Function at 0x428210
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x48
mov ebp, dword [esp + 0x5c]
mov eax, dword [0x4520e4]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x60]
mov ebx, dword [eax + 0x44]
test ebx, ebx
je 0x428243
mov dword [ebp + 0x1238], 1
mov dword [ebp + 0x3988], 1
mov dword [ebp + 0x3dc4], 0
mov dword [ebp + 0x1674], 0
push dword [esp + 0x60]
call fcn.00414240
mov dword [esp + 0x28], eax
pop ecx
test eax, eax
jne 0x4284ae
mov eax, dword [esp + 0x60]
mov dword [eax + 0x58], 0
mov esi, dword [eax + 4]
mov dword [esp + 0x14], 0
cmp esi, dword [ebp + 0x4ee4]
jg 0x4285e1
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x2c], eax
mov ebx, 1
cmp eax, dword [ebp + 0x1204]
je 0x4285d1
mov eax, dword [esp + 0x60]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov edi, eax
mov dword [ebp + 0x4ee0], eax
mov dword [ebp + 0x4ee4], esi
mov ecx, dword [esp + 0x68]
add ecx, ecx
add ecx, dword [esp + 0x68]
add ecx, ecx
add ecx, ecx
add ecx, ecx
add ecx, dword [esp + 0x68]
add ecx, ecx
lea eax, [ecx + ecx]
mov dword [esp], eax
mov edx, dword [esp + 0x60]
mov ecx, dword [edx + 8]
cdq
idiv ecx
mov dword [esp + 0x30], eax
cmp eax, 1
jle 0x4284c3
mov eax, dword [esp + 0x74]
test eax, eax
jne 0x428658
mov eax, dword [esp + 0x30]
sar eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
imul eax, ecx
mov edi, dword [esp]
cmp eax, edi
jne 0x428658
mov edi, dword [esp + 0x68]
test edi, edi
js 0x428658
mov eax, dword [esp + 0x68]
shl eax, 5
sub eax, dword [esp + 0x68]
add eax, eax
add eax, eax
add eax, dword [esp + 0x68]
add eax, eax
add eax, eax
add eax, eax
mov edx, dword [esp + 0x2c]
imul edx, ecx
cmp eax, edx
jg 0x428658
test esi, esi
jle 0x4295f0
mov dword [esp + 0x34], 0
mov dword [esp + 0x2c], 0
mov esi, ebp
xor edi, edi
xor edx, edx
push edx
push edi
push dword [ebp + 0x4ef0]
push dword [esp + 0x6c]
push esi
call fcn.00432290
mov edx, eax
add esp, 0x14
test eax, eax
jne 0x4286a1
mov eax, ebx
or eax, dword [esi + 0x1238]
jne 0x428672
mov eax, dword [esi + 0x17bc]
mov dword [esi + 0x17c0], eax
add edi, 1
add esi, 0x2750
mov eax, dword [esp + 0x60]
cmp dword [eax + 4], edi
jle 0x4286aa
cmp edi, 1
jne 0x428370
mov edx, dword [ebp + 0x11e0]
jmp 0x428370
mov ebp, dword [esp + 0x5c]
xor ecx, ecx
mov eax, dword [ebp + 0x11e0]
mov ebx, dword [esp + 0x60]
mov edx, dword [ebx + 4]
mov dword [ebp + 0x4ee8], edx
mov dword [ebx + 0x4c], ecx
xor ecx, ecx
cmp eax, 0x10
jne 0x4283f9
xor ecx, ecx
mov esi, dword [ebp + 0x1c]
test esi, esi
sete cl
mov edi, dword [esp + 0x60]
mov dword [edi + 0x50], ecx
cwde
mov ecx, eax
shl ecx, 5
sub ecx, eax
add ecx, ecx
add ecx, ecx
add eax, ecx
add eax, eax
add eax, eax
add eax, eax
mov dword [edi + 0x48], eax
mov ebx, dword [edi + 0x3c]
test ebx, ebx
jne 0x428429
movsx eax, word [ebp + 0x4ebc]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x60]
mov edi, dword [esp + 0x24]
mov dword [eax + 0x54], edi
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x42847b
mov ebx, dword [esp + 0x2c]
mov dword [eax + 0x18], ebx
mov esi, dword [esp + 0x34]
mov dword [eax + 0x24], esi
test edx, edx
jle 0x42847b
mov dword [ebp + 0x123c], 0
mov dword [ebp + 0x1248], 0
cmp edx, 1
je 0x42847b
mov dword [ebp + 0x398c], 0
