Function at 0x429c6a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [esp + 8]
sub esp, 0x178
mov word [esp + 6], 0xfffe
push ebx
mov eax, dword [ecx + 0x1c]
push esi
xor ebx, ebx
mov esi, dword [esp + 0x190]
push edi
mov dword [esp + 0x34], eax
push ebp
mov ecx, dword [esi + 4]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
mov ebp, dword [esp + 0x18c]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x15], bl
mov eax, dword [ebp + 0x98]
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x24], bl
mov byte [esp + 0x12], bl
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0xa0], edx
mov byte [esp + 0x13], bl
test ch, 1
je 0x429c30
and dword [esp + 0x1c], 0xfffffeff
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x1c]
dec ecx
cmp ecx, 0x80
ja case.0x429c45.5
xor eax, eax
mov al, byte [ecx + 0x42a7e8]
jmp dword [eax*4 + 0x42a7d4]
mov byte [esp + 0x14], 0
mov dword [esp + 0x2c], 0xffffffff
jmp 0x429c9d
mov byte [esp + 0x14], 1
mov dword [esp + 0x2c], 0
jmp 0x429c9d
mov byte [esp + 0x14], 1
mov dword [esp + 0x2c], 2
jmp 0x429c9d
mov dword [esp + 0x2c], 0xffffffff
mov eax, 1
mov byte [esp + 0x14], al
mov byte [esp + 0x12], al
jmp 0x429c9d
mov byte [esp + 0x14], 1
mov dword [esp + 0x2c], pe_nt_image_headers32
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x429cc8
cmp dword [esi + 8], 0
jne 0x429cb6
mov word [esp + 0x16], 0xfff3
jmp 0x42a785
cmp dword [esi + 0x14], 0
je 0x429d0c
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
cmp dword [esi + 0x14], 0
je 0x429cde
test ecx, ecx
je 0x429d0c
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
mov eax, dword [esi + 0x18]
test eax, eax
je 0x429d0c
cmp dword [esi + 0x1c], 0
jne 0x429cf7
mov word [esp + 0x16], 0xfff3
jmp 0x42a785
cmp byte [esp + 0x13], 0
mov ebx, eax
je 0x429d0c
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
cmp byte [esp + 0x14], 0
je 0x429ddb
mov edx, dword [esi + 8]
test edx, edx
je 0x429d41
cmp dword [esi + 0xc], 0
jne 0x429d35
cmp dword [esi + 0x28], 0
jne 0x429d35
cmp word [esi + 0x30], 0
je 0x429dc9
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
mov eax, dword [esi + 0xc]
test eax, eax
je 0x429d65
test edx, edx
jne 0x429d59
cmp dword [esi + 0x28], 0
jne 0x429d59
cmp word [esi + 0x30], 0
je 0x429dc9
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
cmp dword [esi + 0x28], 0
je 0x429d9c
test edx, edx
jne 0x429d90
test eax, eax
jne 0x429d90
cmp word [esi + 0x30], 0
jne 0x429d90
cmp dword [esi + 0x20], 0xb
je 0x429e06
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
cmp word [esi + 0x30], 0
je 0x429e19
cmp dword [esi + 0x34], 0
je 0x429e19
cmp dword [esi + 0x20], 0xb
je 0x429dbb
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
test edx, edx
jne 0x429e0d
test eax, eax
jne 0x429e0d
cmp dword [esi + 0x28], 0
jne 0x429e0d
cmp dword [esi + 0x20], 0xb
je 0x429e06
cmp byte [esp + 0x13], 0
jne 0x429e06
mov byte [esp + 0x24], 0
test ebx, ebx
je 0x429e34
lea eax, [esp + 0x30]
lea ecx, [esp + 0x3c]
push eax
mov edx, dword [esi + 0x1c]
push ecx
push edx
push ebx
push ebp
call fcn.00413f50
add esp, 0x14
test ax, ax
je 0x429e25
mov word [esp + 0x16], ax
jmp 0x42a785
mov byte [esp + 0x24], 1
jmp 0x429ddb
