Function at 0x426cc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x434ab8
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x44c054]
xor eax, esp
mov dword [esp + 0x8c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44c054]
xor eax, esp
push eax
lea eax, [esp + 0xa4]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x24], ebp
push 0x20
push 0xe
call fcn.004276f0
mov ebx, dword [esp + 0xb4]
mov edi, eax
mov ecx, dword [ebx + 4]
sub ecx, dword [ebx]
sar ecx, 1
mov dword [edi + 8], ecx
mov eax, dword [ebx + 0x10]
sub eax, dword [ebx + 0xc]
sar eax, 1
shr eax, 1
mov dword [edi + 0xc], eax
mov eax, dword [ebx + 0x2c]
sub eax, dword [ebx + 0x28]
sar eax, 1
mov dword [edi + 0x10], eax
mov esi, dword [ebx + 0x1c]
mov dword [edi + 0x14], esi
mov edx, dword [ebx + 0x20]
mov dword [edi + 0x18], edx
mov eax, dword [ebp]
test dword [eax + 0x14], 0x100000
je 0x426d87
mov eax, esi
and eax, dword [ebp + 0x44]
cmp eax, dword [ebp + 0x44]
je 0x426d61
mov eax, esi
and eax, dword [ebp + 0x48]
cmp eax, dword [ebp + 0x48]
jne 0x426d69
mov eax, dword [ebp + 0x4c]
or eax, esi
mov dword [edi + 0x14], eax
mov ecx, dword [ebp + 0x44]
mov eax, edx
and eax, ecx
cmp eax, ecx
je 0x426d7f
mov ecx, dword [ebp + 0x48]
mov eax, edx
and eax, ecx
cmp eax, ecx
jne 0x426d87
mov eax, dword [ebp + 0x4c]
or eax, edx
mov dword [edi + 0x18], eax
mov al, byte [ebx + 0x18]
mov byte [edi + 0x1c], al
mov al, byte [ebx + 0x19]
test al, al
sete al
mov byte [edi + 0x1d], al
mov eax, dword [ebp]
mov esi, dword [ebx]
sub edi, dword [eax + 0x138]
mov dword [esp + 0x3c], edi
mov edi, dword [ebx + 4]
cmp esi, edi
je 0x426e4a
mov ebx, dword [ebp]
xor ecx, ecx
cmp byte [esi + 1], cl
mov eax, dword [ebx + 0x134]
setne cl
sub eax, dword [ebx + 0x13c]
add ebx, 0x134
add ecx, 2
mov dword [esp + 0x18], ecx
cmp eax, ecx
jae 0x426ded
mov edx, ecx
sub edx, dword [ebx + 4]
mov ecx, ebx
add edx, dword [ebx + 8]
call fcn.00433dd0
mov ecx, dword [esp + 0x18]
mov edx, dword [ebx + 8]
lea eax, [ecx + edx]
mov dword [ebx + 8], eax
cmp byte [ebp + 0xc], 0
mov bl, byte [esi]
je 0x426e0d
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
movzx eax, bl
mov bl, byte [eax + ecx + 0x104]
mov byte [edx], bl
mov bl, byte [esi + 1]
test bl, bl
je 0x426e34
cmp byte [ebp + 0xc], 0
je 0x426e2b
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
movzx eax, bl
mov bl, byte [eax + ecx + 0x104]
mov byte [edx + 1], bl
mov byte [edx + 2], 0
jmp 0x426e38
mov byte [edx + 1], 0
add esi, 2
cmp esi, edi
jne 0x426db2
mov ebx, dword [esp + 0xb4]
mov esi, dword [ebx + 0xc]
mov edi, dword [ebx + 0x10]
cmp esi, edi
je 0x4274b1
mov bl, byte [ebp + 0xc]
mov dh, byte [esi]
mov dl, byte [esi + 1]
test bl, bl
je 0x426e73
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
movzx eax, dh
mov dh, byte [eax + ecx + 0x104]
mov byte [esp + 0x34], dh
test bl, bl
je 0x426e8a
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
movzx eax, dl
mov dl, byte [eax + ecx + 0x104]
mov cl, byte [esi + 3]
mov bh, byte [esi + 2]
mov byte [esp + 0x35], dl
mov byte [esp + 0x17], cl
test bl, bl
je 0x426eaf
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
movzx eax, bh
mov bh, byte [eax + ecx + 0x104]
mov cl, byte [esp + 0x17]
mov byte [esp + 0x2c], bh
test bl, bl
je 0x426ecc
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
movzx eax, byte [esp + 0x17]
