Function at 0x428450
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x844
push ebx
push esi
push edi
push 0x4290f0
call dword [0x4571a8]
push 0x104
push 0x52a118
call fcn.0044a1dd
add esp, 8
push 0
call dword [0x4573f0]
mov esi, dword [ebp + 8]
mov edi, dword [0x4572c0]
xor eax, eax
push 0x4ac800
mov dword [0x4dea6c], esi
mov word [0x4dea70], ax
call edi
push 0x4ac82c
mov dword [0x52a398], eax
call edi
push 0x4ac848
mov dword [0x52a3bc], eax
call edi
push 0x4ac870
mov dword [0x52a394], eax
call edi
mov dword [0x52a3b8], eax
call fcn.004281a0
mov eax, dword [0x52bbd0]
push 0
push 0
call fcn.0043d2a0
add esp, 8
test eax, eax
je 0x428577
push 0x100
push 0x95
push esi
call dword [0x4571d4]
mov edi, eax
push edi
push esi
call dword [0x4571d0]
push eax
mov dword [esp + 0x14], eax
call dword [0x4571c4]
push edi
push esi
mov dword [esp + 0x28], eax
call dword [0x4571cc]
mov edi, eax
shr edi, 1
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00449731
mov ecx, dword [esp + 0x24]
mov ebx, eax
add esp, 4
lea eax, [edi - 1]
push eax
add ecx, 2
push ecx
push ebx
call fcn.00449a7d
add esp, 0xc
xor edx, edx
push 1
push 1
mov eax, ebx
mov word [ebx + edi*2 - 2], dx
call fcn.0043d2a0
push ebx
call fcn.00449773
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
call dword [0x4571d8]
mov ebx, dword [ebp + 0x10]
push 8
push 0x4ac894
push ebx
call fcn.0044a39f
add esp, 0xc
test eax, eax
jne 0x4286a0
add ebx, 0x10
push ebx
call fcn.00449752
add esp, 4
cmp word [ebx], 0x20
mov esi, eax
je 0x4285af
add ebx, 2
cmp word [ebx], 0x20
jne 0x4285a6
push 0x104
lea ecx, [esp + 0x54]
push ecx
push 0
add ebx, 2
call dword [0x4571a4]
push eax
call dword [0x457220]
push esi
push 0
push 0x100000
call dword [0x45719c]
mov esi, eax
test esi, esi
je 0x4285f2
push 0x1388
push esi
call dword [0x4571a0]
push esi
call dword [0x4570c4]
mov edi, dword [0x457110]
push 0
push ebx
lea edx, [esp + 0x58]
push edx
call edi
test eax, eax
jne 0x428636
mov esi, dword [0x4572c8]
lea esp, [esp]
mov eax, dword [0x52bef0]
mov ecx, dword [0x52bf00]
push 0x11
push eax
push ecx
push 0
call esi
cmp eax, 2
je 0x428695
push 0
push ebx
lea edx, [esp + 0x58]
push edx
call edi
test eax, eax
je 0x428610
call dword [0x4570c8]
push eax
lea eax, [esp + 0x54]
push 0x4ac8a8
push eax
call fcn.004499de
lea eax, [esp + 0x5c]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x428656
sub eax, edx
sar eax, 1
push 0x104
lea ecx, [esp + eax*2 + 0x54]
push ecx
push 0
call dword [0x4571a4]
push eax
call dword [0x457220]
push 1
push 0
lea edx, [esp + 0x58]
push edx
push ebx
push 0x4ac648
push 0
call dword [0x457230]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 9
push 0x4ac8c4
push ebx
call fcn.0044a39f
add esp, 0xc
test eax, eax
jne 0x428710
mov dword [esp + 0x10], ebx
add ebx, 0x12
push ebx
call fcn.00449752
add esp, 4
cmp word [ebx], 0x20
je 0x4286d9