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
mov word [esp + 0x16], 0xfff3
jmp 0x42a785
push ebx
push ebp
call fcn.00414090
add esp, 8
jmp 0x429edf
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], edx
cmp byte [esp + 0x14], 0
je 0x429e55
cmp byte [esp + 0x24], 0
mov eax, 1
je 0x429e57
xor eax, eax
lea edx, [esp + 0x28]
push eax
push ecx
mov eax, dword [esi + 8]
lea ecx, [esp + 0x28]
push eax
lea eax, [esp + 0x3c]
push ecx
push edx
push eax
push ebp
call fcn.00431530
add esp, 0x1c
test ax, ax
je 0x429e84
mov word [esp + 0x16], ax
jmp 0x42a785
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x20]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x3c], ecx
mov eax, dword [edx + 0xd0]
test eax, eax
je 0x429eab
mov eax, dword [eax + 0x14]
push eax
call fcn.004d53f0
add esp, 4
jmp 0x429ead
xor eax, eax
test eax, eax
je 0x42a77e
mov ecx, 0
test ebp, ebp
je 0x429ec4
mov ecx, dword [ebp + 0xac]
push 0x5385c4
mov eax, dword [eax + 0x30]
push eax
push ecx
call fcn.004ac2e0
add esp, 0xc
test ax, ax
je 0x42a77e
cmp dword [esp + 0x20], 0
je 0x429ef9
mov eax, dword [esp + 0x20]
mov ecx, dword [ebp + 0x98]
mov edx, dword [eax + 0x188]
mov dword [ecx + 0x2c], edx
push 0x1b
push 0x4c
push ebp
call fcn.0040f980
mov dword [esp + 0x24], eax
add esp, 0xc
test eax, eax
je 0x42a785
mov ecx, dword [esp + 0x190]
mov dword [eax + 0x14], ecx
mov edx, dword [esi + 8]
mov dword [eax + 0x18], edx
mov ecx, dword [esi + 4]
mov dword [eax + 0x1c], ecx
mov edx, dword [esp + 0x30]
mov dword [eax + 0x20], edx
mov dl, byte [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov dword [eax + 0x24], ecx
mov byte [eax + 0x2c], dl
lea edi, [esp + 0xc0]
cmp word [esi + 2], 0x200
setl cl
mov byte [eax + 0x41], cl
mov dword [eax + 0x44], ebx
mov ecx, dword [esi + 0x4c]
mov dword [eax + 0x28], ecx
xor eax, eax
mov ecx, 0x13
rep stosd dword es:[edi], eax
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], ecx
cmp byte [esp + 0x24], 1
mov ecx, dword [esp + 0x190]
mov dword [esp + 0xd8], eax
sbb eax, eax
mov edx, dword [ecx + 0x18]
and eax, 0xfffffffb
lea edi, [esp + 0x50]
add eax, 6
mov ecx, 0x13
mov dword [esp + 0x24], eax
mov dword [esp + 0xc8], eax
xor eax, eax
mov dword [esp + 0x100], edx
rep stosd dword es:[edi], eax
cmp byte [esp + 0x13], al
je 0x429fdd
lea eax, [esp + 0x50]
push eax
push ebp
call fcn.0045a6e0
add esp, 8
test ax, ax
jne 0x42a785
cmp byte [esp + 0x14], 0
je 0x42a118
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x2c], 0
jne 0x42a09d
lea edi, [esp + 0x10c]
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
mov word [esp + 0x10c], 0x20
cmp byte [esp + 0x12], 1
mov word [esp + 0x10e], 0x222
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x128], eax
push 0
sbb eax, eax
lea edx, [esp + 0x110]
add eax, 3
mov dword [esp + 0x124], ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0x194]
push ecx
push edx
push eax
push ebp
call fcn.00433690
add esp, 0x14
test ax, ax
jne 0x42a087
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x42a087
mov eax, dword [esp + 0x18]
mov dword [eax + 0x34], ecx
cmp word [ecx + 0x2c], 1
sbb al, al
inc al
mov byte [esp + 0x15], al
jmp 0x42a118
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], ecx