mov cl, byte [eax + ecx + 0x104]
mov byte [esp + 0x17], cl
mov byte [esp + 0x2d], cl
add esi, 4
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], 0
mov byte [esp + 0x58], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
mov eax, dword [ebp]
mov byte [esp + 0xac], 1
test dword [eax + 0x14], 0x200000
je 0x4271ef
mov byte [esp + 0x1d], cl
lea ecx, [esp + 0x19]
test dl, dl
lea eax, [esp + 0x1a]
cmove eax, ecx
mov ecx, dword [ebp + 4]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0x24], dh
mov byte [esp + 0x25], dl
mov byte [esp + 0x26], 0
mov byte [esp + 0x28], bh
mov byte [esp + 0x2a], 0
call fcn.00431540
mov ebx, eax
lea eax, [esp + 0x58]
cmp eax, ebx
je 0x426fd5
cmp dword [esp + 0x6c], 0x10
jb 0x426f77
push dword [esp + 0x58]
call fcn.0041d638
add esp, 4
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], 0
mov byte [esp + 0x58], 0
cmp dword [ebx + 0x14], 0x10
jae 0x426faa
mov eax, dword [ebx + 0x10]
inc eax
je 0x426fb6
push eax
lea eax, [esp + 0x5c]
push ebx
push eax
call dword [0x43a30c]
add esp, 0xc
jmp 0x426fb6
mov eax, dword [ebx]
mov dword [esp + 0x58], eax
mov dword [ebx], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x68], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x6c], eax
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], 0
mov byte [ebx], 0
cmp dword [esp + 0x84], 0x10
jb 0x426feb
push dword [esp + 0x70]
call fcn.0041d638
add esp, 4
cmp byte [esp + 0x1d], 0
lea ecx, [esp + 0x1d]
lea eax, [esp + 0x1e]
cmove eax, ecx
mov ecx, dword [ebp + 4]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.00431540
mov ebx, eax
lea eax, [esp + 0x40]
cmp eax, ebx
je 0x427089
cmp dword [esp + 0x54], 0x10
jb 0x42702b
push dword [esp + 0x40]
call fcn.0041d638
add esp, 4
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
cmp dword [ebx + 0x14], 0x10
jae 0x42705e
mov eax, dword [ebx + 0x10]
inc eax
je 0x42706a
push eax
lea eax, [esp + 0x44]
push ebx
push eax
call dword [0x43a30c]
add esp, 0xc
jmp 0x42706a
mov eax, dword [ebx]
mov dword [esp + 0x40], eax
mov dword [ebx], 0
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x50], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x54], eax
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], 0
mov byte [ebx], 0
cmp dword [esp + 0x84], 0x10
jb 0x42709f
push dword [esp + 0x70]
call fcn.0041d638
add esp, 4
cmp dword [esp + 0x68], 0
jne 0x42713f
cmp dword [esp + 0x6c], 0x10
mov ecx, 0xf
mov edx, 1
mov dword [esp + 0x84], ecx
mov word [esp + 0x70], 0
mov dword [esp + 0x80], edx
jb 0x4270ea
push dword [esp + 0x58]
call fcn.0041d638
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
add esp, 4
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], 0
mov byte [esp + 0x58], 0
cmp ecx, 0x10
jae 0x42712f
lea eax, [edx + 1]
test eax, eax
je 0x427137
push eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x60]
push eax
call dword [0x43a30c]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
add esp, 0xc
jmp 0x427137
mov eax, dword [esp + 0x70]
mov dword [esp + 0x58], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
cmp dword [esp + 0x50], 0
jne 0x427348
cmp dword [esp + 0x54], 0x10
mov ecx, 0xf
mov edx, 1
mov dword [esp + 0x84], ecx
mov word [esp + 0x70], 0
mov dword [esp + 0x80], edx
jb 0x42718a
push dword [esp + 0x40]
call fcn.0041d638
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