mov dword [ebp + 0x3998], 0
movsx edx, byte [ebp + 0x129d]
mov eax, edx
mov esi, dword [esp + 0x60]
mov dword [esi + 0x5c], edx
sar al, 1
movsx eax, al
movsx edx, byte [ebp + 0x129e]
add eax, eax
add eax, edx
movsx eax, word [eax + eax + 0x44ff44]
mov dword [esi + 0x60], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x28]
mov dword [0x4520e4], eax
mov eax, dword [esp + 0x24]
add esp, 0x48
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x74]
test eax, eax
je 0x428665
cmp dword [esp + 0x30], 1
jne 0x428658
cmp dword [esp + 0x74], 2
jne 0x428507
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x11e0]
mov dword [esp + 0x1c], eax
test esi, esi
jle 0x429238
mov esi, ebp
xor edi, edi
mov dword [esp], ebx
mov ebx, edi
mov edi, dword [esp + 0x60]
push dword [esi + 0x13e4]
push esi
call fcn.0043734c
mov ecx, eax
pop eax
pop edx
cmp dword [esp + 0x74], 2
jne 0x428556
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [esp + 8]
mov dword [esi + 0x14], eax
mov eax, dword [esp + 0xc]
mov dword [esi + 0x18], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x20], eax
add ebx, 1
mov eax, dword [edi + 4]
add esi, 0x2750
cmp eax, ebx
jg 0x42851c
mov dword [esp + 0x14], ecx
mov ebx, dword [esp]
mov esi, dword [esp + 0x60]
mov edi, dword [esi + 0x18]
mov dword [esp + 0x2c], edi
mov dword [esi + 0x18], 0xa
mov edi, esi
mov esi, dword [esi + 0x24]
mov dword [esp + 0x34], esi
mov dword [edi + 0x24], 0
test eax, eax
jle 0x429508
mov dword [ebp + 0x123c], 0
mov dword [ebp + 0x1248], 1
cmp eax, 2
jne 0x4285c4
mov dword [ebp + 0x398c], 0
mov dword [ebp + 0x3998], 1
mov dword [esp + 0x10], 1
jmp 0x42836a
xor ebx, ebx
cmp dword [ebp + 0x4ee4], esi
setne bl
jmp 0x4282ab
lea ebx, [ebp + 0x2750]
push dword [ebp + 0x13e4]
push ebx
call fcn.0043734c
mov dword [esp + 0x1c], eax
mov dword [ebp + 0x4ea0], 0
mov dword [ebp + 0x4ea8], 0
mov dword [ebp + 0x4eac], 0
mov dword [ebp + 0x4eb0], 1
mov dword [ebp + 0x4eb4], 0
mov dword [ebp + 0x4eb8], 1
mov dword [ebp + 0x4ebc], 0x4000
pop eax
pop edx
cmp dword [ebp + 0x4ee0], 2
je 0x4294ac
mov eax, dword [esp + 0x60]
mov esi, dword [eax + 4]
jmp 0x42828f
mov dword [esp + 0x24], 0xffffff9b
jmp 0x4284ae
mov dword [esp + 0x10], 1
jmp 0x42830c
mov eax, dword [ebp + 0x1670]
test eax, eax
jle 0x42839d
mov dword [esp], edx
add eax, eax
add eax, eax
lea ecx, [esi + 0x1274]
push eax
push 0
push ecx
call sub.MSVCR80.DLL_memset
add esp, 0xc
mov edx, dword [esp]
jmp 0x42839d
mov dword [esp + 0x24], eax
jmp 0x4284ae
mov dword [esp + 0x14], edx
mov edi, dword [eax]
mov ecx, dword [ebp + 0x11e0]
mov edx, dword [esp + 0x30]
imul edx, ecx
lea eax, [edx + edx]
add eax, eax
add eax, edx
lea esi, [eax + eax]
mov dword [esp + 0x20], esi
mov ebx, dword [ebp + 0x11cc]
mov eax, dword [0x4520e4]
mov edx, eax
and edx, 1
add eax, edx
mov dword [esp + 0x18], eax
mov eax, esi
imul eax, ebx
mov esi, ecx
shl esi, 5
sub esi, ecx
add esi, esi
add esi, esi
add esi, ecx
add esi, esi
add esi, esi
add esi, esi
cdq
idiv esi
add eax, eax
mov esi, dword [esp + 0x18]
add eax, esi
mov dword [0x4520e4], eax
mov dword [esp + 0xc], 0
lea eax, [ebp + 0x1690]
mov dword [esp + 0x1c], eax
mov eax, ebx
mov edx, ecx
mov dword [esp + 0x5c], ebp
