
cmp eax, 0x5577d6d4
jne 0x426c5d
mov eax, dword [esp + 0x44]
add eax, 0x1f
and eax, 0xffffffe0
sar eax, 3
mov dword [esp + 0x48], eax
mov dword [esp], 0x71c5912e
jmp 0x426c5d
cmp eax, 0xb343ce14
je 0x427b63
cmp eax, 0xb9a019c3
jne 0x426c5d
imul edi, dword [esp + 4], 0x54
add edi, 0xfff5e000
and edi, 0xffffe000
or edi, 0xaf
mov dword [esp + 4], edi
push edi
call fcn.00428144
add esp, 4
push 0x1ba9
push edi
call fcn.00428029
add esp, 8
mov dword [esp], 0x5577d6d4
jmp 0x426c5d
cmp eax, 0x31be53bd
je 0x427b91
cmp eax, 0x359a4a84
jne 0x426c5d
mov eax, dword [esp + 8]
shl eax, 0x1c
lea eax, [eax + eax*4]
neg eax
mov dword [esp + 8], eax
mov dword [esp], 0xe88c259a
jmp 0x426c5d
cmp eax, 0xe8b92922
je 0x427baa
cmp eax, 0xeee80e02
jne 0x426c5d
mov edi, dword [esp + 4]
shl edi, 9
or edi, 0xe2
mov dword [esp + 4], edi
push edi
push 0x1a2
call fcn.00428029
add esp, 8
mov eax, 0x1ab0e90e
cmp edi, 0x2f
jl 0x427c09
mov eax, 0xb9a019c3
jmp 0x427c09
cmp eax, 0x6d604315
je 0x427bd3
cmp eax, 0x6fa4c2e4
jne 0x426c5d
mov eax, dword [esp + 8]
mov ecx, 0x1ffffff
and eax, ecx
lea eax, [eax*4 + 0x1c]
mov dword [esp + 8], eax
mov dword [esp], 0x1ab0e90e
jmp 0x426c5d
cmp eax, 0x99952f51
je 0x427c11
cmp eax, 0x9a29c658
jne 0x426c5d
mov eax, dword [esp + 0xc]
mov dword [eax], 0x28
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 4], eax
mov dword [esp], 0x5b1bebb4
jmp 0x426c5d
mov eax, dword [esp + 4]
lea eax, [eax*8 - 0x160]
mov dword [esp + 4], eax
push eax
push 0x255
call fcn.00428091
add esp, 8
mov dword [esp], 0xe88c259a
jmp 0x426c5d
mov ecx, dword [esp + 8]
shr ecx, 6
imul eax, ecx, 0x98000
imul ecx, ecx
imul edx, ecx, 0x4037
dec edx
add eax, 0xffdc8000
mov dword [esp + 8], eax
mov eax, 0x614631bb
cmp ecx, edx
je 0x427c09
mov eax, 0x4861e6c3
jmp 0x427c09
mov eax, dword [esp + 8]
mov ecx, 0xffffff2d
add eax, ecx
shr eax, 0xe
lea ecx, [eax - 0xa5]
imul ecx, ecx
imul edx, ecx, 0x17b
dec edx
imul eax, eax, 0x61000
add eax, 0xf804ef96
mov dword [esp + 8], eax
mov eax, 0xdf88943f
cmp ecx, edx
je 0x427c09
mov eax, 0x615b110f
jmp 0x427c09
call ebx
push dword [esp + 0x3c]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp], eax
lea edx, [esp + 0x78]
mov edi, eax
mov ecx, 0xe
xchg esi, edx
rep movsb byte es:[edi], byte [esi]
xchg esi, edx
mov dword [esp], 0x59b82ec3
jmp 0x426c5d
mov dword [esp], 0x9a29c658
jmp 0x426c5d
mov eax, dword [esp + 0xc]
add eax, 0x20
mov dword [esp + 0x5c], eax
mov dword [esp], 0x64d2d51
jmp 0x426c5d
mov eax, dword [esp + 0x60]
mov dword [eax], 0
mov dword [esp], 0xfc8aaaee
jmp 0x426c5d
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x6c]
lea edi, [ecx + eax*4]
add edi, 0x36
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
xchg esi, eax
rep movsb byte es:[edi], byte [esi]
xchg esi, eax
call ebx
mov dword [esp + 0x70], eax
mov dword [esp], 0x937a5d68
jmp 0x426c5d
movzx eax, word [esp + 0x12]
mov ecx, dword [esp + 0x54]
mov word [ecx], ax
mov dword [esp], 0x934be26f
jmp 0x426c5d
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x34]
mov dword [esp + 0x7a], eax
call ebx
push dword [esp + 0x14]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esp + 0x20], eax
mov dword [esp], 0x852c33ef
jmp 0x426c5d
mov eax, dword [esp + 8]
shl eax, 0x1f
or eax, 0x19400000
mov dword [esp + 8], eax