add esp, 4
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
cmp ecx, 0x10
jae 0x4271da
lea eax, [edx + 1]
test eax, eax
je 0x4271e2
push eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x48]
push eax
call dword [0x43a30c]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
add esp, 0xc
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ecx
jmp 0x427348
mov eax, dword [esp + 0x70]
mov dword [esp + 0x40], eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], ecx
jmp 0x427348
lea ecx, [esp + 0x58]
test dl, dl
je 0x427250
push dword [esp + 0x34]
push 1
push 0
call fcn.0042a8b0
cmp dword [esp + 0x6c], 0x10
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x58]
cmovae ecx, dword [esp + 0x58]
add eax, ecx
cmp dword [esp + 0x6c], 0x10
lea ecx, [esp + 0x58]
cmovae ecx, dword [esp + 0x58]
test eax, eax
jne 0x42723c
push dword [esp + 0x35]
lea ecx, [esp + 0x5c]
push 1
push eax
call fcn.0042a8b0
jmp 0x4272a4
push dword [esp + 0x35]
sub eax, ecx
push 1
push eax
lea ecx, [esp + 0x64]
call fcn.0042a8b0
jmp 0x4272a4
lea eax, [esp + 0x70]
push eax
mov dword [esp + 0x88], 0xf
mov byte [esp + 0x74], dh
mov dword [esp + 0x84], 1
mov byte [esp + 0x75], 0
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.004033ed
cmp dword [esp + 0x84], 0x10
jb 0x4272a4
push dword [esp + 0x70]
call fcn.0041d638
add esp, 4
mov al, byte [esp + 0x17]
test al, al
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x40]
je 0x427318
cmp dword [esp + 0x54], 0x10
cmovae ecx, dword [esp + 0x40]
add eax, ecx
cmp dword [esp + 0x54], 0x10
lea ecx, [esp + 0x40]
cmovae ecx, dword [esp + 0x40]
test eax, eax
je 0x4272d4
sub eax, ecx
push dword [esp + 0x2c]
lea ecx, [esp + 0x44]
push 1
push eax
call fcn.0042a8b0
cmp dword [esp + 0x54], 0x10
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x40]
cmovae ecx, dword [esp + 0x40]
add eax, ecx
cmp dword [esp + 0x54], 0x10
lea ecx, [esp + 0x40]
cmovae ecx, dword [esp + 0x40]
test eax, eax
jne 0x427310
push dword [esp + 0x2d]
jmp 0x42733c
push dword [esp + 0x2d]
sub eax, ecx
jmp 0x42733c
cmp dword [esp + 0x54], 0x10
cmovae ecx, dword [esp + 0x40]
add eax, ecx
cmp dword [esp + 0x54], 0x10
lea ecx, [esp + 0x40]
cmovae ecx, dword [esp + 0x40]
test eax, eax
je 0x427338
sub eax, ecx
push dword [esp + 0x2c]
push 1
push eax
lea ecx, [esp + 0x4c]
call fcn.0042a8b0
cmp dword [esp + 0x6c], 0x10
push dword [esp + 0x68]
lea eax, [esp + 0x5c]
cmovae eax, dword [esp + 0x5c]
push eax
push dword [esp + 0x58]
lea ecx, [esp + 0x4c]
push 0
call fcn.004035c3
test eax, eax
js 0x427510
mov eax, dword [esp + 0x50]
mov ebx, dword [ebp]
mov ecx, dword [esp + 0x68]
mov edx, dword [ebx + 0x13c]
add eax, 2
add ebx, 0x134
add ecx, eax
mov eax, dword [ebx]
sub eax, edx
mov dword [esp + 0x20], ecx
cmp eax, ecx
jae 0x4273aa
sub edx, dword [ebx + 4]
add edx, ecx
mov ecx, ebx
call fcn.00433dd0
mov ecx, dword [esp + 0x20]
mov eax, dword [ebx + 8]
mov dword [esp + 0x20], eax
mov ebp, dword [esp + 0x20]
add eax, ecx
mov dword [ebx + 8], eax
cmp dword [esp + 0x6c], 0x10
mov ecx, dword [esp + 0x68]
lea edx, [esp + 0x58]
cmovae edx, dword [esp + 0x58]
add edx, ecx
cmp dword [esp + 0x6c], 0x10
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x58]
cmovae ecx, dword [esp + 0x58]
mov ebx, ebp
cmp ecx, edx
je 0x4273f8
mov al, byte [ecx]
inc ecx
mov byte [ebx], al
lea ebx, [ebx + 1]