mov ebx, dword [esp + 0x5c]
mov ebp, dword [ebx + 0x166c]
mov ecx, dword [ebx + 0x11e8]
sub ecx, ebp
mov esi, dword [esp + 0x20]
cmp esi, ecx
cmovle ecx, esi
mov dword [esp], ecx
imul eax, ecx
mov ecx, edx
shl ecx, 5
sub ecx, edx
add ecx, ecx
add ecx, ecx
add ecx, edx
add ecx, ecx
add ecx, ecx
add ecx, ecx
cdq
idiv ecx
mov ebx, eax
cmp edi, 2
je 0x428b58
lea eax, [ebx + ebx]
mov edx, dword [esp + 0x18]
mov edi, edx
mov esi, dword [esp + 0x64]
cmp eax, 4
jae 0x428b37
test al, 2
je 0x428781
movsw word es:[edi], word [esi]
test al, 1
je 0x428786
movsb byte es:[edi], byte [esi]
push ebx
push dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x166c]
mov dword [esp + 0xc], eax
add eax, 0x9f6
add eax, eax
add eax, dword [esp + 0x64]
push eax
push dword [esp + 0x28]
call fcn.0043abb0
add dword [esp + 0x24], eax
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x10]
add edx, dword [eax + 0x166c]
mov dword [eax + 0x166c], edx
mov eax, dword [eax + 0x11e8]
add esp, 0x10
mov edi, dword [esp + 0x60]
mov ecx, dword [edi]
imul ecx, ebx
add ecx, ecx
add dword [esp + 0x64], ecx
sub dword [esp + 0x68], ebx
mov esi, dword [esp + 0x5c]
mov dword [esi + 0x4ef0], 0
cmp edx, eax
jl 0x4283cc
mov eax, esi
mov ebp, dword [esi + 0x1674]
test ebp, ebp
jne 0x428aea
mov esi, dword [esp + 0x74]
test esi, esi
je 0x428eb5
push dword [esp + 0x5c]
call fcn.00429630
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x1c]
mov dword [esp + 4], eax
mov esi, dword [esp + 0x64]
mov ecx, dword [esi + 0x18]
imul eax, ecx
mov ebx, eax
mov edx, 0x10624dd3
imul edx
mov eax, edx
sar eax, 6
sar ebx, 0x1f
sub eax, ebx
pop ebp
mov ebx, dword [esp + 0x5c]
cdq
idiv dword [ebx + 0x1670]
movsx edx, ax
cmp ecx, 0xa
lea ecx, [edx + edx]
je 0x428c11
add ecx, edx
add ecx, ecx
add ecx, ecx
add ecx, ecx
add ecx, edx
add ecx, ecx
mov edi, dword [esp + 0x5c]
mov edx, dword [edi + 0x4edc]
add edx, edx
sub ecx, edx
mov ebx, dword [esp + 0x74]
test ebx, ebx
jne 0x4288aa
mov ebx, dword [edi + 0x1674]
test ebx, ebx
jle 0x4288aa
mov esi, dword [esp + 0x6c]
bsr edx, dword [esi + 0x1c]
not edx
add edx, dword [esi + 0x14]
sub edx, dword [edi + 0x4ed8]
imul ebx, eax
mov eax, edx
sub eax, ebx
add eax, eax
sub ecx, eax
mov eax, dword [esp]
cmp eax, 0x1388
jle 0x428ace
cmp ecx, eax
jg 0x4288c9
mov eax, 0x1388
cmp ecx, eax
cmovge eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x11e8]
mov esi, dword [esp + 0x60]
cmp dword [esi + 4], 2
je 0x428c30
mov esi, dword [esp + 0x5c]
mov edx, dword [esi + 0x4ea4]
mov dword [esi + 0x13e8], edx
mov eax, dword [esi + eax*2 + 0x13e8]
mov dword [esi + 0x4ea4], eax
push dword [esp + 0x78]
push dword [esp + 0x60]
call fcn.00434ae8
mov eax, dword [esp + 0x68]
mov edi, dword [eax + 4]
pop eax
pop edx
test edi, edi
jle 0x4289ce
cmp dword [esp + 0x10], 2
sete dl
mov eax, dword [esp + 0xc]
test eax, eax
sete al
and edx, eax
mov byte [esp + 8], dl
mov ebx, dword [esp + 0x5c]
xor esi, esi
mov eax, dword [esp + 0x60]
mov ecx, dword [eax + 0x38]
cmp byte [esp + 8], 0
je 0x428a36
lea ebp, [ecx + ecx]
add ebp, ecx
mov eax, 0x66666667
imul ebp
sar edx, 1
mov eax, ebp
sar eax, 0x1f
sub edx, eax
mov ebp, edx
xor edx, edx
cmp edi, 1
je 0x428a6e
mov edi, dword [esp + esi*4 + 0x40]