lea ebx, [ebx]
add ebx, 2
cmp word [ebx], 0x20
jne 0x4286d0
push eax
push 0
push 0x100000
add ebx, 2
call dword [0x45719c]
mov edi, eax
test edi, edi
je 0x428703
push 0x1388
push edi
call dword [0x4571a0]
push edi
call dword [0x4570c4]
push ebx
call fcn.0044a226
mov ebx, dword [esp + 0x14]
add esp, 4
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x14], 8
mov dword [esp + 0x18], 0x4129
call dword [0x457030]
call fcn.00428280
call fcn.004282f0
push 0
push 0
push 0
push 0
push 0x93
push esi
call dword [0x45735c]
mov dword [0x4dee94], eax
xor eax, eax
xor ecx, ecx
mov word [eax + 0x4deea6], cx
mov byte [eax + 0x4df03d], cl
add eax, 0x1a8
cmp eax, 0x4b270
jb 0x428750
push 1
push 0xc80000
lea edx, [esp + 0x2c]
xor edi, edi
push edx
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], 0x1ea
mov dword [esp + 0x3c], 0x141
call dword [0x4572bc]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
sub dword [esp + 0x2c], eax
sub dword [esp + 0x30], ecx
push 0x4abb28
push 0x4abb04
lea edx, [esp + 0x58]
push str._s__s
push edx
call fcn.004499de
mov eax, dword [0x4dea6c]
add esp, 0x10
push edi
push eax
call fcn.00429250
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
push eax
push edi
mov edi, dword [0x4572ec]
push ecx
push edx
push 1
call edi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x48]
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
push ecx
push 0
call edi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x48]
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
push ecx
push 0xca0000
lea edx, [esp + 0x74]
push edx
push 0x4ac7cc
push 0
call dword [0x457394]
push 8
mov dword [0x4dee90], eax
call fcn.00449b23
add esp, 4
test eax, eax
je 0x428848
mov dword [eax], 0x4ab10c
mov dword [eax + 4], 1
jmp 0x42884a
xor eax, eax
push eax
mov dword [esp + 0x24], eax
mov eax, dword [0x4dee90]
push eax
call dword [0x4573e8]
mov eax, dword [0x52bbd0]
lea ecx, [eax*8 + 0x4d3250]
mov dword [0x52a330], ecx
mov ecx, eax
shl ecx, 4
lea edx, [ecx + 0x4d32f0]
mov dword [0x52a338], edx
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
lea edi, [edx + 0x4d3350]
mov dword [0x52a33c], edi
mov dword [0x52a340], edi
lea edi, [eax*8 + 0x4d3398]
mov dword [0x52a344], edi
mov dword [0x52a348], edi
lea edi, [eax + eax*2]
lea edi, [edi*8 + 0x4d33c8]
mov dword [0x52a34c], edi
lea edi, [eax*8 + 0x4d3458]
mov dword [0x52a350], edi
lea edi, [eax*8 + 0x4d3488]
mov dword [0x52a354], edi
mov edi, eax
shl edi, 4
add edi, eax
lea edi, [edi*4 + 0x4b9270]
mov dword [0x52a358], edi
lea edi, [ecx + 0x4d34b8]
lea ecx, [ecx + 0x4d35a8]
mov dword [0x52a35c], edi
lea edi, [eax*8 + 0x4d3518]
mov dword [0x52a36c], ecx
mov dword [0x52a370], ecx
lea ecx, [eax*8 + 0x4d3608]
mov dword [0x52a360], edi
lea edi, [eax*8 + 0x4d3548]
mov dword [0x52a374], ecx
mov dword [0x52a378], ecx
mov dword [0x52a37c], ecx
lea ecx, [edx + 0x4d3638]