cmp ecx, 0xffffffff
jne 0x42a118
jmp 0x42a785
cmp dword [esp + 0x28], 0
jne 0x42a0f9
mov dx, word [esi + 0x38]
push 0
push 0
mov eax, dword [esi + 0x40]
push eax
mov ecx, dword [esi + 0x3c]
mov eax, dword [esp + 0x24]
push ecx
push edx
add eax, 0x30
mov dx, word [esi + 0x30]
push eax
mov ecx, dword [esi + 0x34]
mov eax, dword [esi + 0x28]
push ecx
push edx
push eax
mov ecx, dword [esi + 0x2c]
mov edx, dword [esp + 0x1b4]
push ecx
push edx
call fcn.0040a5d0
add esp, 0x2c
test ax, ax
mov ax, 1
jl 0x42a0ea
xor ax, ax
test ax, ax
je 0x42a0f9
mov word [esp + 0x16], ax
jmp 0x42a785
cmp dword [esp + 0x20], 0
je 0x42a113
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xf0]
mov dl, byte [ecx + 4]
mov byte [esp + 0x15], dl
jmp 0x42a118
mov byte [esp + 0x15], 0
lea eax, [esp + 0x9c]
lea ecx, [esp + 0xc0]
push eax
push ecx
push ebp
call fcn.0042b1f0
mov ecx, dword [esp + 0x28]
add esp, 0xc
sub ecx, 2
cmp ecx, 5
ja case.0x42a13d.5
jmp dword [ecx*4 + 0x42a86c]
cmp eax, 2
je case.0x42a13d.5
mov dword [esp + 0x1c], 0
jmp case.0x42a13d.5
cmp eax, 2
je case.0x42a13d.5
mov dword [esp + 0x1c], 1
jmp case.0x42a13d.5
cmp eax, 4
jne case.0x42a13d.5
mov dword [esp + 0x1c], 0
jmp case.0x42a13d.5
push 1
push 0
push 5
push ebp
call fcn.0040f090
add esp, 0x10
test ax, ax
jne 0x42a785
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov dword [eax + 0x1c], ecx
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx + 0x7c]
mov dword [esp + 0x88], edx
cmp eax, 0x81
ja case.0x42a1b4.11
xor ecx, ecx
mov cl, byte [eax + 0x42a8b4]
jmp dword [ecx*4 + 0x42a884]
mov word [esp + 0x16], 0xfff2
jmp 0x42a785
or byte [esp + 0x98], 1
jmp case.0x42a1b4.9
or byte [esp + 0x98], 1
mov edx, 1
lea eax, [esp + 0x40]
xor ecx, ecx
mov ebx, dword [esp + 0x18]
mov byte [esp + 0x58], dl
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
cmp byte [ebx + 0x2c], cl
je 0x42a580
mov eax, dword [esp + 0x28]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x24]
mov ebx, dword [ebx + 0x30]
sub eax, 0xb
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], ebx
cmp eax, edx
mov byte [esp + 0x79], dl
sbb al, al
mov dword [esp + 0x7c], ecx
neg al
mov byte [esp + 0x48], al
jmp 0x42a58e
mov edx, 1
mov eax, dword [esp + 0x18]
xor ecx, ecx
mov byte [eax + 0x40], dl
lea eax, [esp + 0x40]
mov ebx, dword [esp + 0x18]
mov byte [esp + 0x58], dl
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
cmp byte [ebx + 0x2c], cl
je 0x42a28a
mov eax, dword [esp + 0x28]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x24]
mov ebx, dword [ebx + 0x30]
sub eax, 0xb
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], ebx
cmp eax, edx
mov byte [esp + 0x79], dl
sbb al, al
mov dword [esp + 0x7c], ecx
neg al
mov byte [esp + 0x48], al
jmp 0x42a298
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x34]
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x74], edx
mov byte [esp + 0x84], 1
or byte [esp + 0x98], 2
mov al, byte [esp + 0x15]
mov byte [esp + 0x78], al
jmp case.0x42a1b4.2
mov dword [esp + 0xc8], 0
mov eax, 1
mov byte [esp + 0x58], al
mov byte [esp + 0x60], al
jmp case.0x42a1b4.2
lea eax, [esp + 0x178]
push 0xffffffffffffffff
lea ecx, [esp + 0xc4]
push str.NumHLFeatures