cmp ecx, edx
jne 0x4273e6
mov eax, dword [esp + 0x68]
jmp 0x4273fc
mov eax, dword [esp + 0x28]
mov byte [eax + ebp], 0
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x50]
inc ebp
add eax, ebp
cmp dword [esp + 0x54], 0x10
lea edx, [esp + 0x40]
cmovae edx, dword [esp + 0x40]
add edx, ecx
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x40]
cmovae ecx, dword [esp + 0x40]
mov ebp, eax
mov dword [esp + 0x28], eax
mov ebx, ebp
cmp ecx, edx
je 0x427450
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [ebx], al
inc ebx
cmp ecx, edx
jne 0x427440
mov eax, dword [esp + 0x50]
jmp 0x427454
mov eax, dword [esp + 0x20]
mov byte [eax + ebp], 0
cmp dword [esp + 0x54], 0x10
jb 0x42746b
push dword [esp + 0x40]
call fcn.0041d638
add esp, 4
cmp dword [esp + 0x6c], 0x10
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
mov dword [esp + 0xac], 0xffffffff
jb 0x42749e
push dword [esp + 0x58]
call fcn.0041d638
add esp, 4
mov ebp, dword [esp + 0x24]
cmp esi, edi
jne 0x426e58
mov ebx, dword [esp + 0xb4]
mov eax, dword [ebx + 0x28]
mov esi, dword [ebx + 0x2c]
mov dword [esp + 0x24], eax
cmp eax, esi
je 0x427662
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], 0
mov byte [esp + 0x88], 0
mov dl, byte [eax + 1]
lea ecx, [eax + 1]
mov dword [esp + 0xac], 2
test dl, dl
je 0x427552
mov al, byte [eax]
mov byte [esp + 0x18], al
lea eax, [esp + 0x1a]
push eax
mov byte [esp + 0x1d], dl
mov byte [esp + 0x1e], 0
lea eax, [esp + 0x1c]
jmp 0x427553
cmp dword [esp + 0x54], 0x10
jb 0x427523
push dword [esp + 0x40]
call fcn.0041d638
add esp, 4
cmp dword [esp + 0x6c], 0x10
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
jb 0x42754b
push dword [esp + 0x58]
call fcn.0041d638
add esp, 4
xor eax, eax
jmp 0x427670
push ecx
mov ecx, dword [ebp + 4]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.004315a0
mov edi, eax
lea eax, [esp + 0x88]
cmp eax, edi
je 0x4275b2
cmp dword [esp + 0x9c], 0x10
jb 0x427587
push dword [esp + 0x88]
call fcn.0041d638
add esp, 4
push edi
lea ecx, [esp + 0x8c]
mov dword [esp + 0xa0], 0xf
mov dword [esp + 0x9c], 0
mov byte [esp + 0x8c], 0
call fcn.004033ed
cmp dword [esp + 0x84], 0x10
jb 0x4275c8
push dword [esp + 0x70]
call fcn.0041d638
add esp, 4
cmp dword [esp + 0x98], 0
je 0x42769a
lea ecx, [esp + 0x88]
call fcn.00403532
mov ecx, dword [ebp]
lea edx, [eax + 1]
add ecx, 0x134
call fcn.00429940
mov ebx, eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x8c]
call fcn.00402499
mov edi, eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x8c]
call fcn.00402485
push ebx
push dword [edi]
push dword [eax]
call fcn.00421920
add esp, 0xc
lea ecx, [esp + 0x88]
call fcn.00403532
lea ecx, [esp + 0x24]
mov byte [eax + ebx], 0
call fcn.00424520
lea ecx, [esp + 0x88]
mov dword [esp + 0xac], 0xffffffff
call fcn.004023b1
mov eax, dword [esp + 0x24]
cmp eax, esi
jne 0x4274c3
push dword [esp + 0x3c]
mov ecx, ebp
call fcn.0042a8a0
mov dword [ebp + 8], eax
mov ecx, dword [esp + 0xa4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.0041d508
add esp, 0x9c
ret 8
mov eax, dword [esp + 0x9c]
cmp eax, 0x10
jb 0x4276c7
inc eax
push eax
push dword [esp + 0x8c]
lea eax, [esp + 0x1f]
push eax
lea ecx, [esp + 0x94]
call fcn.0040368b
mov ecx, eax
call fcn.00403d8e
push 0
lea ecx, [esp + 0x8c]
mov dword [esp + 0xa0], 0xf
call fcn.0040362c
xor eax, eax
jmp 0x427670