mov dword [0x52a364], edi
lea edi, [eax*8 + 0x4d3578]
lea edx, [eax*8 + 0x4d3680]
lea eax, [eax*8 + 0x4d36b0]
push esi
mov dword [0x52a334], 0x4d3280
mov dword [0x52a368], edi
mov dword [0x52a380], ecx
mov dword [0x52a384], edx
mov dword [0x52a388], eax
call fcn.0043eac0
mov ecx, dword [0x4dea6c]
mov edx, dword [0x4dee90]
mov eax, dword [0x52bed8]
add esp, 4
push 0
push ecx
push 0
push edx
push 0x64
push 0x64
push 0
push 0
push 0xc00000
push eax
push 0x4ac7dc
push 0
call dword [0x457394]
mov dword [0x4dec84], eax
xor esi, esi
mov eax, dword [esi + 0x4d7ae4]
cmp eax, 0xffffffff
je 0x4289cb
mov eax, dword [eax*4 + 0x52bc00]
jmp 0x4289cd
xor eax, eax
mov ecx, dword [0x4dea6c]
mov edx, dword [0x4dec84]
push 0
push ecx
mov ecx, dword [esi + 0x4d7af8]
push 0
push edx
mov edx, dword [esi + 0x4d7af4]
push ecx
mov ecx, dword [esi + 0x4d7af0]
push edx
mov edx, dword [esi + 0x4d7aec]
push ecx
mov ecx, dword [esi + 0x4d7b00]
push edx
mov edx, dword [esi + 0x4d7ae0]
or ecx, 0x40000000
push ecx
push eax
mov eax, dword [esi + 0x4d7afc]
push edx
push eax
call dword [0x457394]
mov ecx, dword [0x52a108]
push 1
push ecx
mov edi, eax
push 0x30
push edi
call dword [0x4572c4]
mov edx, dword [esi + 0x4d7ae8]
push edx
push 0xfffffffffffffff4
push edi
call dword [0x457384]
add esi, 0x24
cmp esi, 0x6c
jb 0x4289b7
lea eax, [esp + 0x10]
push eax
call fcn.00428000
add esp, 4
call fcn.00418590
mov ecx, dword [0x4dec80]
push ecx
call dword [0x457320]
mov edx, dword [0x4dec80]
push 0x81
push 0
push 0
push edx
call dword [0x45733c]
mov eax, dword [0x4dee90]
mov esi, dword [0x4572c4]
push 0
push 0x10002
push 0x127
push eax
call esi
call fcn.0042ff50
call fcn.00408ad0
call fcn.0040af10
call fcn.00433270
call fcn.00406840
call fcn.00403dd0
call fcn.00401c30
mov ecx, dword [0x52a3cc]
push 0
push 0x10002
push 0x127
push ecx
call esi
mov edx, dword [0x4dec84]
push 0
push 0x10002
push 0x127
push edx
call esi
mov eax, dword [0x52a3d4]
push 0
push 0x10002
push 0x127
push eax
call esi
mov ecx, dword [0x4dea48]
push 0
push 0x10002
push 0x127
push ecx
call esi
mov edx, dword [0x4de56c]
push 0
push 0x10002
push 0x127
push edx
call esi
mov eax, dword [0x4db04c]
push 0
push 0x10002
push 0x127
push eax
call esi
cmp dword [esp + 0x10], 0
je 0x428b47
call fcn.0043fa90
push 1
call fcn.00415120
movzx eax, word [ebx]
add esp, 4
test ax, ax
je 0x428c00
cmp eax, 0x22
jne 0x428b80
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x428b67
sub eax, edx
sar eax, 1
xor ecx, ecx
mov word [ebx + eax*2 - 2], cx
add ebx, 2
push 0x100
push 0x8000
push ebx
call fcn.00447ff4
mov edi, eax
add esp, 0xc
cmp edi, 0xffffffff
jle 0x428c00
push edi
call fcn.00448021
add esp, 4
push edi
mov dword [esp + 0x14], eax
mov esi, edx
call fcn.00449302
add esp, 4
test esi, esi
jl 0x428d0c
jg 0x428bcc
mov edi, dword [esp + 0x10]
cmp edi, 0x80000
jb 0x428d10