push str.Summarizer
push eax
push ecx
call fcn.004d2960
add esp, 0x14
mov dword [esp + 0xc8], 3
mov eax, dword [esi + 0x48]
test eax, eax
jne 0x42a30d
mov eax, 3
lea ecx, [esp + 0xc0]
push eax
lea eax, [esp + 0x16c]
push str.NumSentences
push str.Summarizer
push eax
push ecx
call fcn.004d2960
add esp, 0x14
mov eax, 1
mov byte [esp + 0x58], al
mov byte [esp + 0x60], al
or byte [esp + 0x98], 4
mov byte [esp + 0x84], al
jmp case.0x42a1b4.2
xor ebx, ebx
lea edi, [esp + 0xa4]
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x2c], bl
je 0x42a3c5
mov ecx, 1
lea eax, [esp + 0x40]
mov edx, dword [esp + 0x28]
mov byte [esp + 0x58], cl
mov edi, dword [esp + 0x18]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [esp + 0x40], edx
mov eax, dword [edi + 0x30]
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0x24]
sub eax, 0xb
cmp eax, ecx
mov byte [esp + 0x79], cl
sbb al, al
lea edx, [esp + 0x40]
neg al
mov byte [esp + 0x48], al
mov dword [esp + 0x7c], edx
mov eax, str.__HLINSTs__
mov dword [esp + 0x4c], eax
mov dword [esp + 0xbc], eax
jmp 0x42a3dc
lea eax, [esp + 0x54]
push eax
push ebp
call fcn.004de940
add esp, 8
test ax, ax
jne 0x42a785
cmp dword [esp + 0x1c], 8
mov al, byte [esp + 0x15]
mov byte [esp + 0x78], al
jne 0x42a3fe
mov eax, 1
mov byte [esp + 0xa5], al
mov byte [esp + 0x84], al
cmp dword [esi + 0x58], 1
sbb eax, eax
mov edi, 2
neg eax
sub edi, eax
cmp dword [esi + 0x5c], 1
sbb eax, eax
neg eax
sub edi, eax
xor eax, eax
mov ax, word [esi + 0x60]
add eax, edi
je 0x42a445
shl eax, 2
push 0x3e
mov edx, dword [ebp + 0x44]
lea ecx, [eax + eax*4]
push ecx
push edx
push ebp
call fcn.004aab00
mov dword [esp + 0x44], eax
add esp, 0x10
mov ebx, eax
test eax, eax
je 0x42a785
mov eax, dword [esi + 0x58]
test eax, eax
je 0x42a486
mov eax, dword [eax + 4]
mov dword [ebx], eax
test eax, eax
je 0x42a460
cmp byte [eax], 0
jne 0x42a460
mov dword [ebx], 0
mov eax, dword [esi + 0x58]
mov ecx, dword [eax + 8]
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x58]
mov eax, dword [eax + 0xc]
sub eax, 0xb
cmp eax, 1
sbb al, al
neg al
mov byte [ebx + 8], al
mov dword [esp + 0xa8], ebx
add ebx, 0x14
mov eax, dword [esi + 0x5c]
test eax, eax
je 0x42a4c7
mov eax, dword [eax + 4]
mov dword [ebx], eax
test eax, eax
je 0x42a4a1
cmp byte [eax], 0
jne 0x42a4a1
mov dword [ebx], 0
mov eax, dword [esi + 0x5c]
mov ecx, dword [eax + 8]
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x5c]
mov eax, dword [eax + 0xc]
sub eax, 0xb
cmp eax, 1
sbb al, al
neg al
mov byte [ebx + 8], al
mov dword [esp + 0xac], ebx
add ebx, 0x14
xor ecx, ecx
mov edx, dword [esi + 0x64]
cmp word [esi + 0x60], cx
jbe 0x42a513
mov eax, dword [edx]
mov eax, dword [eax + 4]
mov dword [ebx], eax
test eax, eax
je 0x42a4e8
cmp byte [eax], 0
jne 0x42a4e8
mov dword [ebx], 0
mov eax, dword [edx]
mov eax, dword [eax + 8]
mov dword [ebx + 4], eax
mov eax, dword [edx]
mov eax, dword [eax + 0xc]
sub eax, 0xb
cmp eax, 1
sbb al, al
add ebx, 0x14
add edx, 4
inc ecx
neg al
mov byte [ebx - 0xc], al
xor eax, eax
mov ax, word [esi + 0x60]
cmp eax, ecx
ja 0x42a4d2
shl edi, 2
xor eax, eax
mov ax, word [esi + 0x60]
mov dword [esp + 0xb0], eax
lea eax, [edi + edi*4]
add eax, dword [esp + 0x34]