test esi, esi
jne 0x42898f
mov eax, dword [esp + 0x44]
test eax, eax
jle 0x42898f
mov eax, dword [esp + 0x10]
lea edx, [eax + eax]
mov eax, ecx
mov ecx, edx
cdq
idiv ecx
sub ebp, eax
xor edx, edx
mov dword [esp + 4], edx
test edi, edi
jg 0x428a7d
mov dword [ebx + 0x123c], 0
mov dword [ebx + 0x166c], 0
add dword [ebx + 0x1674], 1
add esi, 1
mov eax, dword [esp + 0x60]
mov edi, dword [eax + 4]
add ebx, 0x2750
cmp edi, esi
jg 0x428939
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x1674]
mov ebx, dword [esp + 0x5c]
movsx edx, byte [ebx + eax + 0x4ed3]
mov esi, ebx
mov dword [ebx + 0x4ef4], edx
mov ebx, dword [esp + 0x70]
mov ebx, dword [ebx]
test ebx, ebx
jle 0x428a04
mov edx, dword [esi + 0x1670]
cmp eax, edx
je 0x428d7c
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x11e0]
mov edx, eax
mov edi, dword [esp + 0x68]
test edi, edi
je 0x429202
add dword [esp + 0xc], 1
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x11cc]
mov edi, dword [esp + 0x60]
mov edi, dword [edi]
jmp 0x428723
cmp dword [esp + 0x10], 3
je 0x428bfd
mov eax, dword [esp + 0x60]
mov edx, dword [eax + 0x34]
mov ebp, ecx
test edx, edx
je 0x428964
mov eax, dword [esp + 0x10]
sub eax, 1
mov edx, dword [esp + 0xc]
cmp eax, edx
sete dl
movzx edx, dl
cmp edi, 1
jne 0x42896d
mov edi, dword [esp]
mov dword [esp + 4], edx
test edi, edi
jle 0x42899b
push edi
push ebx
call fcn.00431ff8
pop edi
pop eax
xor eax, eax
mov edi, dword [esp + 0x5c]
cmp dword [edi + 0x1674], esi
mov edx, dword [esp + 4]
jle 0x428aae
mov eax, 2
test esi, esi
je 0x428aae
mov eax, dword [edi + 0x4ef4]
neg eax
sbb eax, eax
add eax, 2
push edx
push ebp
push eax
push dword [esp + 0x78]
push dword [esp + 0x80]
push ebx
call fcn.00434ba0
mov dword [esp + 0x2c], eax
add esp, 0x18
jmp 0x42899b
cmp ecx, 0x1388
jg 0x428c24
mov eax, dword [esp]
cmp eax, ecx
cmovge ecx, eax
mov dword [esp], ecx
jmp 0x4288c9
push dword [esp + 0x5c]
call fcn.00429630
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x1c]
mov dword [esp + 4], eax
mov edi, dword [esp + 0x64]
mov ecx, dword [edi + 0x18]
imul eax, ecx
mov ebx, eax
mov edx, 0x10624dd3
imul edx
mov eax, edx
sar eax, 6
sar ebx, 0x1f
sub eax, ebx
pop esi
mov edi, dword [esp + 0x74]
test edi, edi
jne 0x428846
mov ebx, dword [esp + 0x5c]
sub eax, dword [ebx + 0x4ed8]
jmp 0x428846
and edx, 1
jne 0x429276
test edi, 2
jne 0x429262
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
jmp 0x42877b
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 4]
cmp eax, 2
je 0x4290e3
cmp eax, 1
jne 0x428765
test ebx, ebx
jle 0x428ba6
mov eax, dword [esp + 0x18]
mov ecx, eax
mov esi, dword [esp + 0x64]
lea edx, [esi + 2]
lea esi, [ebx + ebx]
add esi, eax
movsx eax, word [edx - 2]
movsx edi, word [edx]
add eax, edi
mov edi, eax
sar edi, 1
and eax, 1
add eax, edi
mov word [ecx], ax
add ecx, 2
add edx, 4
cmp esi, ecx
jne 0x428b87
push ebx
push dword [esp + 0x1c]
lea eax, [ebp + 0x9f6]
add eax, eax
add eax, dword [esp + 0x64]
push eax
push dword [esp + 0x28]
call fcn.0043abb0
add dword [esp + 0x24], eax
add esp, 0x10
mov eax, dword [esp + 0x5c]
cmp dword [eax + 0x4ee8], 2
je 0x4292b1
mov eax, dword [esp + 0x5c]
mov esi, dword [eax + 0x166c]
mov eax, dword [eax + 0x11e8]
mov edx, dword [esp]
