Function at 0x420670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x100
mov dword [esp + 0x5c], ecx
mov ecx, dword [ebp + 0x14]
lea ebx, [esp + 0xe0]
mov eax, dword [0x4ea2c0]
xor eax, ebp
mov dword [esp + 0xf8], eax
lea eax, [ecx + 0x20]
mov dword [esp + 0x3c], eax
mov eax, 0x8dfb481c
jmp 0x4206f0
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0xf5ff37e
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4ffe3ac8
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
nop dword [eax]
cmp eax, 0x25bc224
jg 0x420760
cmp eax, 0xce8f4357
jg 0x4207e0
cmp eax, 0xac3d8c40
jg 0x4208ae
cmp eax, 0x92b9cbc8
jg 0x420b9f
cmp eax, 0x8dfb481b
jg 0x420fb6
cmp eax, 0x83144ac4
je 0x421495
cmp eax, 0x8ce6481e
jne 0x4206f0
movzx eax, byte [ebp + 0x1c]
mov esi, 0x4380e069
mov edi, 0xd8c82396
mov byte [esp + 0x33], al
mov eax, dword [0x4ebfc0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd8c82396
jmp 0x421fda
cmp eax, 0x4ffe3ac7
jg 0x420860
cmp eax, 0x133fee87
jg 0x4208e4
cmp eax, 0x9418e86
jg 0x420bdf
cmp eax, 0x73a49b3
jg 0x420feb
cmp eax, 0x25bc225
je 0x4214ac
cmp eax, 0x2b449ee
jne 0x4206f0
mov ecx, 0x1fcb8653
mov dword [esp + 0x18], ebx
nop dword [eax + eax]
cmp ecx, 0x72ba7a5e
je 0x4214e2
cmp ecx, 0x1fcb8653
jne 0x4207b0
mov eax, dword [esp + 0x18]
mov ecx, 0x72ba7a5e
add eax, 0x10
jmp 0x4207b0
cmp eax, 0xed032855
jg 0x42095a
cmp eax, 0xd53934d6
jg 0x420c0a
cmp eax, 0xd1a11248
jg 0x421027
cmp eax, 0xce8f4358
je 0x4215a0
cmp eax, 0xcf01981e
jne 0x4206f0
movzx eax, byte [esp + 0x33]
lea ecx, [ebp + 0xc]
mov dword [esp + 0x64], eax
movzx eax, byte [ebp + 0x18]
mov byte [esp + 0x34], al
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x68], eax
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x6c], eax
mov eax, 0x770173a9
jmp 0x4206f0
cmp eax, 0x71b91e95
jg 0x4209c2
cmp eax, 0x6029516c
jg 0x420c35
cmp eax, 0x5bc17a2b
jg 0x421047
cmp eax, 0x4ffe3ac8
je 0x4215aa
cmp eax, 0x55811b61
jne 0x4206f0
cmp byte [esp + 0x37], 0
mov eax, 0xbe89e3f9
mov ecx, 0xd53934d7
cmovne eax, ecx
jmp 0x4206f0
cmp eax, 0xb51699a6
jg 0x420c8d
cmp eax, 0xaeb8cb2e
jg 0x421215
cmp eax, 0xac3d8c41
je 0x4215b4
cmp eax, 0xad5f9d7d
jne 0x4206f0
mov eax, 0x4f8e9401
jmp 0x4206f0
cmp eax, 0x3ba2d76c
jg 0x420e8d
cmp eax, 0x16bc4c5a
jg 0x421265
cmp eax, 0x133fee88
je 0x4215cb
cmp eax, 0x16120904
jne 0x4206f0
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0x9418e87
mov edi, 0xb29b1e47
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
lea ebx, [esp + 0xe0]
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x4206f0
cmp eax, 0xf1c2460d
jg 0x420eb8
cmp eax, 0xf0e0de59
jg 0x421285
cmp eax, 0xed032856
je 0x421604
cmp eax, 0xede3f265
jne 0x4206f0
mov eax, dword [esp + 0x40]
mov ecx, 0x1fcb8653
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x18], ebx
nop dword [eax + eax]
cmp ecx, 0x72ba7a5e
je 0x421638
cmp ecx, 0x1fcb8653
jne 0x4209a0
mov eax, dword [esp + 0x18]
mov ecx, 0x72ba7a5e
add eax, 0x10
jmp 0x4209a0
cmp eax, 0x78068d7d
jle 0x420ee3
cmp eax, 0x7d6e7c1f
jg 0x4212b2
cmp eax, 0x78068d7e
je 0x42165a
cmp eax, 0x7b426b5b
jne 0x4206f0
mov eax, dword [0x4ec3e8]
mov ecx, dword [0x4ec3e4]
mov esi, 0xe7c10b76
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0x159d370d
sete al
