Function at 0x42f840
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42ffda
sub esp, 0x58
mov eax, dword [0x70150c]
cmp eax, 0x400
ja 0x42ffc2
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jle 0x42ffc2
cmp ecx, 0x400
jg 0x42ffc2
mov dword [esp + 0xc], eax
movzx edx, byte [0x6f9388]
test dl, dl
jne 0x42ff7a
call fcn.0044cd80
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov dword [esp + 0x10], ecx
mov edx, dword [0x6ef4d8]
mov ebx, dword [0x6ef4dc]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
test edx, edx
xchg esi, ebx
setne bl
xchg esi, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x42ff6f
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], ebx
mov ebp, ecx
sub ecx, edx
mov esi, eax
mov eax, ecx
mov edi, dword [esp + 0xc]
mul edi
mov dword [esp + 0x2c], edx
mov edx, dword [0x6ef4e0]
mov dword [esp + 0x28], edx
add edx, eax
mov ebx, dword [0x6ef4e4]
mov dword [0x6ef4e0], edx
mov edx, edi
sar edi, 0x1f
imul ecx, edi
mov edi, dword [esp + 0x34]
sub ebp, edi
mov ebp, dword [esp + 0x30]
mov edi, esi
sbb esi, ebp
imul esi, edx
mov ebp, dword [esp + 0x2c]
add ecx, ebp
add ecx, esi
mov ebp, dword [esp + 0x28]
add ebp, eax
adc ebx, ecx
mov dword [0x6ef4e4], ebx
mov eax, dword [esp + 0x10]
mov dword [0x6ef4d8], eax
mov dword [0x6ef4dc], edi
xor eax, eax
jmp 0x42f945
inc eax
mov ecx, dword [esp + 0x5c]
cmp eax, ecx
jge 0x42face
cmp eax, 0x401
jae 0x42ffbb
mov dword [esp + 0x1c], eax
lea ebx, [0x6f1780]
mov ebp, dword [ebx + eax*4]
lea esi, [ebx + eax*4]
test ebp, ebp
je 0x42f9cc
mov esi, dword [ebp + 0x34]
test esi, esi
jne 0x42f944
mov dword [esp + 0x38], ebp
test edx, edx
jne 0x42f9a6
test eax, eax
jne 0x42f9a6
mov esi, dword fs:[0x14]
mov esi, dword [esi]
mov esi, dword [esi + 0x18]
mov esi, dword [esi + 0xb0]
test esi, esi
je 0x42ff9c
mov dword [ebp + 0x34], esi
jmp 0x42f944
call fcn.00411700
mov eax, dword [esp]
mov ecx, dword [esp + 0x38]
mov dword [ecx + 0x34], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xc]
lea ebx, [0x6f1780]
jmp 0x42f944
mov dword [esp + 0x54], esi
lea eax, [0x5d5080]
mov dword [esp], eax
call fcn.0040e6c0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov dword [eax + 8], 3
lea edx, [eax + 0x728]
test byte [edx], al
mov dword [eax + 0x720], 0
mov dword [eax + 0x724], 0x80
mov ebx, dword [0x7016d0]
lea ebp, [eax + 0x71c]
test ebx, ebx
jne 0x42fab5
mov dword [eax + 0x71c], edx
xor edx, edx
jmp 0x42fa31
lea edx, [edi + 1]
cmp edx, 5
jge 0x42fa8a
jae 0x42ffb4
lea ebx, [edx + edx*2]
mov dword [eax + ebx*4 + 0x40], 0
mov dword [eax + ebx*4 + 0x44], 0x20
lea ebp, [eax + ebx*4 + 0x3c]
mov esi, dword [0x7016d0]
mov edi, edx
shl edx, 7
lea edx, [eax + edx + 0x78]
test esi, esi
jne 0x42fa6c
mov dword [eax + ebx*4 + 0x3c], edx
jmp 0x42fa2e
mov dword [esp + 0x24], edi
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040ef10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x24]
jmp 0x42fa2e
mov ecx, dword [esp + 0x54]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00402530
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xc]
lea ebx, [0x6f1780]
mov ebp, dword [esp + 0x38]
jmp 0x42f970
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.0040ef10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