mov dword [esp], 0xd40623ca
jmp 0x426c5d
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x64], eax
mov dword [esp], 0xcdfae9e1
jmp 0x426c5d
mov eax, dword [esp + 0xc]
add eax, 0xe
mov dword [esp + 0x54], eax
mov dword [esp], 0x2154265c
jmp 0x426c5d
mov eax, dword [esp + 0x64]
movzx eax, ax
mov dword [esp + 0x68], eax
mov dword [esp], 0x8e8d4c6f
jmp 0x426c5d
mov word [esp + 0x78], 0x4d42
mov dword [esp], 0x56fb1c8d
jmp 0x426c5d
mov eax, dword [esp + 8]
mov ecx, 0xc2
add eax, ecx
shr eax, 0xd
imul ecx, eax, 0xbc
imul eax, eax
imul edx, eax, 0x3cef
dec edx
add ecx, 0x65ae
mov dword [esp + 8], ecx
mov ecx, 0xf2bf8b37
cmp eax, edx
je 0x42778f
mov ecx, 0xf46168c7
mov dword [esp], ecx
jmp 0x426c5d
mov dword [esp], 0xe7ed2c98
jmp 0x426c5d
lea eax, [esp + 0x88]
push eax
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectW]
movzx eax, word [esp + 0x98]
mov word [esp + 0x26], ax
lea eax, [esp + 0x9a]
mov dword [esp + 0x40], eax
mov dword [esp], 0x359a4a84
jmp 0x426c5d
mov eax, dword [esp + 0x58]
mov dword [eax], 0
movzx ecx, word [esp + 0x12]
mov eax, 0x374a509b
cmp cx, 0x10
jb 0x427c09
mov eax, 0x4616c898
jmp 0x427c09
imul edi, dword [esp + 4], 0x8c00
add edi, 0xffffffa1
mov dword [esp + 4], edi
push edi
push 0x2bb
call fcn.00428091
add esp, 8
mov eax, 0x2154265c
cmp edi, 0xd2
jge 0x427c09
mov eax, 0xeee80e02
jmp 0x427c09
mov eax, dword [esp + 4]
lea ecx, [eax*4 + 0x2c6]
mov dword [esp + 4], ecx
mov eax, 0xa540ef89
cmp ecx, 0xb3
jge 0x427a8c
jmp 0x427c09
mov eax, dword [esp + 0xc]
add eax, 0x20
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x74]
lea eax, [eax*4 + 0x36]
mov dword [esp + 0x34], eax
mov dword [esp], 0x66024f5d
jmp 0x426c5d
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov dword [ecx], eax
mov dword [esp], 0xda8ad0d
jmp 0x426c5d
mov eax, dword [esp + 4]
shr eax, 9
and eax, 0x7fe000
imul eax, eax, 0x76
add eax, 0xfd1e8000
mov dword [esp + 4], eax
mov dword [esp], 0xfe665aaf
jmp 0x426c5d
mov ecx, dword [esp + 0x2c]
xor eax, eax
inc eax
shl eax, cl
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x20], eax
mov dword [esp], 0x99952f51
mov dword [esp + 0x28], eax
jmp 0x426c5d
mov eax, dword [esp + 4]
add eax, 0x5d
shr eax, 0xf
imul ecx, eax, 0x132000
mov eax, ecx
shr eax, 0xc
mov dword [esp + 4], eax
mov eax, 0xf46168c7
cmp ecx, 0x23000
jb 0x427c09
mov eax, 0xf22e1b04
jmp 0x427c09
imul eax, dword [esp + 4], 0x1b40
shr eax, 1
imul ecx, eax, 0x1f000
or ecx, 0xb5
mov dword [esp + 4], ecx
mov eax, 0x2154265c
cmp ecx, 2
jge 0x427b8a
jmp 0x427c09
mov eax, 0x8a
mov dword [esp + 4], eax
push eax
push 0x2a61
push 0x4875
call fcn.00427cc0
add esp, 0xc
call fcn.00427f64
mov dword [esp], 0xab26b6ce
jmp 0x426c5d
imul eax, dword [esp + 8], 0x87
mov ecx, eax
imul ecx, eax
add eax, 0xffffffa7
imul edx, ecx, 0x6693
dec edx
mov dword [esp + 8], eax
mov eax, 0xe88c259a
cmp edx, ecx
je 0x427c09
mov eax, 0xe3a20264
jmp 0x427c09
mov ecx, dword [esp + 8]
shr ecx, 7
imul eax, ecx, 0x184000
imul ecx, ecx
imul edx, ecx, 0x2caf
or eax, 0x91
dec edx
mov dword [esp + 8], eax
mov eax, 0x3bf921b0
cmp edx, ecx
je 0x427c09
mov eax, 0xc92049e7
jmp 0x427c09
mov eax, dword [esp + 8]
shl eax, 0x1c
add eax, 0xffed4000
shr eax, 4
mov dword [esp + 8], eax
mov dword [esp], 0xd91beb26
jmp 0x426c5d
xor edi, edi