sete byte [esp + 0x1f]
cmp ecx, 0xa
setl cl
setl byte [esp + 0x20]
or cl, al
mov eax, 0x159d370d
mov ecx, 0xb074a89c
cmovne eax, ecx
mov ecx, 0x61f337b1
cmovne edx, ecx
mov ecx, 0xf1721b5a
cmovne esi, ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x60], esi
mov esi, 0x1f1a8b14
jmp 0x420a60
mov esi, 0x61f337b1
nop word [eax + eax]
mov ebx, esi
cmp esi, 0x1f1a8b13
jg 0x420aa0
cmp ebx, 0x159d370c
jg 0x420ae0
cmp ebx, 0xe7c10b76
je 0x420b35
cmp ebx, 0xf1721b5a
jne 0x420b6a
mov esi, 0x21a30dcc
jmp 0x420a60
cmp ebx, 0x61f337b0
jg 0x420b10
cmp ebx, 0x1f1a8b14
je 0x420b3f
mov esi, ebx
cmp ebx, 0x21a30dcc
jne 0x420a60
mov ecx, dword [esp + 0x18]
mov esi, 0x6a5c085e
vmovsd xmm0, qword [ecx]
vmovsd qword [esp + 0xa8], xmm0
jmp 0x420a60
cmp ebx, 0x159d370d
je 0x420a52
mov esi, ebx
cmp ebx, 0x1e977fa5
jne 0x420a60
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x18], ecx
jmp 0x420a60
mov esi, eax
cmp ebx, 0x61f337b1
je 0x420a60
mov esi, ebx
cmp ebx, 0x6a5c085e
jne 0x420a60
mov esi, dword [esp + 0x28]
jmp 0x420a60
mov esi, 0x1e977fa5
jmp 0x420a60
movzx ecx, byte [esp + 0x1f]
mov bh, byte [esp + 0x20]
mov edi, 0xe7c10b76
mov edx, 0x1e977fa5
mov bl, cl
xor bl, bh
cmovne edi, edx
test bh, bh
mov esi, edi
cmovne esi, edx
test cl, cl
cmove esi, edi
jmp 0x420a60
mov esi, ebx
cmp ebx, 0xb074a89c
jne 0x420a60
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
lea ebx, [esp + 0xe0]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov eax, 0xfc4f6567
jmp 0x4206f0
cmp eax, 0xa5662c0a
jg 0x4212ee
cmp eax, 0x92b9cbc9
je 0x421664
cmp eax, 0xa4a873f3
jne 0x4206f0
mov eax, dword [0x4ebfc0]
mov esi, 0xa51a640
mov edi, 0xf0e0de5a
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf0e0de5a
jmp 0x421fda
cmp eax, 0xf5ff37d
jg 0x421316
cmp eax, 0x9418e87
je 0x42169e
cmp eax, 0xa51a640
jne 0x4206f0
mov eax, 0xce8f4358
jmp 0x4206f0
cmp eax, 0xdf920e81
jg 0x421336
cmp eax, 0xd53934d7
je 0x4216bc
cmp eax, 0xd8c82396
jne 0x4206f0
mov eax, 0x8ce6481e
jmp 0x4206f0
cmp eax, 0x6cb7b23c
jg 0x42135a
cmp eax, 0x6029516d
je 0x421712
cmp eax, 0x6aa7a55e
jne 0x4206f0
lea eax, [esp + 0xb0]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
call fcn.004098c0
mov eax, 0xbe18a25a
nop
cmp eax, 0xdb0adbca
je 0x4217c6
cmp eax, 0xbe18a25a
jne 0x420c70
mov ecx, dword [esp + 0x18]
mov eax, 0xdb0adbca
jmp 0x420c70
cmp eax, 0xbe89e3f8
jg 0x42137a
cmp eax, 0xb51699a7
je 0x4217e3
cmp eax, 0xb753c55c
jne 0x4206f0
mov eax, dword [0x4ec3e8]
mov ecx, dword [0x4ec3e4]
mov esi, 0x159d370d
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0xe7c10b76
sete al
sete byte [esp + 0x1f]
cmp ecx, 0xa
setl cl
setl byte [esp + 0x20]
or cl, al
mov eax, 0xb074a89c
mov ecx, 0x159d370d
cmovne esi, eax
mov eax, 0x61f337b1
cmovne ecx, eax
mov eax, 0xf1721b5a
cmovne edx, eax
mov eax, 0x1f1a8b14
mov dword [esp + 0x28], ecx
jmp 0x420d20
mov eax, 0x61f337b1
nop word cs:[eax + eax]
mov ebx, eax
cmp eax, 0x1f1a8b13
jg 0x420d50
cmp ebx, 0x159d370c
jg 0x420d90
cmp ebx, 0xe7c10b76
je 0x420de5
cmp ebx, 0xf1721b5a
jne 0x420e20
mov eax, 0x21a30dcc
jmp 0x420d20
cmp ebx, 0x61f337b0
jg 0x420dc0
cmp ebx, 0x1f1a8b14
je 0x420def
mov eax, ebx
cmp ebx, 0x21a30dcc
jne 0x420d20
mov eax, dword [esp + 0x18]
vmovsd xmm0, qword [eax]