add edx, esi
mov edi, dword [esp + 0x5c]
mov dword [edi + 0x166c], edx
jmp 0x4287cf
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x428d4b
lea ebp, [ecx + ecx]
jmp 0x428950
add ecx, edx
add ecx, ecx
add ecx, ecx
add ecx, ecx
add ecx, edx
add ecx, ecx
add ecx, ecx
jmp 0x42886c
mov dword [esp], 0x1388
jmp 0x4288c9
mov edi, dword [esp + 0x5c]
mov edx, dword [edi + 0x1674]
push eax
push dword [edi + 0x11e0]
mov eax, dword [esp + 0x68]
push dword [eax + 0x3c]
mov eax, dword [esp + 0x68]
push dword [eax + 0x11b4]
push dword [esp + 0x10]
lea eax, [esp + 0x54]
push eax
lea eax, [edx + 0x4ed4]
add eax, dword [esp + 0x74]
push eax
lea eax, [edx + edx]
add eax, edx
add eax, eax
add eax, 0x4ec2
add eax, dword [esp + 0x78]
push eax
mov eax, dword [esp + 0x7c]
add eax, 0x3b3c
push eax
mov eax, dword [esp + 0x80]
add eax, 0x13ec
push eax
mov eax, dword [esp + 0x84]
add eax, 0x4ea0
push eax
call fcn.0043d0a0
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 0x1674]
add esp, 0x2c
mov esi, dword [esp + 0x5c]
cmp byte [esi + eax + 0x4ed4], 0
jne 0x428d6b
cmp dword [esi + 0x4ef4], 1
je 0x4293b6
push dword [esp + 0x78]
mov eax, dword [esp + 0x60]
add eax, 0x2750
push eax
call fcn.00434ae8
pop eax
pop edx
mov ebp, dword [esp + 0x74]
test ebp, ebp
jne 0x4288fe
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + 0x1674]
lea eax, [edx + edx]
add eax, edx
add eax, eax
add eax, 0x4ec2
add eax, dword [esp + 0x5c]
push eax
push dword [esp + 0x70]
call fcn.0043df5c
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x1674]
pop esi
pop edi
mov ebx, dword [esp + 0x5c]
cmp byte [ebx + eax + 0x39c0], 0
jne 0x4288fe
movsx eax, byte [ebx + eax + 0x4ed4]
push eax
push dword [esp + 0x70]
call fcn.0043df40
pop ecx
pop ebx
jmp 0x4288fe
cmp dword [esp + 0xc], 1
jne 0x428a41
lea eax, [ecx + ecx]
add eax, ecx
lea ebp, [eax + 3]
cmovns ebp, eax
sar ebp, 2
xor edx, edx
jmp 0x428964
mov edi, dword [esp + 0x5c]
mov byte [edi + eax + 0x39c0], 0
jmp 0x428ce4
test edi, edi
jle 0x429291
mov ecx, esi
xor eax, eax
xor ebx, ebx
mov esi, edx
mov ebp, dword [ecx + 0x1670]
xor edx, edx
test ebp, ebp
jle 0x428db1
mov dword [esp], edi
add eax, eax
movsx edi, byte [ecx + edx + 0x1270]
or eax, edi
add edx, 1
cmp edx, ebp
jne 0x428d9b
mov edi, dword [esp]
add eax, eax
movsx edx, byte [ecx + 0x1273]
or eax, edx
add ebx, 1
add ecx, 0x2750
cmp ebx, edi
jne 0x428d8c
mov edx, esi
mov ecx, dword [esp + 0x74]
test ecx, ecx
je 0x429298
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x17c0]
test eax, eax
je 0x428e05
mov eax, dword [esp + 0x60]
cmp dword [eax + 4], 1
je 0x428ea4
mov eax, dword [esp + 0x5c]
mov ebp, dword [eax + 0x3f10]
test ebp, ebp
jne 0x428ea4
mov eax, dword [esp + 0x70]
mov esi, dword [eax]
add esi, esi
add esi, esi
add esi, esi
mov eax, dword [esp + 0x60]
mov ecx, dword [eax + 0x18]
mov ebx, dword [eax + 0x1c]
imul ebx, ecx
mov eax, 0x10624dd3
imul ebx
sar edx, 6
sar ebx, 0x1f
sub ebx, edx
mov eax, dword [esp + 0x5c]
add esi, dword [eax + 0x4edc]
lea eax, [ebx + esi]
xor edx, edx
test eax, eax
cmovs eax, edx
mov edx, 0x2710
cmp eax, edx
cmovg eax, edx
mov esi, dword [esp + 0x5c]
mov dword [esi + 0x4edc], eax
mov ebx, dword [esi + 0x4eec]
movsx edx, bx
