Function at 0x426ad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d770d
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x536f50]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x78], ebx
mov esi, dword [esp + 0xf0]
xor edi, edi
push esi
mov dword [esp + 0x24], edi
call fcn.004249e0
mov dword [ebx + 0x11c], eax
lea eax, [esp + 0xa0]
push esi
push eax
call fcn.00426340
add esp, 0xc
mov eax, dword [esp + 0xac]
sub eax, dword [esp + 0xa8]
mov dword [esp + 0xe8], edi
sar eax, 5
mov dword [esp + 0x44], edi
lea ebx, [edi + 1]
cmp eax, edi
jbe 0x42783d
mov dword [esp + 0x40], edi
cmp dword [esp + 0x44], eax
jb 0x426b63
call fcn.0047b9cb
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0x40]
lea eax, [ecx + edx]
push eax
lea ecx, [esp + 0x4c]
call fcn.004231f0
push 3
xor eax, eax
mov ebp, 7
push 0x4df7e8
lea ecx, [esp + 0xbc]
mov byte [esp + 0xf0], bl
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xd0], edi
mov word [esp + 0xc0], ax
call fcn.00402500
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x48]
or dword [esp + 0x20], ebx
mov dword [esp + 0x6c], ecx
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0xf0], 2
mov dword [esp + 0x70], edx
call fcn.00420cc0
mov esi, eax
mov eax, dword [esi]
cmp eax, edi
je 0x426bf5
cmp eax, dword [esp + 0x68]
je 0x426bfa
call fcn.0047b9cb
mov edx, dword [esp + 0x6c]
cmp dword [esi + 4], edx
je 0x426c8b
push ebp
xor eax, eax
push str.display
lea ecx, [esp + 0x88]
mov dword [esp + 0xa0], ebp
mov dword [esp + 0x9c], edi
mov word [esp + 0x8c], ax
call fcn.00402500
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x48]
or dword [esp + 0x20], 2
mov dword [esp + 0x74], ecx
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0xdc]
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0xf0], 3
mov dword [esp + 0x78], edx
call fcn.00420cc0
mov esi, eax
mov eax, dword [esi]
cmp eax, edi
je 0x426c78
cmp eax, dword [esp + 0x70]
je 0x426c7d
call fcn.0047b9cb
mov edx, dword [esp + 0x74]
mov byte [esp + 0x1f], 0
cmp dword [esi + 4], edx
jne 0x426c8f
mov byte [esp + 0x1f], bl
test byte [esp + 0x20], 2
je 0x426ccd
and dword [esp + 0x20], 0xfffffffd
cmp dword [esp + 0x98], 8
jb 0x426cb5
mov eax, dword [esp + 0x84]
push eax
call fcn.004798f2
add esp, 4
xor ecx, ecx
mov dword [esp + 0x98], ebp
mov dword [esp + 0x94], edi
mov word [esp + 0x84], cx
mov dword [esp + 0xe8], ebx
test byte [esp + 0x20], bl
je 0x426cf9
and dword [esp + 0x20], 0xfffffffe
cmp dword [esp + 0xcc], 8
jb 0x426cf9
mov edx, dword [esp + 0xb8]
push edx
call fcn.004798f2
add esp, 4
cmp byte [esp + 0x1f], 0
jne 0x427804
push 0x22c
call fcn.0047b30d
add esp, 4
cmp eax, edi
je 0x426d20
mov ecx, eax
call fcn.004209b0
mov esi, eax
jmp 0x426d22
xor esi, esi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x11c], edi
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov dword [esp + 0xa0], esi
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebp
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.display
mov byte [esp + 0x128], 4
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0xc4]
push eax
mov byte [esp + 0xf4], 5
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x426dc5
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 8
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.filename
mov byte [esp + 0x128], 6
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x8c]
push eax
mov byte [esp + 0xf4], 7
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x426e5c
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 3
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4df7bc
mov byte [esp + 0x128], 8
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x144]
push eax
mov byte [esp + 0xf4], 9
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x426ef3
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 4
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.reg2
mov byte [esp + 0x128], 0xa
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x160]
push eax
mov byte [esp + 0xf4], 0xb
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x426f8a
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0x12
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.blockedprocesslist
mov byte [esp + 0x128], 0xc
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x17c]
push eax
mov byte [esp + 0xf4], 0xd
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x427021
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0x18
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.injectblockedprocesslist
mov byte [esp + 0x128], 0xe
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x198]
push eax
mov byte [esp + 0xf4], 0xf
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x4270b8
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0xf
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.showprocesslist
mov byte [esp + 0x128], 0x10
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x1b4]
push eax
mov byte [esp + 0xf4], 0x11
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x42714f
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0xb
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.desktopfile
mov byte [esp + 0x128], 0x12