mov dword [esp + 0xb4], eax
mov eax, dword [esi + 0x50]
sub eax, 0xb
cmp eax, 1
sbb al, al
neg al
mov byte [esp + 0xa4], al
mov eax, dword [esi + 0x54]
sub eax, 2
mov ecx, dword [esp + 0x18]
cmp eax, 1
sbb al, al
neg al
mov byte [esp + 0xa6], al
mov eax, dword [ecx + 0x34]
test eax, eax
je 0x42a56e
mov eax, dword [eax + 0x1c]
mov dword [esp + 0xb8], eax
mov byte [esp + 0x68], 1
lea eax, [esp + 0xa4]
mov dword [esp + 0x6c], eax
jmp case.0x42a1b4.2
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x34]
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x74], edx
mov al, byte [esp + 0x15]
mov byte [esp + 0x78], al
test al, al
je case.0x42a1b4.9
cmp byte [esp + 0x48], 0
jne case.0x42a1b4.9
or byte [esp + 0x98], 8
mov byte [esp + 0x84], 1
mov eax, dword [esi + 0x44]
test eax, eax
je 0x42a5cb
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x90], eax
mov dword [ebx + 0x48], eax
add ebx, 0x48
jmp 0x42a5d9
mov ebx, dword [esp + 0x18]
add ebx, 0x48
mov dword [esp + 0x94], ebx
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x50]
add edi, 0x38
push ecx
push edi
push ebp
call fcn.0044eeb0
add esp, 0xc
test ax, ax
jne 0x42a785
mov eax, dword [esp + 0x1c]
cmp eax, 2
je 0x42a613
cmp eax, 4
je 0x42a620
mov dword [esp + 0xcc], 0
jmp 0x42a62b
mov dword [esp + 0xcc], 2
jmp 0x42a62b
mov dword [esp + 0xcc], 1
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x42a655
lea ecx, [esp + 0xc0]
push eax
lea eax, [esp + 0x15c]
push 0x521bb8
push 0x521ba8
push eax
push ecx
call fcn.004d2960
add esp, 0x14
lea eax, [esp + 0xc0]
mov ecx, dword [edi]
push eax
push ecx
call fcn.004d2610
add esp, 8
test ax, ax
jne 0x42a785
cmp dword [esp + 0x1c], 3
jne 0x42a768
lea edi, [esp + 0x10c]
xor eax, eax
mov ecx, 0x13
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x14]
mov eax, dword [esi + 0x44]
test eax, eax
mov edx, dword [ecx + 0x7c]
mov dword [esp + 0x144], edx
je 0x42a6af
mov dword [esp + 0x14c], eax
mov dword [ebx], eax
jmp 0x42a6b6
mov dword [esp + 0x150], ebx
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x10c]
add ebx, 0x3c
push ecx
push ebx
push ebp
call fcn.0044eeb0
add esp, 0xc
test ax, ax
jne 0x42a785
lea edi, [esp + 0xc0]
xor eax, eax
mov ecx, 0x13
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0xd8], edx
mov dword [esp + 0xcc], 2
mov dword [esp + 0xc8], eax
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x42a750
lea ecx, [esp + 0xc0]
push eax
lea eax, [esp + 0x15c]
push 0x521bb8
push 0x521ba8
push eax
push ecx
call fcn.004d2960
add esp, 0x14
lea eax, [esp + 0xc0]
mov ecx, dword [ebx]
push eax
push ecx
call fcn.004d2610
add esp, 8
test ax, ax
jne 0x42a785
mov ecx, dword [esp + 0x194]
mov eax, dword [esp + 0x18]
mov word [esp + 0x16], 0
mov dword [ecx], eax
jmp 0x42a785
mov word [esp + 0x16], 0xffe3
cmp word [esp + 0x16], 0
jge 0x42a7a2
cmp dword [esp + 0x18], 0
je 0x42a7a2
mov eax, dword [esp + 0x18]
push eax
push ebp
call fcn.0042b0a0
add esp, 8
mov eax, dword [esp + 0x34]
mov ecx, dword [ebp + 0x44]
push eax
push ecx
push ebp
call fcn.004aad00
mov ax, word [esp + 0x22]
mov edx, dword [esp + 0xac]
add esp, 0xc
mov ecx, dword [ebp + 0x98]
pop ebp
mov dword [ecx + 0x2c], edx
pop edi
pop esi
pop ebx
add esp, 0x178
ret