lea eax, [edx + edx]
add eax, edx
add eax, eax
add eax, eax
add eax, eax
add eax, edx
add eax, eax
add eax, eax
add eax, eax
sub eax, edx
add eax, eax
add eax, eax
add eax, edx
sar eax, 0xe
add eax, 0xd
cmp dword [esi + 0x11b4], eax
jge 0x429211
mov dword [esi + 0x4ef0], 1
mov dword [esi + 0x4eec], 0
jmp 0x428a04
mov eax, dword [esp + 0x70]
mov dword [eax], 0
xor esi, esi
jmp 0x428e11
mov word [esp + 0x3e], 0
mov eax, dword [eax + 0x1670]
mov dword [esp], eax
lea ecx, [eax + 1]
imul ecx, dword [edi + 4]
mov eax, 0x100
sar eax, cl
neg eax
mov byte [esp + 0x3e], al
push 8
lea eax, [esp + 0x42]
push eax
push 0
push dword [esp + 0x78]
call fcn.00418744
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 4]
add esp, 0x10
mov ebx, dword [esp + 0x5c]
test eax, eax
jle 0x429368
xor edi, edi
mov esi, dword [esp + 0x60]
mov ebp, dword [ebx + 0x1670]
test ebp, ebp
jle 0x42922c
xor edx, edx
xor ecx, ecx
mov eax, dword [ebx + ecx*4 + 0x1274]
shl eax, cl
or edx, eax
add ecx, 1
cmp ecx, ebp
jne 0x428f19
test edx, edx
setg byte [ebx + 0x1273]
je 0x428f54
cmp ecx, 1
jle 0x428f54
push 8
push dword [ecx*4 + 0x44ecdc]
sub edx, 1
push edx
push dword [esp + 0x78]
call fcn.00418744
add esp, 0x10
add edi, 1
mov eax, dword [esi + 4]
add ebx, 0x2750
cmp eax, edi
jg 0x428f07
mov ebx, dword [esp + 0x5c]
mov ebx, dword [ebx + 0x1670]
test ebx, ebx
jle 0x42905e
mov ebx, dword [esp + 0x5c]
add ebx, 0x4ec2
mov dword [esp + 8], ebx
mov esi, dword [esp + 0x5c]
mov dword [esp], esi
xor esi, esi
xor ecx, ecx
test eax, eax
jle 0x42903c
mov ebp, dword [esp]
mov ebx, dword [esp + 0x5c]
xor edi, edi
lea edx, [ecx + 0x1840]
mov dword [esp + 4], edx
mov dword [esp + 0x38], ecx
mov ecx, dword [ebx + esi*4 + 0x1274]
test ecx, ecx
je 0x429021
test edi, 1
jne 0x428fca
cmp eax, 2
je 0x42937b
xor eax, eax
test esi, esi
je 0x428fe0
xor eax, eax
mov ecx, dword [ebx + esi*4 + 0x1270]
test ecx, ecx
setne al
add eax, eax
push eax
push 1
push esi
push dword [esp + 0x78]
push ebx
call fcn.00435d40
push dword [ebx + 0x11e8]
mov eax, dword [esp + 0x1c]
add eax, ebx
push eax
movsx eax, byte [ebp + 0x17f2]
push eax
movsx eax, byte [ebp + 0x17f1]
push eax
push dword [esp + 0x90]
call fcn.004360cc
add esp, 0x28
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 4]
add edi, 1
add ebx, 0x2750
add ebp, 0x2750
cmp eax, edi
jg 0x428fae
mov ecx, dword [esp + 0x38]
add esi, 1
add dword [esp], 0x24
add ecx, 0x140
add dword [esp + 8], 6
mov ebx, dword [esp + 0x5c]
cmp dword [ebx + 0x1670], esi
jg 0x428f8f
mov ebx, dword [esp + 0x5c]
lea edx, [ebx + 0x1274]
xor ecx, ecx
test eax, eax
jle 0x429094
mov eax, dword [esp + 0x60]
mov dword [edx], 0
mov dword [edx + 4], 0
mov dword [edx + 8], 0
add ecx, 1
add edx, 0x2750
cmp dword [eax + 4], ecx
jg 0x429072
mov eax, dword [esp + 0x6c]
bsr eax, dword [eax + 0x1c]
not eax
mov ebx, dword [esp + 0x6c]
add eax, dword [ebx + 0x14]
mov ebx, dword [esp + 0x5c]
mov dword [ebx + 0x4ed8], eax
push ebx
call fcn.00429630
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x1c]
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x64]
mov ecx, dword [ebx + 0x18]
imul eax, ecx
mov ebx, eax
mov edx, 0x10624dd3
imul edx
mov eax, edx
sar eax, 6
sar ebx, 0x1f
sub eax, ebx
pop edx