mov ecx, 0x4dea70
sub ecx, ebx
movzx eax, word [ebx]
mov word [ebx + ecx], ax
add ebx, 2
test ax, ax
jne 0x428bd3
push 1
call fcn.00426560
add esp, 4
test eax, eax
je 0x428bf7
call fcn.00423690
jmp 0x428c0e
xor edx, edx
mov word [0x4dea70], dx
push 0
push 1
push 0xffffffffffffffff
call fcn.00414bb0
add esp, 0xc
mov eax, dword [0x4dee90]
push 1
push eax
call dword [0x45738c]
push 0
push 0
push 0
lea ecx, [esp + 0x40]
push ecx
call dword [0x457304]
test eax, eax
jle 0x428de1
mov ebx, dword [0x457324]
mov edi, dword [0x45732c]
mov eax, dword [esp + 0x38]
mov esi, dword [0x4572c4]
cmp eax, 0x200
je 0x428fb7
cmp eax, 0x202
je 0x428fb7
cmp eax, 0x201
je 0x428fb7
cmp eax, 0x205
je 0x428fb7
cmp eax, 0x204
je 0x428fb7
cmp eax, 0x208
je 0x428fb7
cmp eax, 0x207
je 0x428fb7
cmp eax, 0x100
jne 0x42900c
mov eax, dword [esp + 0x3c]
cmp eax, 9
jne 0x428e64
call dword [0x4572ac]
cmp eax, dword [0x4dee90]
jne 0x428e0f
push 0x11
call dword [0x457330]
test ax, ax
jns 0x428e0f
mov eax, dword [0x4dec80]
push 0
push 0
push 0x130b
push eax
mov edi, esi
call edi
mov ecx, dword [0x4dec80]
push 0
push 0
push 0x1304
push ecx
mov esi, eax
call edi
push 0x10
mov ebx, eax
call dword [0x457330]
test ax, ax
jns 0x428d71
dec esi
jmp 0x428d72
mov edi, dword [esp + 0x10]
push 0
push 1
push 0xffffffffffffffff
call fcn.00414bb0
add esp, 0xc
test esi, esi
jg 0x428d65
jl 0x428d2c
cmp edi, 0x104
jae 0x428d65
cmp edi, 0xcc
jne 0x428d38
test esi, esi
je 0x428d65
cmp dword [0x4b9de8], 3
push 0
jl 0x428d52
mov eax, ebx
call fcn.00412800
add esp, 4
jmp 0x428c0e
push 0
xor eax, eax
mov ecx, ebx
call fcn.0040d3d0
add esp, 8
jmp 0x428c0e
mov edi, ebx
call fcn.004065a0
jmp 0x428c0e
inc esi
test esi, esi
jns 0x428d7b
lea esi, [ebx - 1]
jmp 0x428d81
cmp esi, ebx
jb 0x428d81
xor esi, esi
mov eax, dword [0x4dec80]
push 0
push esi
push 0x130c
push eax
call edi
mov eax, dword [0x4dee90]
mov ecx, dword [0x4dec80]
lea edx, [esp + 0x10]
push edx
push 5
push 0x4e
push eax
mov dword [esp + 0x28], 0xfffffdd9
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 5
call edi
mov ebx, dword [0x457324]
mov edi, dword [0x45732c]
push 0
push 0
push 0
lea edx, [esp + 0x40]
push edx
call dword [0x457304]
test eax, eax
jg 0x428c41
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
push esi
mov dword [esi], 0x4ab10c
call fcn.00449ac9
add esp, 4
call dword [0x4573ec]
mov eax, dword [esp + 0x3c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x10
call dword [0x457330]
movsx ecx, ax
and ecx, 0x80000000
push ecx
call fcn.00427b30
mov edi, eax
add esp, 4
test edi, edi
je 0x428dc2
push edi
call dword [0x45731c]
cmp eax, dword [0x4dec80]
jne 0x428e50
mov eax, dword [0x4dee90]
push 1
push edi
push 0x28
push eax
call esi
jmp 0x428dc2
push edi
call dword [0x45731c]
push 1
push edi
push 0x28
push eax
call esi
jmp 0x428dc2
cmp eax, 0x25
je 0x428ec5
cmp eax, 0x26
je 0x428ec5