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x1d0]
push eax
mov byte [esp + 0xf4], 0x13
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x4271e6
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0xb
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.appdatafile
mov byte [esp + 0x128], 0x14
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x1ec]
push eax
mov byte [esp + 0xf4], 0x15
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x42727d
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0x10
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.localappdatafile
mov byte [esp + 0x128], 0x16
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x208]
push eax
mov byte [esp + 0xf4], 0x17
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x427314
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push ebp
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.command
mov byte [esp + 0x128], 0x18
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x120]
push eax
mov byte [esp + 0xf4], 0x19
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x4273aa
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 3
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4df7e8
mov byte [esp + 0x128], 0x1a
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
push eax
mov ecx, esi
mov byte [esp + 0xf4], 0x1b
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x42743d
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push 0x4de910
mov word [ecx + 4], ax
call fcn.00402500
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 4
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], edi
push str.url2
mov byte [esp + 0x128], 0x1c
mov word [ecx + 4], dx
call fcn.00402500
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x1c]
push eax
mov byte [esp + 0xf4], 0x1d
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x4274d1
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4de910
call fcn.00401700
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push 0x4df6bc
mov byte [esp + 0x124], 0x1e
call fcn.00401700
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x38]
push eax
mov byte [esp + 0xf4], 0x1f
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x42754a
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4de910
call fcn.00401700
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.rand
mov byte [esp + 0x124], 0x20
call fcn.00401700
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x54]
push eax
mov byte [esp + 0xf4], 0x21
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x4275c3
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4de910
call fcn.00401700
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.randignore
mov byte [esp + 0x124], 0x22
call fcn.00401700
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x70]
push eax
mov byte [esp + 0xf4], 0x23
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x42763c
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4de910
call fcn.00401700
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.name
mov byte [esp + 0x124], 0x24
call fcn.00401700
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0xe0]
push eax
mov byte [esp + 0xf4], 0x25
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x4276b8
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4de910
call fcn.00401700
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.privateparam
mov byte [esp + 0x124], 0x26
call fcn.00401700
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x128], bl
call fcn.00423880
add esp, 0x40
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0xfc]
push eax
mov byte [esp + 0xf4], 0x27
call fcn.00401da0
cmp dword [esp + 0x3c], 8
mov byte [esp + 0xe8], bl
jb 0x427734
mov edx, dword [esp + 0x28]
push edx
call fcn.004798f2
add esp, 4
push edi
sub esp, 0x1c
xor eax, eax
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x4df668
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edi
mov word [esp + 0x4c], ax
call fcn.00401700
lea ecx, [esp + 0x68]
push ecx
call fcn.004239d0
add esp, 0x24
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.selected
mov dword [esi + 0x118], eax
call fcn.00401700
lea edx, [esp + 0x68]
push edx
call fcn.004239d0
add esp, 0x24
xor ecx, ecx
cmp ecx, eax
push edi
sbb edx, edx
sub esp, 0x1c
neg edx
mov ecx, esp
mov dword [esp + 0x34], esp
mov dword [esi + 0x224], eax
push str.type
mov dword [esi + 0x13c], edx
call fcn.00401700
lea eax, [esp + 0x68]
push eax
call fcn.004239d0
add esp, 0x24
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.show
mov dword [esi + 0x140], eax
call fcn.00401700
lea ecx, [esp + 0x68]
push ecx
call fcn.004239d0
mov ecx, dword [esp + 0x9c]
add esp, 0x24
lea edx, [esp + 0x7c]
push edx
add ecx, 0x104
mov dword [esi + 0x228], eax
call fcn.00432470
lea ecx, [esp + 0x48]
mov byte [esp + 0xe8], 0
call fcn.004233d0
mov eax, dword [esp + 0xac]
sub eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x44]
add dword [esp + 0x40], 0x20
add ecx, ebx
sar eax, 5
mov dword [esp + 0x44], ecx
cmp ecx, eax
jb 0x426b58
lea ecx, [esp + 0x9c]
mov byte [0x53a88c], bl
mov dword [esp + 0xe8], 0xffffffff
call fcn.00426260
xor eax, eax
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd8
ret 4