jmp 0x428b28
mov eax, dword [esp + 0x5c]
mov esi, dword [eax + 0x1674]
test ebx, ebx
jle 0x429110
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x18]
lea ecx, [ebx + ebx]
add ecx, ecx
add ecx, eax
movzx edi, word [eax]
mov word [edx], di
add eax, 4
add edx, 2
cmp ecx, eax
jne 0x429100
mov eax, dword [esp + 0x5c]
add eax, 0x3de0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
cmp dword [eax + 0x4ee8], 1
jne 0x429132
test esi, esi
je 0x429515
push ebx
push dword [esp + 0x1c]
lea eax, [ebp + 0x9f6]
add eax, eax
add eax, dword [esp + 0x64]
push eax
push dword [esp + 0x28]
call fcn.0043abb0
mov ebp, dword [esp + 0x24]
add ebp, eax
mov eax, dword [esp + 0x6c]
mov edi, dword [esp + 0x10]
add dword [eax + 0x166c], edi
mov edi, dword [eax + 0x3dbc]
mov eax, dword [eax + 0x3938]
mov dword [esp + 0x10], eax
mov edx, eax
sub edx, edi
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x40]
imul ecx, dword [eax + 0x3930]
lea eax, [ecx + ecx]
add eax, eax
add eax, ecx
add eax, eax
cmp eax, edx
mov esi, edx
cmovle esi, eax
add esp, 0x10
test ebx, ebx
jle 0x4291c3
mov eax, dword [esp + 0x64]
add eax, 2
mov edx, dword [esp + 0x18]
lea ecx, [ebx + ebx]
add ecx, ecx
add ecx, eax
mov dword [esp], ebx
movzx ebx, word [eax]
mov word [edx], bx
add eax, 4
add edx, 2
cmp ecx, eax
jne 0x4291b0
mov ebx, dword [esp]
push ebx
push dword [esp + 0x1c]
add edi, 0x1d9e
add edi, edi
add edi, dword [esp + 0x64]
push edi
push dword [esp + 0x10]
call fcn.0043abb0
add eax, ebp
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x6c]
add dword [eax + 0x3dbc], esi
mov edx, dword [eax + 0x166c]
mov eax, dword [eax + 0x11e8]
add esp, 0x10
jmp 0x4287cf
mov ebp, dword [esp + 0x5c]
mov ecx, dword [ebp + 0x4ef0]
jmp 0x4283d8
mov eax, dword [esp + 0x5c]
mov dword [eax + 0x4ef0], 0
add ecx, ebx
mov dword [eax + 0x4eec], ecx
jmp 0x428a04
mov byte [ebx + 0x1273], 0
jmp 0x428f54
mov eax, dword [esp + 0x60]
mov dword [eax + 0x18], 0xa
mov eax, dword [eax + 0x24]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x60]
mov dword [eax + 0x24], 0
mov dword [esp + 0x10], 1
jmp 0x4286b0
movzx edx, word [esi]
mov word [edi], dx
add edi, 2
add esi, 2
sub eax, 2
jmp 0x428b4c
movzx edx, byte [esi]
mov byte [esp + 4], dl
mov byte [edi], dl
add edi, 1
mov esi, dword [esp + 0x64]
add esi, 1
sub eax, 1
jmp 0x428b40
xor eax, eax
jmp 0x428dcb
add edx, 1
imul edx, edi
push edx
push eax
push dword [esp + 0x74]
call fcn.00418838
add esp, 0xc
jmp 0x428dd7
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + 0x1674]
test edx, edx
jne 0x428bdd
push ebx
push dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x3dbc]
mov dword [esp + 0xc], eax
add eax, 0x1d9e
add eax, eax
add eax, dword [esp + 0x64]
push eax
mov eax, dword [esp + 0x68]
add eax, 0x3de0
push eax
call fcn.0043abb0
add dword [esp + 0x24], eax
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 0x11e8]
add esp, 0x10
mov esi, dword [esp + 0x5c]
mov esi, dword [esi + 0x166c]
test eax, eax
jle 0x428be9
mov edi, dword [esp + 0x5c]
mov edi, dword [edi + 0x3dbc]
mov dword [esp + 4], edi
lea edx, [esi + esi]
add edx, dword [esp + 0x5c]
lea ecx, [eax + esi]
add ecx, ecx
mov edi, dword [esp + 0x5c]
add edi, ecx
mov ebp, dword [esp + 4]