mov eax, 0x6a5c085e
vmovsd qword [esp + 0xa8], xmm0
jmp 0x420d20
cmp ebx, 0x159d370d
je 0x420d0e
mov eax, ebx
cmp ebx, 0x1e977fa5
jne 0x420d20
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], eax
mov eax, edx
jmp 0x420d20
mov eax, esi
cmp ebx, 0x61f337b1
je 0x420d20
mov eax, ebx
cmp ebx, 0x6a5c085e
jne 0x420d20
mov eax, dword [esp + 0x28]
jmp 0x420d20
mov eax, 0x1e977fa5
jmp 0x420d20
movzx ebx, byte [esp + 0x1f]
movzx eax, byte [esp + 0x20]
mov ecx, 0x1e977fa5
mov edi, 0xe7c10b76
mov bh, bl
xor bh, al
test al, al
mov eax, 0xe7c10b76
cmovne eax, ecx
test bl, bl
cmove eax, edi
test bh, bh
cmovne eax, ecx
jmp 0x420d20
mov eax, ebx
cmp ebx, 0xb074a89c
jne 0x420d20
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov esi, 0xf340b936
mov edi, 0xdf920e82
lea ebx, [esp + 0xe0]
cmp eax, 1
mov eax, dword [0x4ebfc0]
sbb ecx, 0
setl byte [esp + 0x36]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdf920e82
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4ebfbc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x4206f0
cmp eax, 0x4a408cc3
jg 0x4213c4
cmp eax, 0x3ba2d76d
je 0x4217ed
cmp eax, 0x4380e069
jne 0x4206f0
mov eax, 0xcf01981e
jmp 0x4206f0
cmp eax, 0xfc4f6566
jg 0x42140e
cmp eax, 0xf1c2460e
je 0x421832
cmp eax, 0xf340b936
jne 0x4206f0
mov eax, 0x6cb7b23d
jmp 0x4206f0
cmp eax, 0x770173a8
jg 0x42143e
cmp eax, 0x71b91e96
je 0x42186e
cmp eax, 0x74e482b7
jne 0x4206f0
mov eax, dword [0x4ebfb8]
mov edx, 0x4e52496a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x4ebfb4], 0xa
setl cl
or cl, al
mov eax, 0x36438a53
mov ecx, 0x4c7d73a4
cmovne eax, ecx
mov ecx, 0x36438a53
cmovne ecx, edx
mov edx, 0x3bf0ecbf
nop word cs:[eax + eax]
cmp edx, 0x3bf0ecbe
jle 0x420f90
cmp edx, 0x3bf0ecbf
je 0x420fab
cmp edx, 0x4c7d73a4
je 0x420faf
cmp edx, 0x4e52496a
jne 0x420f50
mov edx, dword [esp + 0x38]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x18]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov dword [esp + 0xa8], edx
mov edx, eax
jmp 0x420f50
cmp edx, 0x3491c852
je 0x421880
cmp edx, 0x36438a53
jne 0x420f50
mov edx, 0x4e52496a
jmp 0x420f50
mov edx, ecx
jmp 0x420f50
mov edx, 0x3491c852
jmp 0x420f50
cmp eax, 0x8dfb481c
je 0x4218a4
cmp eax, 0x919f35a1
jne 0x4206f0
mov eax, dword [0x4ebfc0]
mov esi, 0xd1a11249
mov edi, 0xb51699a7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb51699a7
jmp 0x421fda
cmp eax, 0x73a49b4
je 0x4218cc
cmp eax, 0x83f4d41
jne 0x4206f0
mov eax, dword [0x4ebfc0]
mov edi, 0xb753c55c
mov esi, 0xdf920e82
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdf920e82
jmp 0x422050
cmp eax, 0xd1a11249
je 0x4218f0
cmp eax, 0xd51b092a
jne 0x4206f0
mov eax, 0x73a49b4
jmp 0x4206f0
cmp eax, 0x5bc17a2c
je 0x4218fa
cmp eax, 0x5c71feeb
jne 0x4206f0
mov eax, dword [0x4ec3e8]
mov ecx, dword [0x4ec3e4]
mov esi, 0x1f1a8b14
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
setne al
sete dl
sete byte [esp + 0x1f]
cmp ecx, 0xa
setge cl
setl byte [esp + 0x20]
setl ah
or cl, al
xor ah, dl
mov edx, 0x159d370d
xor cl, 1
or cl, ah
mov eax, 0x159d370d
mov ecx, 0xb074a89c
cmovne eax, ecx
mov ecx, 0x61f337b1
cmovne edx, ecx
mov ecx, 0xf1721b5a
mov dword [esp + 0x28], edx
mov edx, 0xe7c10b76
cmovne edx, ecx
jmp 0x4210d0
mov esi, 0x61f337b1
nop
mov ebx, esi