push edi
push dword [esp + 0x10]
push dword [esp + 0x28]
push dword [esp + 0x74]
push edi
push esi
push dword [esp + 0x50]
call dword [sym.imp.GDI32.dll_GetDIBits]
push dword [esp + 0x38]
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
lea eax, [ecx + eax*4 + 0x36]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xbc]
mov dword [ecx], eax
mov dword [esp], 0xe7685976
jmp 0x426c5d
lea eax, [esp + 0x90]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
imul eax, dword [esp + 0x48]
mov dword [esp + 0x14], eax
mov dword [esp], 0x8a7477c9
jmp 0x426c5d
mov edi, dword [esp + 4]
mov eax, 0xfffffefa
add edi, eax
mov dword [esp + 4], edi
call fcn.00427f64
mov eax, 0x5577d6d4
cmp edi, 0x6b
jb 0x427c09
mov eax, 0xe88c259a
jmp 0x427c09
mov eax, dword [ebp]
mov dword [esp + 0x6c], eax
mov dword [esp], 0x945d5f9c
jmp 0x426c5d
mov eax, dword [esp + 0xc]
add eax, 8
mov dword [esp + 0x50], eax
mov dword [esp], 0xbe8bd9a0
jmp 0x426c5d
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x38], eax
mov dword [esp], 0x16135bf7
jmp 0x426c5d
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
mov dword [esp], 0x6fa4c2e4
jmp 0x426c5d
mov dword [esp], 0xe183f7d2
jmp 0x426c5d
mov eax, dword [esp + 0xc]
mov word [eax + 0xc], 1
mov dword [esp], 0xb215b350
jmp 0x426c5d
mov eax, dword [esp + 8]
mov ecx, 0xffffff73
add eax, ecx
shr eax, 3
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x857
dec edx
shl eax, 6
add eax, 0x3a00
mov dword [esp + 8], eax
mov eax, 0x559a1bb7
cmp ecx, edx
je 0x427c09
mov eax, 0xca7d9612
jmp 0x427c09
mov word [esp + 0x80], 0
mov dword [esp], 0x23667d06
jmp 0x426c5d
imul ecx, dword [esp + 4], 0xd00
add ecx, 0x9c00
shr ecx, 1
and ecx, 0x7ffffe00
or ecx, 0x24
mov dword [esp + 4], ecx
mov eax, 0xe3a20264
cmp ecx, 0x68
jb 0x427c09
mov eax, 0x1ab0e90e
jmp 0x427c09
mov eax, dword [esp + 4]
shl eax, 8
mov dword [esp + 4], eax
mov eax, 0xda8ad0d
je 0x427c09
mov eax, 0x17dbd9f7
jmp 0x427c09
mov eax, dword [esp + 8]
shr eax, 1
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5dd9
dec edx
add eax, 0x5e
mov dword [esp + 8], eax
mov eax, 0xd5aa8b2b
cmp edx, ecx
je 0x427c09
mov eax, 0xab26b6ce
jmp 0x427c09
mov eax, dword [esp + 8]
add eax, 0xfffffffb
mov ecx, eax
shr ecx, 0xf
imul ecx, ecx
imul edx, ecx, 0x7db9
shr eax, 0x17
dec edx
imul eax, eax, 0xb3
add eax, 0x8859
mov dword [esp + 8], eax
mov eax, 0x23667d06
cmp ecx, edx
je 0x427c09
mov eax, 0xa53e1553
mov dword [esp], eax
jmp 0x426c5d
mov eax, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [esp], 0x603edea5
jmp 0x426c5d
cmp eax, 0x937a5d68
je 0x427c91
jmp 0x426c5d
mov ebx, esi
mov esi, ebp
mov eax, dword [esp + 4]
shr eax, 1
and eax, 0x1ffffff
imul ebp, eax, 0xb2
add ebp, 0x55
mov edi, ebp
shr edi, 5
mov dword [esp + 4], edi
push edi
push 0x3ad7
push 0x25e2
call fcn.00426c38
add esp, 0xc
push 0x3984
push edi
call fcn.00428091
add esp, 8
mov eax, 0xc2d8eff3
cmp ebp, 0xac0
jae 0x427c85
mov eax, 0xd91beb26
mov dword [esp], eax
mov ebp, esi
mov esi, ebx
jmp 0x426c57
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [esp + 0x20]
push edi
push dword [esp + 0x78]
call esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push dword [esp + 0xc]
push edi
push eax
call esi
xor eax, eax
inc eax
add esp, 0xa0
pop esi
pop edi
pop ebx
pop ebp
ret