cmp eax, 0x27
je 0x428ec5
cmp eax, 0x28
je 0x428ec5
cmp eax, 0xd
jne 0x42900c
mov edx, dword [esp + 0x34]
push edx
call dword [0x45731c]
cmp eax, dword [0x4dec80]
jne 0x428fcb
mov eax, dword [esp + 0x34]
push 0xffffffffffffffe0
push eax
call ebx
movzx ecx, word [0x52a390]
cmp eax, ecx
jne 0x428fcb
mov edx, dword [esp + 0x34]
push 0
push 0
push 0xf5
push edx
call esi
jmp 0x428dc8
push 0xffffffffffffffe0
call dword [0x457318]
push eax
call ebx
movzx eax, ax
cmp ax, word [0x52a3a4]
jne 0x428f1a
mov eax, dword [esp + 0x3c]
cmp eax, 0x28
je 0x428dc8
cmp eax, 0x26
je 0x428dc8
cmp eax, 0x25
jne 0x428fcb
push 0
push 0
push 0x132f
call dword [0x457318]
push eax
call esi
test eax, eax
je 0x428dc8
jmp 0x428fcb
cmp ax, word [0x52a320]
jne 0x428fcb
mov eax, dword [esp + 0x3c]
cmp eax, 0x25
je 0x428f39
cmp eax, 0x26
je 0x428f39
xor eax, eax
jmp 0x428f3e
mov eax, 1
push eax
call fcn.00427cb0
mov esi, eax
add esp, 4
test esi, esi
je 0x428dc8
push esi
call dword [0x45731c]
cmp eax, dword [0x4dec80]
jne 0x428f67
mov eax, dword [0x4dee90]
jmp 0x428f6e
push esi
call dword [0x45731c]
push 1
push esi
push 0x28
push eax
call dword [0x457310]
push 0xffffffffffffffe0
push esi
call ebx
movzx ecx, word [0x52a320]
cmp eax, ecx
jne 0x428dc8
push 0xfffffffffffffff0
push esi
call dword [0x457334]
and eax, 9
cmp al, 9
jne 0x428dc8
push 0
push 0
push 0xf5
push esi
call dword [0x4572c4]
jmp 0x428dc8
mov eax, dword [0x52aef4]
lea edx, [esp + 0x34]
push edx
push 0
push 0x407
push eax
call esi
cmp dword [esp + 0x38], 0x100
jne 0x42900c
cmp dword [esp + 0x3c], 0xd
jne 0x42900c
mov ecx, dword [esp + 0x34]
push 0xfffffffffffffff4
push ecx
call dword [0x457334]
cmp eax, 0x93
jb 0x428ff7
cmp eax, 0x98
jbe 0x429001
add eax, 0xffffff66
cmp eax, 0x1d
ja 0x42900c
lea edx, [esp + 0x34]
push edx
call dword [0x457350]
mov ecx, dword [0x4db048]
lea eax, [esp + 0x34]
push eax
push ecx
call edi
test eax, eax
jne 0x428dc8
mov eax, dword [0x4db04c]
lea edx, [esp + 0x34]
push edx
push eax
call edi
test eax, eax
jne 0x428dc8
mov edx, dword [0x4de56c]
lea ecx, [esp + 0x34]
push ecx
push edx
call edi
test eax, eax
jne 0x428dc8
mov ecx, dword [0x4dea48]
lea eax, [esp + 0x34]
push eax
push ecx
call edi
test eax, eax
jne 0x428dc8
mov eax, dword [0x52a3d4]
lea edx, [esp + 0x34]
push edx
push eax
call edi
test eax, eax
jne 0x428dc8
mov edx, dword [0x4dec84]
lea ecx, [esp + 0x34]
push ecx
push edx
call edi
test eax, eax
jne 0x428dc8
mov ecx, dword [0x52a3cc]
lea eax, [esp + 0x34]
push eax
push ecx
call edi
test eax, eax
jne 0x428dc8
mov eax, dword [0x4dee90]
lea edx, [esp + 0x34]
push edx
push eax
call edi
test eax, eax
jne 0x428dc8
mov edx, dword [0x4dea38]
lea ecx, [esp + 0x34]
push ecx
push edx
call edi
test eax, eax
jne 0x428dc8
lea eax, [esp + 0x34]
push eax
call dword [0x457328]
lea ecx, [esp + 0x34]
push ecx
call dword [0x457350]
jmp 0x428dc8