sub ebp, esi
mov dword [esp + 4], esi
movsx ecx, word [edx + ebp*2 + 0x3b3c]
movsx esi, word [edx + 0x13ec]
add ecx, esi
sar ecx, 1
mov word [edx + 0x13ec], cx
add edx, 2
cmp edi, edx
jne 0x42933e
mov esi, dword [esp + 4]
jmp 0x428be9
mov edx, dword [ebx + 0x1670]
test edx, edx
jg 0x428f76
jmp 0x429094
push dword [esp + 8]
push dword [esp + 0x70]
call fcn.0043df5c
pop ecx
pop eax
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + esi*4 + 0x39c4]
test edx, edx
jne 0x428fca
movsx eax, byte [eax + esi + 0x4ed4]
push eax
push dword [esp + 0x70]
call fcn.0043df40
pop eax
pop edx
jmp 0x428fca
mov ebx, esi
mov dword [esi + 0x4351], 0
mov dword [esi + 0x4355], 0
mov dword [esi + 0x4358], 0
lea edi, [esi + 0x27e4]
mov edx, 0x1100
xor eax, eax
and ebx, 1
jne 0x429550
test edi, 2
jne 0x429570
mov ecx, edx
shr ecx, 2
rep stosd dword es:[edi], eax
test dl, 2
jne 0x429501
and edx, 1
jne 0x4294fb
mov eax, dword [esp + 0x5c]
lea edi, [eax + 0x38e4]
mov ebx, 0x20
xor eax, eax
test byte [esp + 0x5c], 1
jne 0x429565
test edi, 2
jne 0x42955b
mov ecx, ebx
and ecx, 0xfffffffc
xor edx, edx
mov dword [edi + edx], eax
add edx, 4
cmp edx, ecx
jb 0x429440
add edi, edx
test bl, 2
je 0x429453
stosw word es:[edi], ax
and ebx, 1
je 0x429459
stosb byte es:[edi], al
mov eax, dword [esp + 0x5c]
mov dword [eax + 0x2760], 0
mov dword [eax + 0x2764], 0
mov dword [eax + 0x3910], 0x64
mov dword [eax + 0x38cc], 0x64
mov byte [eax + 0x4350], 0xa
mov byte [eax + 0x390d], 0
mov dword [eax + 0x38dc], 0x10000
mov dword [eax + 0x3988], 1
jmp 0x428ccf
lea edi, [ebp + 0x3de0]
lea esi, [ebp + 0x1690]
mov eax, 0x12c
test ebp, 1
jne 0x42958e
test edi, 2
jne 0x42957a
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
test al, 2
je 0x4294e2
movsw word es:[edi], word [esi]
test al, 1
je 0x4294e7
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp]
mov dword [ebp + 0x2750], eax
mov eax, dword [ebp + 4]
mov dword [ebx + 4], eax
jmp 0x42864c
stosb byte es:[edi], al
jmp 0x429411
stosw word es:[edi], ax
jmp 0x429408
mov eax, dword [esp + 0x60]
mov edi, dword [eax]
nop
jmp 0x429255
mov edx, dword [esp + 4]
mov edi, edx
mov esi, dword [esp + 0x1c]
mov eax, 0x12c
and edx, 1
jne 0x4295c5
test edi, 2
jne 0x4295b1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
test al, 2
je 0x429542
movsw word es:[edi], word [esi]
test al, 1
je 0x429132
movsb byte es:[edi], byte [esi]
jmp 0x429132
stosb byte es:[edi], al
mov edx, 0x10ff
jmp 0x4293ec
stosw word es:[edi], ax
sub ebx, 2
jmp 0x429439
stosb byte es:[edi], al
mov ebx, 0x1f
jmp 0x42942d
stosw word es:[edi], ax
sub edx, 2
jmp 0x4293f8
movzx edx, word [esi]
mov word [edi], dx
add edi, 2
add esi, 2
sub eax, 2
jmp 0x4294d5
movzx eax, byte [ebp + 0x1690]
mov byte [ebp + 0x3de0], al
lea edi, [ebp + 0x3de1]
lea esi, [ebp + 0x1691]
mov eax, 0x12b
jmp 0x4294c9
movzx edx, word [esi]
mov word [edi], dx
add edi, 2
add esi, 2
sub eax, 2
jmp 0x429535
movzx eax, byte [esi]
mov byte [esp + 8], al
mov esi, dword [esp + 0x5c]
mov byte [esi + 0x3de0], al
mov eax, dword [esp + 0x5c]
lea edi, [eax + 0x3de1]
lea esi, [eax + 0x1691]
mov eax, 0x12b
jmp 0x42952d
mov edi, dword [esp + 4]
xor ecx, ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x2c], ecx
jmp 0x4286b0