Function at 0x420310
Capabilities:
Check for software breakpoints

Disassembly:
sub esp, 0x54
push ebx
mov ebx, ecx
mov byte [esp + 0x2c], 0xe8
push ebp
xor cl, cl
mov dword [esp + 0x10], ebx
push esi
mov eax, dword [ebx + 8]
lea edx, [esp + 0x44]
mov byte [esp + 0xf], cl
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0x35], 0
push edi
mov edi, dword [ebx]
mov esi, edi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov ecx, esi
mov byte [esp + 0x30], 0xe9
mov dword [esp + 0x31], 0
mov word [esp + 0x40], 0x800f
mov dword [esp + 0x42], 0
mov byte [esp + 0x12], 0
mov dword [esp + 0x20], ebp
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov dword [esp + 0x1c], eax
call fcn.0041f7e0
test dword [esp + 0x60], 0x1000
mov edx, eax
mov dword [esp + 0x2c], edx
jne 0x420598
cmp byte [esp + 0x12], 5
mov dword [esp + 0x14], esi
jb 0x4203c3
mov eax, esi
mov dword [esp + 0x20], 1
sub eax, dword [esp + 0x1c]
lea ecx, [esp + 0x30]
sub eax, 5
mov dword [esp + 0x14], ecx
mov dword [esp + 0x31], eax
mov edx, 5
jmp 0x4204fe
mov bl, byte [esp + 0x4e]
cmp bl, 0xe8
jne 0x4203f0
movzx eax, byte [esp + 0x48]
lea ecx, [esp + 0x38]
sub eax, dword [esp + 0x1c]
mov edx, 5
add eax, 0xfffffffb
add eax, dword [esp + 0x58]
add eax, esi
mov dword [esp + 0x39], eax
jmp 0x4204f6
mov al, bl
and al, 0xfd
cmp al, 0xe9
jne 0x42044e
movzx ecx, byte [esp + 0x48]
add ecx, esi
cmp bl, 0xeb
jne 0x42040d
movsx eax, byte [esp + 0x58]
add ecx, eax
jmp 0x420411
add ecx, dword [esp + 0x58]
cmp edi, ecx
ja 0x42042c
lea eax, [edi + 5]
cmp ecx, eax
jae 0x42042c
cmp dword [esp + 0x24], ecx
mov ebp, ecx
cmovae ebp, dword [esp + 0x24]
jmp 0x4204fa
sub ecx, dword [esp + 0x1c]
mov edx, 5
sub ecx, 5
cmp esi, ebp
mov dword [esp + 0x31], ecx
lea ecx, [esp + 0x30]
sbb edi, edi
inc edi
mov dword [esp + 0x20], edi
jmp 0x4204f6
mov ch, byte [esp + 0x4f]
mov cl, bl
and cl, 0xf0
cmp cl, 0x70
je 0x420483
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x420483
mov al, ch
and al, 0xf0
cmp al, 0x80
je 0x420483
and bl, 0xfe
cmp bl, 0xc2
jne 0x4204fa
cmp esi, ebp
sbb edi, edi
inc edi
mov dword [esp + 0x20], edi
jmp 0x4204fa
movzx edx, byte [esp + 0x48]
add edx, esi
cmp cl, 0x70
je 0x42049d
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x42049d
add edx, dword [esp + 0x58]
jmp 0x4204a4
movsx eax, byte [esp + 0x58]
add edx, eax
cmp edi, edx
ja 0x4204c0
lea eax, [edi + 5]
cmp edx, eax
jae 0x4204c0
cmp dword [esp + 0x24], edx
mov ebp, edx
mov edx, dword [esp + 0x2c]
cmovae ebp, dword [esp + 0x24]
jmp 0x4204fa
mov al, bl
and al, 0xfc
cmp al, 0xe0
je 0x420598
cmp bl, 0xf
movzx ecx, ch
movzx eax, bl
cmovne ecx, eax
sub edx, dword [esp + 0x1c]
and cl, 0xf
or cl, 0x80
sub edx, 6
mov byte [esp + 0x41], cl
lea ecx, [esp + 0x40]
mov dword [esp + 0x42], edx
mov edx, 6
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x18]
cmp esi, ebp
jae 0x42050f
movzx eax, byte [esp + 0x48]
cmp edx, eax
jne 0x420598
mov eax, dword [esp + 0x28]
add eax, edx
cmp eax, 0x20
ja 0x420598
mov eax, dword [ebx + 0x10]
cmp eax, 8
jae 0x420598
mov cl, byte [esp + 0x12]
mov esi, dword [esp + 0x14]
mov byte [eax + ebx + 0x14], cl
mov eax, dword [ebx + 0x10]
mov cl, byte [esp + 0x13]
add byte [esp + 0x13], dl
movzx edi, cl
mov byte [eax + ebx + 0x1c], cl
mov ecx, edx
mov dl, byte [esp + 0x12]
mov eax, dword [ebx + 8]
add edi, eax
add dl, byte [esp + 0x48]
inc dword [ebx + 0x10]
cmp dword [esp + 0x20], 0
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x12], dl
jne 0x4205a2
movzx ecx, byte [esp + 0x13]
mov edi, dword [ebx]
add eax, ecx
movzx esi, dl
lea edx, [esp + 0x48]
add esi, edi
mov dword [esp + 0x28], ecx
mov ecx, esi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x1c], eax
call fcn.0041f7e0
test dword [esp + 0x60], 0x1000
mov edx, eax
mov dword [esp + 0x2c], edx
je 0x420391
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x54
ret
cmp dl, 5
jae 0x420623
mov edi, dword [ebx]
movzx esi, dl
mov edx, 5
sub edx, esi
lea ecx, [edi + esi]
call fcn.004202d0
test eax, eax
jne 0x420623
cmp byte [esp + 0x12], 2
jae 0x4205d6
mov edx, 2
sub edx, esi
call fcn.004202d0
test eax, eax
je 0x420598
push 0x1c
lea eax, [esp + 0x4c]
push eax
lea eax, [edi - 5]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [esp + 0x58], 0x1000
jne 0x420598
test byte [esp + 0x5c], 0xf0
je 0x420598
mov edx, dword [ebx]
mov cl, byte [edx - 5]
test cl, cl
je 0x42060b
cmp cl, 0x90
je 0x42060b
cmp cl, 0xcc
jne 0x420598
mov eax, 1
cmp byte [edx + eax - 5], cl
jne 0x420598
inc eax
cmp eax, 5
jb 0x420610
mov dword [ebx + 0xc], 1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x54
ret