jmp 0x42fa2a
mov eax, ecx
jmp 0x42fcb5
mov esi, dword [0x6ef480]
inc esi
mov dword [0x6ef480], esi
mov esi, dword [ebp + 0x308]
mov edi, dword [ebp + 0x30c]
cmp esi, edi
je 0x42fb3b
lea esi, [edi - 1]
mov dword [ebp + 0x30c], esi
and esi, 0xff
mov esi, dword [ebp + esi*4 + 0x310]
mov edi, dword [0x6ef478]
mov dword [esi + 0x68], edi
lea edi, [0x6ef478]
test byte [edi], al
mov edi, esi
mov dword [0x6ef478], edi
mov edi, dword [0x6ef47c]
test edi, edi
jne 0x42fad5
lea edi, [0x6ef47c]
test byte [edi], al
mov dword [0x6ef47c], esi
jmp 0x42fad5
mov esi, dword [ebp + 0x710]
test esi, esi
je 0x42fb8d
mov edi, dword [0x6ef478]
mov dword [esi + 0x68], edi
lea edi, [0x6ef478]
test byte [edi], al
mov edi, esi
mov dword [0x6ef478], edi
mov edi, dword [0x6ef47c]
test edi, edi
jne 0x42fb76
lea edi, [0x6ef47c]
test byte [edi], al
mov dword [0x6ef47c], esi
mov esi, dword [0x6ef480]
inc esi
mov dword [0x6ef480], esi
mov dword [ebp + 0x710], 0
mov esi, dword [ebp + 0x948]
lea edi, [ebp + 0x948]
test esi, esi
jne 0x42fd20
lea eax, [ebp + 0x728]
mov dword [esp], eax
mov dword [esp + 4], 0x200
call fcn.0040f4b0
mov eax, dword [esp + 0x40]
lea ecx, [eax + 0x728]
test byte [ecx], al
mov dword [eax + 0x720], 0
mov dword [eax + 0x724], 0x80
mov edx, dword [0x7016d0]
lea ebx, [eax + 0x71c]
test edx, edx
jne 0x42fd0b
mov dword [eax + 0x71c], ecx
xor ecx, ecx
jmp 0x42fbfa
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 5
jge 0x42fc71
jae 0x42ff8e
mov dword [esp + 0x20], ecx
shl ecx, 7
mov dword [esp + 0x24], ecx
lea ebx, [eax + ecx + 0x78]
mov dword [esp], ebx
mov dword [esp + 4], reloc.kernel32.dll_IsBadWritePtr
call fcn.0040f4b0
mov eax, dword [esp + 0x20]
lea ecx, [eax + eax*2]
mov edx, dword [esp + 0x40]
mov dword [edx + ecx*4 + 0x40], 0
mov dword [edx + ecx*4 + 0x44], 0x20
mov ebx, dword [esp + 0x24]
lea ebx, [edx + ebx + 0x78]
mov ebp, dword [0x7016d0]
lea esi, [edx + ecx*4 + 0x3c]
test ebp, ebp
jne 0x42fc5b
mov dword [edx + ecx*4 + 0x3c], ebx
jmp 0x42fbf5
mov dword [esp], esi
mov dword [esp + 4], ebx
call fcn.0040ef10
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x40]
jmp 0x42fbf5
mov ecx, dword [eax + 0x34]
mov dword [esp], ecx
call fcn.004117a0
mov eax, dword [esp + 0x40]
mov dword [eax + 0x34], 0
mov dword [esp], eax
call fcn.0042f540
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00440260
mov eax, dword [esp + 0x40]
mov dword [eax + 8], 4
mov eax, dword [esp + 0x14]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0xc]
cmp ecx, edx
jge 0x42fdf2
cmp ecx, 0x401
jae 0x42ff95
mov dword [esp + 0x14], ecx
lea ebx, [0x6f1780]
mov ebp, dword [ebx + ecx*4]
mov dword [esp + 0x40], ebp
movzx esi, byte [0x6f9388]
xchg esi, eax
test al, al
xchg esi, eax
je 0x42fae2
mov esi, dword fs:[0x14]
mov esi, dword [esi]
mov esi, dword [esi + 0x18]
mov esi, dword [esi + 0x54]
cmp ebp, esi
je 0x42fdc6
jmp 0x42fae2
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0040ef10
mov eax, dword [esp + 0x40]
jmp 0x42fbf1
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], esi
mov dword [esp], esi
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.0042a400
movzx eax, byte [0x6f9388]