cmp esi, 0x1f1a8b13
jg 0x421110
cmp ebx, 0x159d370c
jg 0x421150
cmp ebx, 0xe7c10b76
je 0x4211a5
cmp ebx, 0xf1721b5a
jne 0x4211e0
mov esi, 0x21a30dcc
jmp 0x4210d0
cmp ebx, 0x61f337b0
jg 0x421180
cmp ebx, 0x1f1a8b14
je 0x4211af
mov esi, ebx
cmp ebx, 0x21a30dcc
jne 0x4210d0
mov ecx, dword [esp + 0x18]
mov esi, 0x6a5c085e
vmovsd xmm0, qword [ecx]
vmovsd qword [esp + 0xa8], xmm0
jmp 0x4210d0
cmp ebx, 0x159d370d
je 0x4210c9
mov esi, ebx
cmp ebx, 0x1e977fa5
jne 0x4210d0
mov ecx, dword [esp + 0x3c]
mov esi, edx
mov dword [esp + 0x18], ecx
jmp 0x4210d0
mov esi, eax
cmp ebx, 0x61f337b1
je 0x4210d0
mov esi, ebx
cmp ebx, 0x6a5c085e
jne 0x4210d0
mov esi, dword [esp + 0x28]
jmp 0x4210d0
mov esi, 0x1e977fa5
jmp 0x4210d0
movzx ebx, byte [esp + 0x1f]
movzx ecx, byte [esp + 0x20]
mov esi, 0xe7c10b76
mov edi, 0x1e977fa5
mov bh, cl
xor bh, bl
test cl, cl
mov ecx, 0xe7c10b76
cmovne esi, edi
test bl, bl
cmove esi, ecx
test bh, bh
cmovne esi, edi
jmp 0x4210d0
mov esi, ebx
cmp ebx, 0xb074a89c
jne 0x4210d0
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
lea ebx, [esp + 0xe0]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
mov eax, 0x3ba2d76d
jmp 0x4206f0
cmp eax, 0xaeb8cb2f
je 0x421930
cmp eax, 0xb29b1e47
jne 0x4206f0
lea eax, [esp + 0xb0]
mov ecx, ebx
mov dword [esp], eax
call fcn.00436ed0
sub esp, 4
mov eax, dword [0x4ebfc0]
mov esi, 0x78068d7e
mov edi, 0x9418e87
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9418e87
jmp 0x421fe2
cmp eax, 0x16bc4c5b
je 0x421964
cmp eax, 0x274bbb05
jne 0x4206f0
mov eax, 0xad5f9d7d
jmp 0x4206f0
cmp eax, 0xf0e0de5a
je 0x421986
cmp eax, 0xf141ad83
jne 0x4206f0
cmp byte [esp + 0x32], 0
mov eax, 0x7f9ec912
mov ecx, 0x133fee88
cmovne eax, ecx
jmp 0x4206f0
cmp eax, 0x7d6e7c20
je 0x421990
cmp eax, 0x7f9ec912
jne 0x4206f0
mov eax, dword [0x4ebfc0]
mov edi, 0x8ce6481e
mov esi, 0xd8c82396
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd8c82396
jmp 0x422050
cmp eax, 0xa5662c0b
je 0x42199a
cmp eax, 0xabaaa0de
jne 0x4206f0
movzx eax, byte [ebp + 0x1c]
mov byte [esp + 0x35], al
mov eax, 0x83144ac4
jmp 0x4206f0
cmp eax, 0xf5ff37e
je 0x4219c0
cmp eax, 0xf8bbf2d
jne 0x4206f0
mov eax, 0x73a49b4
jmp 0x4206f0
cmp eax, 0xdf920e82
je 0x4219d9
cmp eax, 0xe3aedc9e
jne 0x4206f0
mov eax, dword [esp + 0x4c]
mov eax, 0x4a408cc4
jmp 0x4206f0
cmp eax, 0x6cb7b23d
je 0x4206a9
cmp eax, 0x6ccd6686
jne 0x4206f0
mov eax, 0x16120904
jmp 0x4206f0
cmp eax, 0xbe89e3f9
je 0x421b8d
cmp eax, 0xc1dbbed6
jne 0x4206f0
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0x92b9cbc9
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf1c2460e
jmp 0x4206d8
cmp eax, 0x4a408cc4
je 0x421bac
cmp eax, 0x4f8e9401
jne 0x4206f0
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0xa4a873f3
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf0e0de5a
jmp 0x4206d8
cmp eax, 0xfc4f6567
je 0x421bdc
cmp eax, 0xfd054bcb
jne 0x4206f0
mov eax, dword [esp + 0x70]
mov ecx, 0x7b426b5b
cmp eax, dword [esp + 0x74]
mov eax, 0x71b91e96
cmova eax, ecx
jmp 0x4206f0
cmp eax, 0x770173a9
jne 0x42206d
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x64]
movsx edx, byte [esp + 0x34]
mov esi, dword [esp + 0x68]
mov ebx, dword [esp + 0x6c]
vmovsd xmm0, qword [esp + 0x98]
vmovsd qword [esp + 4], xmm0