test al, al
jne 0x42fdb0
mov eax, dword [esp + 0x4c]
mov dword [eax + 0x68], 0
mov ecx, dword [0x6ef47c]
test ecx, ecx
je 0x42fd9e
lea edx, [ecx + 0x68]
test byte [edx], al
mov edx, eax
mov dword [ecx + 0x68], edx
lea ecx, [0x6ef47c]
test byte [ecx], al
mov dword [0x6ef47c], eax
mov eax, dword [0x6ef480]
inc eax
mov dword [0x6ef480], eax
mov eax, dword [esp + 0x50]
test byte [eax], al
xor eax, eax
mov ecx, eax
mov ebp, dword [esp + 0x40]
mov dword [ebp + 0x948], ecx
jmp 0x42fba1
lea ecx, [0x6ef478]
test byte [ecx], al
mov ecx, eax
mov dword [0x6ef478], ecx
jmp 0x42fd6a
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00441830
jmp 0x42fd4b
call fcn.004416c0
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00440ec0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
lea ebx, [0x6f1780]
mov ebp, dword [esp + 0x40]
jmp 0x42fae2
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov dword [esp + 0x48], ecx
mov edx, dword [ecx + 0x18]
mov edx, dword [edx + 0x54]
test edx, edx
je 0x42ff14
mov ebx, edx
mov ebp, dword [ebx + 4]
cmp ebp, eax
jge 0x42ff12
mov dword [ebx + 8], 1
lea edx, [eax - 1]
xor ebx, ebx
jmp 0x42fe2d
dec edx
mov dword [esp + 0x3c], ebx
test edx, edx
jl 0x42fede
cmp edx, 0x401
jae 0x42ff87
mov ebp, dword [ecx + 0x18]
lea esi, [0x6f1780]
mov edi, dword [esi + edx*4]
mov ebp, dword [ebp + 0x54]
cmp ebp, edi
je 0x42fe2c
mov dword [esp + 0x18], edx
mov dword [esp + 0x44], edi
mov dword [edi + 8], 0
mov dword [esp], edi
call fcn.00431ee0
movzx eax, byte [esp + 4]
test al, al
jne 0x42fecc
mov eax, dword [0x6ef454]
test eax, eax
je 0x42fe9b
mov ecx, dword [eax + 0xac]
mov dword [0x6ef454], ecx
mov ecx, dword [0x6ef458]
dec ecx
mov dword [0x6ef458], ecx
mov ecx, dword [esp + 0x44]
lea edx, [ecx + 0x30]
test byte [edx], al
mov dword [ecx + 0x30], eax
lea eax, [ecx + 0xc]
test byte [eax], al
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18]
lea esi, [0x6f1780]
mov ebx, ecx
mov ecx, dword [esp + 0x48]
jmp 0x42fe2c
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00431e00
mov ecx, dword [esp + 0x3c]
jmp 0x42feb3
lea ecx, [0x6eeea0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004326e0
lea eax, [0x70150c]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
call fcn.00401670
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x60], eax
add esp, 0x58
ret
test edx, edx
je 0x42ff1d
mov dword [edx + 0x30], 0
mov eax, dword [ecx + 0x18]
mov dword [eax + 0x54], 0
mov eax, dword [ecx + 0x18]
mov dword [eax + 0xb0], 0
mov eax, dword [0x6f1780]
mov dword [eax + 0x30], 0
mov dword [eax + 8], 0
mov dword [esp], eax
call fcn.0042fff0
movzx eax, byte [0x6f9388]
test al, al
jne 0x42ff68
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
jmp 0x42fe25
call fcn.004414b0
jmp 0x42ff5b
mov edx, dword [esp + 0xc]
mov edi, eax
jmp 0x42f930
mov dword [esp], ecx
call fcn.00440dd0
jmp 0x42f895
call fcn.00425c90
ud2
call fcn.00425c90
ud2
call fcn.00425c90
ud2
lea eax, [0x5ddf07]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00427230
ud2
call fcn.00425c90
ud2
call fcn.00425c90
ud2
lea eax, [0x5e0c3f]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00427230
ud2
call fcn.0044a520
jmp fcn.0042f840