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 8]
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], esi
mov dword [esp], edx
call ebx
sub esp, 0x18
lea ebx, [esp + 0xe0]
mov eax, 0x7765a573
jmp 0x4206f0
cmp byte [esp + 0x35], 0
mov eax, 0xed032856
mov ecx, 0xc1dbbed6
cmovne eax, ecx
jmp 0x4206f0
mov ecx, 0x1fcb8653
mov dword [esp + 0x18], ebx
nop word cs:[eax + eax]
cmp ecx, 0x72ba7a5e
je 0x421bfb
cmp ecx, 0x1fcb8653
jne 0x4214c0
mov eax, dword [esp + 0x18]
mov ecx, 0x72ba7a5e
add eax, 0x10
jmp 0x4214c0
mov dword [esp + 0xa8], eax
mov ecx, ebx
mov eax, dword [esp + 0xa8]
mov esi, dword [eax]
call fcn.00418c20
lea edi, [ebp + 0xc]
lea edx, [esp + 0xa0]
vmovsd xmm0, qword [edi]
vmovsd qword [esp + 0x80], xmm0
mov ecx, dword [esp + 0x2c]
vmovsd xmm0, qword [esp + 0x80]
vmovsd qword [esp + 8], xmm0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00427290
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov edx, dword [ebp + 0x14]
mov esi, 0x64846ef2
mov dword [edi + 4], ecx
mov dword [edi], eax
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x20]
vmovsd xmm0, qword [edx + 0x20]
vmovsd qword [esp + 0xa0], xmm0
nop dword [eax + eax]
cmp esi, 0xe4110393
je 0x421cc0
cmp esi, 0x64846ef2
jne 0x421570
mov edx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov edx, dword [esp + 0x20]
mov esi, 0xe4110393
add edx, 0x20
jmp 0x421570
mov eax, 0x83f4d41
jmp 0x4206f0
mov eax, 0xf5ff37e
jmp 0x4206f0
cmp byte [esp + 0x36], 0
mov eax, 0x5c71feeb
mov ecx, 0x71b91e96
cmovne eax, ecx
jmp 0x4206f0
mov ecx, dword [ebp + 0x14]
lea esi, [esp + 0xa8]
mov dword [esp], esi
call fcn.0041a460
sub esp, 4
mov dword [esp], esi
call fcn.00425e90
mov ecx, esi
mov dword [esp + 0x38], eax
call fcn.0041a650
mov ecx, ebx
call section..text
mov eax, 0xabaaa0de
jmp 0x4206f0
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0x6029516d
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x74e482b7
jmp 0x4206d8
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x24]
sub ecx, dword [eax]
mov eax, 0x5bc17a2c
mov dword [esp + 0x24], ecx
jmp 0x4206f0
mov eax, 0x6aa7a55e
jmp 0x4206f0
mov eax, 0x51cc701b
nop dword [eax]
cmp eax, 0x755d49db
je 0x421d60
cmp eax, 0x51cc701b
jne 0x421670
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0xa8], eax
mov eax, 0x755d49db
jmp 0x421670
lea eax, [esp + 0xb0]
mov ecx, ebx
mov dword [esp], eax
call fcn.00436ed0
sub esp, 4
mov eax, 0xb29b1e47
jmp 0x4206f0
lea ecx, [ebp + 0xc]
movsx esi, byte [ebp + 0x18]
lea edx, [esp + 0x90]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x2c]
vmovsd xmm0, qword [esp + 0x88]
vmovsd qword [esp + 8], xmm0
mov dword [esp + 0x10], esi
mov dword [esp + 4], edx
mov dword [esp], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ecx
call fcn.00426fe0
mov eax, 0x16bc4c5b
jmp 0x4206f0
mov eax, dword [0x4ebfb8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
setne al
sete cl
cmp dword [0x4ebfb4], 0xa
setge dl
setl ah
or dl, al
xor ah, cl
mov ecx, 0x4c7d73a4
xor dl, 1
or dl, ah
mov eax, 0x36438a53
mov edx, 0x4e52496a
cmovne eax, ecx
mov ecx, 0x36438a53
cmovne ecx, edx
mov edx, 0x3bf0ecbf
nop
cmp edx, 0x3bf0ecbe
jle 0x4217a0
cmp edx, 0x3bf0ecbf
je 0x4217bb
cmp edx, 0x4c7d73a4
je 0x4217bf
cmp edx, 0x4e52496a
jne 0x421760
mov edx, dword [esp + 0x38]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x18]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov dword [esp + 0xa8], edx
mov edx, eax
jmp 0x421760
cmp edx, 0x3491c852
je 0x421dbd
cmp edx, 0x36438a53
jne 0x421760
mov edx, 0x4e52496a
jmp 0x421760
mov edx, ecx
jmp 0x421760
mov edx, 0x3491c852
jmp 0x421760
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xa8]
call fcn.00409ae0
mov eax, 0xce8f4358
jmp 0x4206f0
mov eax, 0x919f35a1
jmp 0x4206f0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov ecx, 0x1fcb8653
mov dword [esp + 0x18], ebx
mov dword [esp + 0x70], eax
nop word cs:[eax + eax]
cmp ecx, 0x72ba7a5e
je 0x421dfe
cmp ecx, 0x1fcb8653
jne 0x421810
mov eax, dword [esp + 0x18]
mov ecx, 0x72ba7a5e
add eax, 0x10
jmp 0x421810
mov eax, 0x51cc701b
nop word [eax + eax]
cmp eax, 0x755d49db
je 0x421e1c
cmp eax, 0x51cc701b
jne 0x421840
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0xa8], eax
mov eax, 0x755d49db
jmp 0x421840
mov eax, 0xf8bbf2d
mov dword [esp + 0x24], 0
jmp 0x4206f0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xa8]
lea edx, [esp + 0xb0]
mov dword [esp], edx
call eax
sub esp, 4
mov eax, 0x6029516d
jmp 0x4206f0
mov eax, dword [esp + 0x5c]
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x2c], eax
call fcn.0040fbe0
mov ecx, eax
xor ecx, 0xffffbfff
and ecx, eax
mov eax, 0xaeb8cb2f
mov dword [esp + 0x4c], ecx
jmp 0x4206f0
mov ecx, dword [ebp + 0x14]
call fcn.0040fbe0
mov ecx, eax
xor ecx, 0xfffffe3f
and ecx, eax
mov eax, 0x55811b61
cmp ecx, 0x40
setne byte [esp + 0x37]
jmp 0x4206f0
mov eax, 0xa5662c0b
jmp 0x4206f0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x44]
mov eax, 0x1fcb8653
mov dword [esp + 0x18], ebx
nop
cmp eax, 0x72ba7a5e
je 0x421e7d
cmp eax, 0x1fcb8653
jne 0x421910
mov ecx, dword [esp + 0x18]
mov eax, 0x72ba7a5e
add ecx, 0x10
jmp 0x421910
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0x4a408cc4
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe3aedc9e
jmp 0x4206d8
vmovsd xmm0, qword [esp + 0x90]
lea eax, [ebp + 0xc]
mov dword [esp + 0x24], 0
vmovsd qword [eax], xmm0
mov eax, 0xbe89e3f9
jmp 0x4206f0
mov eax, 0xa4a873f3
jmp 0x4206f0
mov eax, 0x7765a573
jmp 0x4206f0
mov eax, dword [0x4ebfc0]
mov esi, 0x25bc225
mov edi, 0x2b449ee
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2b449ee
jmp 0x421fe2
mov edx, dword [0x4ebfc0]
mov ecx, dword [0x4ebfbc]
mov esi, 0xac3d8c41
lea eax, [edx + 1]
jmp 0x4206bd
mov eax, dword [0x4ec3e8]
mov ecx, dword [0x4ec3e4]
mov esi, 0x1f1a8b14
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
setne al
sete byte [esp + 0x1f]
cmp ecx, 0xa
setge cl
setl byte [esp + 0x20]
mov edx, ecx
or cl, al
xor dl, al
xor cl, 1
mov eax, 0x159d370d
or cl, dl
mov ecx, 0xb074a89c
mov edx, 0x159d370d
cmovne eax, ecx
mov ecx, 0x61f337b1
cmovne edx, ecx
mov ecx, 0xf1721b5a
mov dword [esp + 0x28], edx
mov edx, 0xe7c10b76
cmovne edx, ecx
jmp 0x421a50
mov esi, 0x61f337b1
nop word cs:[eax + eax]
mov ebx, esi
cmp esi, 0x1f1a8b13
jg 0x421a90
cmp ebx, 0x159d370c
jg 0x421ad0
cmp ebx, 0xe7c10b76
je 0x421b25
cmp ebx, 0xf1721b5a
jne 0x421b60
mov esi, 0x21a30dcc
jmp 0x421a50
cmp ebx, 0x61f337b0
jg 0x421b00
cmp ebx, 0x1f1a8b14
je 0x421b2f
mov esi, ebx
cmp ebx, 0x21a30dcc
jne 0x421a50
mov ecx, dword [esp + 0x18]
mov esi, 0x6a5c085e
vmovsd xmm0, qword [ecx]
vmovsd qword [esp + 0xa8], xmm0
jmp 0x421a50
cmp ebx, 0x159d370d
je 0x421a41
mov esi, ebx
cmp ebx, 0x1e977fa5
jne 0x421a50
mov ecx, dword [esp + 0x3c]
mov esi, edx
mov dword [esp + 0x18], ecx
jmp 0x421a50
mov esi, eax
cmp ebx, 0x61f337b1
je 0x421a50
mov esi, ebx
cmp ebx, 0x6a5c085e
jne 0x421a50
mov esi, dword [esp + 0x28]
jmp 0x421a50
mov esi, 0x1e977fa5
jmp 0x421a50
movzx ebx, byte [esp + 0x1f]
movzx ecx, byte [esp + 0x20]
mov esi, 0xe7c10b76
mov edi, 0x1e977fa5
mov bh, cl
xor bh, bl
test cl, cl
mov ecx, 0xe7c10b76
cmovne esi, edi
test bl, bl
cmove esi, ecx
test bh, bh
cmovne esi, edi
jmp 0x421a50
mov esi, ebx
cmp ebx, 0xb074a89c
jne 0x421a50
mov eax, dword [esp + 0xa8]
mov eax, dword [esp + 0xac]
mov eax, 0xb753c55c
lea ebx, [esp + 0xe0]
jmp 0x4206f0
mov eax, dword [0x4ebfc0]
mov edi, 0x919f35a1
mov esi, 0xb51699a7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb51699a7
jmp 0x421df1
cmp dword [esp + 0x4c], 0
mov eax, dword [0x4ebfc0]
mov edi, 0xf141ad83
mov esi, 0xe3aedc9e
lea ecx, [eax + 1]
setne byte [esp + 0x32]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe3aedc9e
jmp 0x422050
mov eax, dword [0x4ebfc0]
mov esi, 0x5bc17a2c
mov edi, 0xede3f265
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xede3f265
jmp 0x421fda
mov dword [esp + 0xa8], eax
mov ecx, ebx
mov eax, dword [esp + 0xa8]
mov esi, dword [eax]
call fcn.00418c20
lea edi, [ebp + 0xc]
lea edx, [esp + 0xa0]
vmovsd xmm0, qword [edi]
vmovsd qword [esp + 0x80], xmm0
mov ecx, dword [esp + 0x2c]
vmovsd xmm0, qword [esp + 0x80]
vmovsd qword [esp + 8], xmm0
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00427290
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov edx, dword [ebp + 0x14]
mov esi, 0x64846ef2
mov dword [edi + 4], ecx
mov dword [edi], eax
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x20]
vmovsd xmm0, qword [edx + 0x20]
vmovsd qword [esp + 0xa0], xmm0
nop word cs:[eax + eax]
cmp esi, 0xe4110393
je 0x421ee1
cmp esi, 0x64846ef2
jne 0x421c90
mov edx, dword [esp + 0xa0]
mov edx, dword [esp + 0xa4]
mov edx, dword [esp + 0x20]
mov esi, 0xe4110393
add edx, 0x20
jmp 0x421c90
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x18]
mov dword [edi + 4], esi
mov dword [edi], edx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], eax
movsx esi, byte [ebp + 0x18]
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x2c]
vmovsd xmm0, qword [esp + 0x78]
vmovsd qword [esp + 8], xmm0
mov dword [esp + 0x10], esi
mov dword [esp + 4], edx
mov dword [esp], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ecx
call fcn.00426fe0
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0xa0]
call fcn.004098c0
mov eax, 0xbe18a25a
cmp eax, 0xdb0adbca
je 0x421f90
cmp eax, 0xbe18a25a
jne 0x421d40
mov ecx, dword [esp + 0xa0]
mov eax, 0xdb0adbca
jmp 0x421d40
mov eax, dword [esp + 0xa8]
lea esi, [esp + 0xc8]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp], esi
call eax
sub esp, 4
mov ecx, ebx
mov dword [esp], esi
call fcn.00436ed0
sub esp, 4
mov dword [esp + 0x18], esi
mov ecx, dword [esp + 0x18]
call fcn.004098c0
mov eax, 0xbe18a25a
nop dword [eax]
cmp eax, 0xdb0adbca
je 0x421fad
cmp eax, 0xbe18a25a
jne 0x421da0
mov ecx, dword [esp + 0x18]
mov eax, 0xdb0adbca
jmp 0x421da0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xa8]
lea edx, [esp + 0xb0]
mov dword [esp], edx
call eax
sub esp, 4
mov eax, dword [0x4ebfc0]
mov edi, 0x6ccd6686
mov esi, 0x74e482b7
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x74e482b7
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x422050
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xa8]
mov eax, dword [eax]
mov dword [esp + 0x74], eax
mov eax, 0xfd054bcb
jmp 0x4206f0
mov eax, dword [esp + 0xa8]
lea esi, [esp + 0xc8]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp], esi
call eax
sub esp, 4
mov ecx, ebx
mov dword [esp], esi
call fcn.00436ed0
sub esp, 4
mov dword [esp + 0x18], esi
mov ecx, dword [esp + 0x18]
call fcn.004098c0
mov eax, 0xbe18a25a
nop dword [eax + eax]
cmp eax, 0xdb0adbca
je 0x421fff
cmp eax, 0xbe18a25a
jne 0x421e60
mov ecx, dword [esp + 0x18]
mov eax, 0xdb0adbca
jmp 0x421e60
mov esi, dword [0x4ebfc0]
mov edx, dword [0x4ebfbc]
mov dword [esp + 0xa8], ecx
mov edi, 0xd51b092a
mov ecx, dword [esp + 0xa8]
lea eax, [esi + 1]
imul eax, esi
mov esi, 0xede3f265
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
lea ebx, [esp + 0xe0]
cmovne esi, edi
cmp eax, 0xffffffff
mov eax, esi
cmove eax, edi
cmp edx, 0xa
mov edx, dword [esp + 0x24]
cmovge eax, esi
sub edx, dword [ecx]
mov dword [esp + 0x24], edx
jmp 0x4206f0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xa8]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x18]
mov dword [edi + 4], esi
mov dword [edi], edx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x78], eax
movsx esi, byte [ebp + 0x18]
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x2c]
vmovsd xmm0, qword [esp + 0x78]
vmovsd qword [esp + 8], xmm0
mov dword [esp + 0x10], esi
mov dword [esp + 4], edx
mov dword [esp], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ecx
call fcn.00426fe0
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0xa0]
call fcn.004098c0
mov eax, 0xbe18a25a
nop word cs:[eax + eax]
cmp eax, 0xdb0adbca
je 0x42201c
cmp eax, 0xbe18a25a
jne 0x421f70
mov ecx, dword [esp + 0xa0]
mov eax, 0xdb0adbca
jmp 0x421f70
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xa8]
call fcn.00409ae0
mov eax, 0x25bc225
jmp 0x4206f0
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xa8]
call fcn.00409ae0
mov eax, dword [0x4ebfc0]
mov esi, 0x274bbb05
mov edi, 0xf1c2460e
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf1c2460e
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4ebfbc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x4206f0
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xa8]
call fcn.00409ae0
mov eax, 0x92b9cbc9
jmp 0x4206f0
mov dword [esp + 0xa8], ecx
mov ecx, dword [esp + 0xa8]
call fcn.00409ae0
mov eax, dword [0x4ebfc0]
mov edi, 0x7d6e7c20
mov esi, 0x2b449ee
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2b449ee
sete cl
cmove eax, edi
cmp dword [0x4ebfbc], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x4206f0
cmp eax, 0x7765a573
jne 0x4206f0
mov ecx, dword [esp + 0xf8]
xor ecx, ebp
call fcn.004392e0
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18